Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/323830343a346665343a343030303a3a2f33342d3334203d3e203533303836.roa
File:                     323830343a346665343a343030303a3a2f33342d3334203d3e203533303836.roa (raw, json)
Hash identifier:          GNAMlBkBsAHXOwuVIbv7lRl2PkEihRHZZsTyVuLQT5A=
Subject key identifier:   93:B3:FA:93:84:EA:AE:1B:C3:87:4D:83:35:D7:0A:A3:D0:8D:BB:47
Certificate issuer:       /CN=734B66FA6878EDCF866CF08634B1680301F14295
Certificate serial:       5EAC3DD3E6A2373DDDA704900394D26AA58A98FA
Authority key identifier: 73:4B:66:FA:68:78:ED:CF:86:6C:F0:86:34:B1:68:03:01:F1:42:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/323830343a346665343a343030303a3a2f33342d3334203d3e203533303836.roa
Signing time:             Thu 06 Mar 2025 08:45:21 +0000
ROA not before:           Thu 06 Mar 2025 08:40:21 +0000
ROA not after:            Thu 05 Mar 2026 08:45:21 +0000
asID:                     53086
IP address blocks:        2804:4fe4:4000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:ac:3d:d3:e6:a2:37:3d:dd:a7:04:90:03:94:d2:6a:a5:8a:98:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=734B66FA6878EDCF866CF08634B1680301F14295
        Validity
            Not Before: Mar  6 08:40:21 2025 GMT
            Not After : Mar  5 08:45:21 2026 GMT
        Subject: CN=93B3FA9384EAAE1BC3874D8335D70AA3D08DBB47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:e9:59:98:36:27:8d:60:0e:ef:ab:e4:61:a3:
                    b1:8e:70:87:1b:ae:05:66:80:94:e3:c0:6a:2a:f9:
                    c9:3b:1c:8b:ce:8b:ed:c9:aa:b3:00:62:3b:de:a0:
                    c8:98:25:0f:e1:a2:e5:5c:81:bb:c3:1a:83:5e:90:
                    77:58:f1:86:32:45:36:23:d9:93:7c:a5:57:91:68:
                    73:ab:2e:ef:37:e5:65:19:a7:0f:f4:86:6f:cb:52:
                    6d:9d:50:75:70:e6:79:9f:52:52:2f:a0:88:17:2c:
                    05:30:dd:0c:66:cf:7f:05:00:08:e5:0c:3f:78:e8:
                    a2:93:ec:e1:82:98:08:16:cd:9c:97:6b:75:b0:bc:
                    79:32:68:b3:5e:50:10:2f:b7:60:09:7a:0d:6b:a8:
                    c2:eb:52:b7:2d:6c:be:2e:65:fc:cf:a9:50:ce:b4:
                    dc:5a:80:60:d7:91:1d:ea:2c:41:ee:7e:d6:a3:da:
                    b9:a3:70:ae:f2:6b:3e:76:82:cb:b4:47:f2:77:35:
                    61:5d:5a:f9:33:3c:6a:2b:c0:96:90:3c:4f:cc:d3:
                    07:7a:51:c0:d0:46:bc:62:1d:5a:98:d9:3d:83:6a:
                    25:97:50:eb:ff:11:3f:2f:28:69:a1:99:0d:a3:20:
                    4b:d6:ac:73:31:79:8a:14:b1:35:96:5d:ae:c9:3a:
                    7e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:B3:FA:93:84:EA:AE:1B:C3:87:4D:83:35:D7:0A:A3:D0:8D:BB:47
            X509v3 Authority Key Identifier:
                keyid:73:4B:66:FA:68:78:ED:CF:86:6C:F0:86:34:B1:68:03:01:F1:42:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/323830343a346665343a343030303a3a2f33342d3334203d3e203533303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4fe4:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         08:4a:43:73:cc:fc:76:d8:0b:24:93:b7:86:c2:7e:bc:11:6a:
         4a:8c:6c:6d:08:d6:97:bf:5c:8e:16:8c:e1:99:93:c2:d5:5e:
         01:ed:d0:d5:15:55:3b:07:80:00:09:e4:83:cf:de:b9:d4:79:
         8d:ae:8a:b9:71:f0:6a:fa:62:ab:81:62:2c:8e:d9:93:55:9f:
         e7:b4:c2:eb:69:99:9c:da:28:c5:7c:8f:59:42:3c:18:aa:fa:
         24:3b:75:9f:4c:a5:9c:ea:42:19:ae:e1:2b:f7:4e:79:cd:e5:
         ce:d8:83:b0:ef:42:82:2e:58:d1:35:9d:70:9c:60:21:f0:e1:
         49:fa:09:5f:43:cf:be:19:29:3a:3c:8e:f6:2f:51:f7:73:30:
         ba:d5:30:27:c5:29:7f:4e:bc:21:0e:68:39:85:8c:5e:5b:26:
         e7:af:5e:06:59:72:0b:df:a6:76:73:cb:6f:56:84:bb:3f:76:
         2b:08:27:c0:e5:23:e6:3b:82:64:4b:c1:e1:bf:c5:9a:8f:18:
         6e:2d:66:a9:f2:90:33:29:4c:2c:90:1a:b8:8a:d0:8a:4f:63:
         af:ea:4b:06:80:4b:45:5c:1d:42:45:66:20:60:15:c1:b4:c3:
         b6:d5:a7:d3:b7:6a:c9:51:9e:46:65:d0:12:94:0f:be:8f:55:
         4a:53:87:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 05:04:24 2025 by rpki-client