Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/323830343a386161343a653030303a3a2f33372d3337203d3e20323733363833.roa
File:                     323830343a386161343a653030303a3a2f33372d3337203d3e20323733363833.roa (raw, json)
Hash identifier:          rGsMHjBEA/4kw7xlOk9hBoUYdP3JpDkbGJ/0SGy6fOo=
Subject key identifier:   1F:E6:71:1B:0D:16:FF:25:53:55:D1:08:B2:16:84:7F:35:07:4D:EF
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       439C1ED47554AE3E0AEE8D26D6DD5CC6D50276CF
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/323830343a386161343a653030303a3a2f33372d3337203d3e20323733363833.roa
Signing time:             Mon 02 Dec 2024 21:14:11 +0000
ROA not before:           Mon 02 Dec 2024 21:09:11 +0000
ROA not after:            Mon 01 Dec 2025 21:14:11 +0000
asID:                     273683
IP address blocks:        2804:8aa4:e000::/37 maxlen: 37
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:9c:1e:d4:75:54:ae:3e:0a:ee:8d:26:d6:dd:5c:c6:d5:02:76:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Dec  2 21:09:11 2024 GMT
            Not After : Dec  1 21:14:11 2025 GMT
        Subject: CN=1FE6711B0D16FF255355D108B216847F35074DEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:8a:58:ea:0b:de:5a:c0:c1:ea:53:5c:f5:1b:
                    b5:3d:46:1d:10:db:76:91:96:48:1e:fa:3d:95:6c:
                    02:b7:6d:93:d6:c9:10:d7:33:87:95:46:d4:fe:4a:
                    7d:f0:e8:f4:2c:65:78:f3:52:50:b0:1c:48:ad:47:
                    1c:37:15:f2:5e:eb:7d:51:73:49:4a:57:e1:63:5f:
                    fa:da:fd:5a:df:bf:59:38:29:1e:4f:63:90:7f:4e:
                    c3:75:7b:3c:b4:f7:e3:86:3c:c2:08:f1:e5:71:0f:
                    2c:3d:51:85:a2:e2:38:83:f3:2d:e5:b6:33:5d:e3:
                    a6:ca:ef:9c:03:c8:ec:33:00:e0:fc:85:0f:37:f5:
                    5d:c4:5b:a9:d7:a5:94:7c:42:f6:81:73:ca:5d:ce:
                    73:de:24:af:d2:89:6d:05:63:f0:68:6d:25:2e:2a:
                    bb:f6:80:c6:19:fd:d1:00:db:36:32:75:fc:e3:51:
                    b5:57:70:ce:47:16:5a:91:fa:7f:d7:a8:8a:17:f8:
                    ea:6a:0b:b6:ba:8d:75:fb:ea:44:49:de:4e:7d:2c:
                    4d:17:91:ba:1e:8b:04:73:bc:e7:20:7d:1f:8c:ae:
                    a1:80:56:00:44:36:4c:57:13:f7:2c:5f:67:ad:8b:
                    6d:fc:0f:b2:b8:c8:8e:de:22:3e:55:a9:26:a1:06:
                    82:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:E6:71:1B:0D:16:FF:25:53:55:D1:08:B2:16:84:7F:35:07:4D:EF
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/323830343a386161343a653030303a3a2f33372d3337203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8aa4:e000::/37

    Signature Algorithm: sha256WithRSAEncryption
         95:2b:72:79:a0:e7:9b:30:f0:18:08:5d:7c:d3:62:83:57:14:
         a4:e8:98:6b:d1:e7:57:a3:bd:86:b6:23:ee:21:77:5c:b6:48:
         ee:b4:a5:f3:d6:84:c9:d3:f8:48:a7:0f:00:65:81:df:08:dd:
         96:54:76:24:ce:01:55:3b:67:34:01:da:7f:b4:a2:9d:b3:ce:
         04:84:e3:08:ba:fa:56:cd:70:fc:9e:0b:c4:e5:13:ff:e1:2e:
         ca:3a:ae:64:e9:67:f0:6a:72:88:bf:a3:07:28:d9:b9:42:cc:
         86:a3:83:42:cc:eb:06:15:2d:bc:72:68:43:52:d0:a4:07:dd:
         10:17:30:4d:b7:50:64:ca:c7:75:24:1b:48:52:4d:77:9d:9a:
         c8:2c:d5:4e:bb:59:4a:d3:b3:19:75:03:3e:99:ef:b4:13:86:
         d2:cd:b9:b0:e4:66:a4:26:59:30:6e:8a:50:3f:04:90:b5:dd:
         67:be:31:8d:2c:95:66:b2:89:38:28:b9:5f:7b:35:50:0e:78:
         d4:9d:2e:91:c6:c8:78:43:74:8f:6f:05:9f:5b:66:23:39:25:
         d0:b5:f8:c6:8b:69:c3:10:e0:51:e4:25:3d:26:3a:5a:ae:d2:
         ac:d8:c4:6e:b4:f7:cd:28:31:26:2c:30:b7:29:45:cf:cf:84:
         d6:e6:a3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:26 2025 by rpki-client