Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/323830343a346665343a633030303a3a2f33342d3334203d3e203533303836.roa
File:                     323830343a346665343a633030303a3a2f33342d3334203d3e203533303836.roa (raw, json)
Hash identifier:          pogzkgFYIMOF2DOMFjZEoSfWzuQsXy1WUukfO9XuVbw=
Subject key identifier:   FE:C4:8E:B0:69:18:DD:D7:4F:CD:86:D3:90:0E:02:4B:88:E5:E6:92
Certificate issuer:       /CN=734B66FA6878EDCF866CF08634B1680301F14295
Certificate serial:       5A8ABA72C27525C3C5D72358DE1F3312F935E473
Authority key identifier: 73:4B:66:FA:68:78:ED:CF:86:6C:F0:86:34:B1:68:03:01:F1:42:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/323830343a346665343a633030303a3a2f33342d3334203d3e203533303836.roa
Signing time:             Thu 06 Mar 2025 08:45:20 +0000
ROA not before:           Thu 06 Mar 2025 08:40:20 +0000
ROA not after:            Thu 05 Mar 2026 08:45:20 +0000
asID:                     53086
IP address blocks:        2804:4fe4:c000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:8a:ba:72:c2:75:25:c3:c5:d7:23:58:de:1f:33:12:f9:35:e4:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=734B66FA6878EDCF866CF08634B1680301F14295
        Validity
            Not Before: Mar  6 08:40:20 2025 GMT
            Not After : Mar  5 08:45:20 2026 GMT
        Subject: CN=FEC48EB06918DDD74FCD86D3900E024B88E5E692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:73:4a:c5:d3:4e:2f:3b:c1:b3:83:9c:ea:53:
                    a6:43:e8:b5:3c:bc:b7:b2:a8:00:08:5a:26:7a:b0:
                    eb:f5:bf:0c:82:32:15:11:19:f5:12:1d:47:19:d8:
                    98:26:a0:81:19:e6:a6:b8:a9:69:a1:9b:d9:26:b5:
                    ab:e5:d7:c6:39:42:5f:a8:90:d0:de:98:95:2c:eb:
                    14:f0:14:a7:fe:da:e6:87:79:30:d1:ae:3f:66:7c:
                    b8:a9:4f:a7:38:db:6c:ef:58:b3:ae:e0:f5:ac:b0:
                    61:8b:28:1c:bc:9f:41:5f:dc:99:d6:0c:47:c9:58:
                    a7:11:7d:eb:12:77:b5:a3:2e:88:53:d9:16:fe:89:
                    00:c6:23:ad:f4:2e:d2:99:15:fa:7f:ae:b9:20:f0:
                    ce:9f:7d:8b:f0:d6:b6:fa:16:12:45:32:e6:18:fc:
                    91:b1:df:3d:ed:7c:31:cc:ba:41:2f:32:28:53:1e:
                    bd:2a:20:c3:87:9f:ef:6f:fc:72:a6:81:8a:8f:95:
                    d3:f1:43:b5:82:a9:5b:4f:13:94:39:f2:2f:54:ae:
                    86:7b:17:a6:3c:88:b9:3a:fe:d1:f6:c3:dc:df:4d:
                    bf:af:1b:b9:a6:97:c8:b0:f2:31:d7:99:8b:10:dc:
                    24:42:c0:de:99:32:1c:d8:f5:bf:1a:b9:5b:cb:65:
                    a3:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:C4:8E:B0:69:18:DD:D7:4F:CD:86:D3:90:0E:02:4B:88:E5:E6:92
            X509v3 Authority Key Identifier:
                keyid:73:4B:66:FA:68:78:ED:CF:86:6C:F0:86:34:B1:68:03:01:F1:42:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/323830343a346665343a633030303a3a2f33342d3334203d3e203533303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4fe4:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         34:29:c9:a3:85:e4:00:52:58:4d:8d:d8:91:92:b3:13:a0:77:
         33:b5:9b:f8:5b:cc:f3:52:ad:a0:b3:80:86:f7:af:52:fd:d4:
         2c:8d:c3:de:89:96:4a:19:8e:f7:e0:0d:8b:bc:d2:b6:32:4c:
         a5:77:f0:f8:22:32:fe:e3:5e:6f:f8:10:72:fb:e4:e5:b4:3c:
         93:47:da:1d:24:6b:f0:10:bd:19:99:05:68:79:9f:c4:87:af:
         5b:37:0d:13:db:1a:16:90:27:f7:e9:77:76:2d:de:6b:b3:68:
         be:c0:ad:37:59:13:21:78:7b:38:e6:86:35:dd:b8:a7:52:2a:
         61:b1:90:ef:54:d9:ba:14:89:78:0e:ac:65:78:09:b7:2b:6e:
         d0:2f:6f:49:e1:0e:1a:2c:b0:43:ab:eb:52:3c:10:87:55:5c:
         a8:b4:bb:b3:a5:d4:82:bc:81:a2:0b:ab:45:b8:06:53:b0:8e:
         6a:74:64:d2:4e:2b:73:95:a3:27:c2:7d:30:41:0e:8a:4f:12:
         d2:bf:cf:05:a7:20:3b:45:75:4f:bf:e6:8a:89:e9:d4:66:6f:
         db:98:ed:f2:c5:5b:3a:98:8c:e8:21:40:e6:30:cb:d0:31:bb:
         cb:7c:f4:82:11:7c:ef:53:f3:e5:84:45:d2:3c:36:59:28:e8:
         4a:c4:35:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:07:43 2025 by rpki-client