Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/323830343a376537303a3a2f33342d3334203d3e20323731363234.roa
File:                     323830343a376537303a3a2f33342d3334203d3e20323731363234.roa (raw, json)
Hash identifier:          /3CiphCgKsiLtB1bxL9c0SnJxWSoUDguu45u7D1jLgs=
Subject key identifier:   8E:61:32:9A:DD:B9:26:C4:55:0B:C8:C8:06:B4:E6:50:CE:A4:9A:F2
Certificate issuer:       /CN=6BD10BD7311C36E4427262C587B0519198C93849
Certificate serial:       22708443AF5DA015DCE4E9987A3D150A1E2F28B2
Authority key identifier: 6B:D1:0B:D7:31:1C:36:E4:42:72:62:C5:87:B0:51:91:98:C9:38:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BD10BD7311C36E4427262C587B0519198C93849.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/323830343a376537303a3a2f33342d3334203d3e20323731363234.roa
Signing time:             Tue 11 Feb 2025 17:58:17 +0000
ROA not before:           Tue 11 Feb 2025 17:53:17 +0000
ROA not after:            Tue 10 Feb 2026 17:58:17 +0000
asID:                     271624
IP address blocks:        2804:7e70::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:70:84:43:af:5d:a0:15:dc:e4:e9:98:7a:3d:15:0a:1e:2f:28:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BD10BD7311C36E4427262C587B0519198C93849
        Validity
            Not Before: Feb 11 17:53:17 2025 GMT
            Not After : Feb 10 17:58:17 2026 GMT
        Subject: CN=8E61329ADDB926C4550BC8C806B4E650CEA49AF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:af:9a:24:80:55:fe:c2:23:eb:d1:6a:11:27:
                    a1:df:3e:31:a0:72:10:5a:7a:20:0b:07:c7:50:15:
                    22:c6:63:18:ad:a4:c1:9d:63:06:a8:68:ff:48:25:
                    a0:b1:d9:66:df:36:97:9e:3c:ab:37:b0:cc:21:58:
                    aa:36:55:93:50:31:19:2e:c8:af:b5:1a:55:1a:06:
                    9a:19:a5:78:06:6e:37:db:8f:8b:ec:b5:ed:09:fe:
                    b1:88:6b:f5:16:37:e8:b2:c3:8d:12:6b:b0:17:30:
                    10:bd:ca:e5:76:b0:55:9c:ea:da:64:48:52:b8:5b:
                    f6:16:8f:ed:e9:ca:f2:bb:8f:40:73:5a:4f:5b:85:
                    27:33:97:65:ca:fc:e6:8c:97:e7:c8:2b:e8:c5:06:
                    99:3c:40:d5:0f:90:1a:b8:b0:2f:b8:31:8a:90:04:
                    40:ab:3c:dc:8a:93:1f:e1:a1:c4:34:39:9b:0b:60:
                    9e:c5:50:1d:74:53:e0:05:07:a7:37:e2:08:8b:36:
                    c5:24:56:43:d3:7c:94:fd:4f:4c:fa:fc:f8:3c:67:
                    d8:a4:ec:5f:9d:f4:3d:65:7e:df:8e:bf:b8:28:7e:
                    7d:ec:13:f1:1c:15:e0:4e:ff:c2:78:01:a6:e7:dd:
                    69:6f:85:d6:aa:c9:98:df:5d:27:b3:af:2f:f3:66:
                    09:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:61:32:9A:DD:B9:26:C4:55:0B:C8:C8:06:B4:E6:50:CE:A4:9A:F2
            X509v3 Authority Key Identifier:
                keyid:6B:D1:0B:D7:31:1C:36:E4:42:72:62:C5:87:B0:51:91:98:C9:38:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/6BD10BD7311C36E4427262C587B0519198C93849.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BD10BD7311C36E4427262C587B0519198C93849.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/323830343a376537303a3a2f33342d3334203d3e20323731363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e70::/34

    Signature Algorithm: sha256WithRSAEncryption
         48:fc:14:c4:9d:34:9b:84:c2:8a:a0:2f:b4:56:4f:13:93:01:
         5e:41:f4:d4:04:9b:2b:ae:73:b1:8b:2c:62:f2:37:ea:2d:a9:
         3e:4b:37:0f:14:49:6a:0e:9c:4f:48:50:06:7e:ef:61:c6:54:
         fa:1f:5c:14:40:2f:c8:9b:ee:95:81:33:d5:6a:cf:ce:05:be:
         fb:b5:81:5c:73:7d:11:8f:80:23:71:ef:5d:d5:cb:2e:80:a0:
         0e:fe:4a:75:db:84:dd:c6:34:ab:5e:12:b0:54:2d:e1:f0:66:
         d7:92:05:33:27:25:e5:6e:8e:a9:0b:ae:fb:d8:de:59:7a:f5:
         05:13:5f:12:c9:7c:62:5f:c3:c6:4d:36:e0:68:0e:6c:8a:99:
         f4:76:51:85:a1:20:79:54:51:4a:e5:b8:d2:27:c6:30:0e:97:
         47:1a:67:74:5f:fe:1d:36:82:ee:b2:36:cc:08:ba:6b:0d:4e:
         b5:36:ef:51:65:38:64:b4:59:ca:81:f6:51:ad:4f:f5:af:58:
         da:2c:02:82:ae:60:60:84:5b:20:16:8b:f7:93:c0:1a:cb:eb:
         32:a5:c1:3f:6e:58:42:61:ce:c3:a3:61:08:64:ec:b3:83:8b:
         76:9e:f9:de:ea:3b:1e:f9:36:a5:07:dd:40:96:44:0d:68:ca:
         8b:65:74:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:20:58 2025 by rpki-client