Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/323830343a353565343a3a2f33342d3334203d3e20323637393633.roa
File:                     323830343a353565343a3a2f33342d3334203d3e20323637393633.roa (raw, json)
Hash identifier:          pc74Y10EZwVsR3/MLHCf2ZeAyD3iN9mHcvHwpXcORro=
Subject key identifier:   7F:3B:15:C0:44:3B:9F:93:B7:0F:4C:21:97:60:0A:12:43:5F:1B:A2
Certificate issuer:       /CN=2A35055EE84CCFF2F383364115A401FE8535EC74
Certificate serial:       7301A109688D151DB8F06040F5DBB7FD8D7998AB
Authority key identifier: 2A:35:05:5E:E8:4C:CF:F2:F3:83:36:41:15:A4:01:FE:85:35:EC:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A35055EE84CCFF2F383364115A401FE8535EC74.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/323830343a353565343a3a2f33342d3334203d3e20323637393633.roa
Signing time:             Mon 03 Feb 2025 13:05:14 +0000
ROA not before:           Mon 03 Feb 2025 13:00:14 +0000
ROA not after:            Mon 02 Feb 2026 13:05:14 +0000
asID:                     267963
IP address blocks:        2804:55e4::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:01:a1:09:68:8d:15:1d:b8:f0:60:40:f5:db:b7:fd:8d:79:98:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A35055EE84CCFF2F383364115A401FE8535EC74
        Validity
            Not Before: Feb  3 13:00:14 2025 GMT
            Not After : Feb  2 13:05:14 2026 GMT
        Subject: CN=7F3B15C0443B9F93B70F4C2197600A12435F1BA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f9:31:f3:b4:e1:41:c9:55:47:cf:b9:1d:9d:
                    ba:2e:e7:31:7f:7e:6d:4d:a6:11:16:8e:ba:24:32:
                    48:eb:65:3d:a8:15:98:d6:b5:88:41:fb:93:17:3d:
                    cd:6d:dd:2c:42:a1:37:da:a3:3b:56:d2:bf:e8:b5:
                    b3:00:27:b3:82:c2:5b:72:dc:c0:2f:62:dc:c5:f0:
                    2c:ed:58:44:fd:4f:b1:06:d3:88:d2:38:c0:a3:1d:
                    f6:d2:17:79:67:4e:eb:fa:74:1e:ac:fc:91:7d:1c:
                    51:65:d1:82:4b:00:8c:c1:90:0a:5d:dd:ae:4e:6c:
                    b6:ac:82:51:f7:41:47:2e:e3:d9:12:1e:67:38:de:
                    bb:cc:e7:a3:f9:e5:92:22:2e:8b:86:1c:e2:83:14:
                    18:08:2d:cc:88:a7:03:e5:e8:dc:32:eb:c1:e8:ae:
                    6a:e2:01:c0:58:c1:c7:27:4e:3c:1e:80:68:cb:3b:
                    ad:e9:0c:19:ed:7c:ae:39:9a:a4:26:71:78:ef:61:
                    b9:68:05:17:f5:81:be:ea:6e:cc:4c:48:aa:d7:43:
                    cf:bc:31:e5:07:98:7a:10:93:27:68:80:c3:d1:3d:
                    66:06:06:5c:2e:74:41:6d:e9:ee:e1:99:31:86:59:
                    c1:ca:f6:db:09:7b:fc:11:57:72:22:58:fa:5c:68:
                    19:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:3B:15:C0:44:3B:9F:93:B7:0F:4C:21:97:60:0A:12:43:5F:1B:A2
            X509v3 Authority Key Identifier:
                keyid:2A:35:05:5E:E8:4C:CF:F2:F3:83:36:41:15:A4:01:FE:85:35:EC:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/2A35055EE84CCFF2F383364115A401FE8535EC74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A35055EE84CCFF2F383364115A401FE8535EC74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/323830343a353565343a3a2f33342d3334203d3e20323637393633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:55e4::/34

    Signature Algorithm: sha256WithRSAEncryption
         c6:31:70:51:3d:c8:54:87:26:d8:7c:a9:d0:36:f3:03:95:dd:
         5a:7a:78:59:be:5b:91:1d:f9:80:d2:0d:3d:35:d9:89:99:b0:
         fb:0a:9e:9c:56:86:23:10:90:85:27:f9:d7:0b:b0:8c:12:22:
         cc:25:67:9c:02:7d:45:65:8b:24:f0:b5:b0:21:ef:a6:3e:bd:
         3b:a1:6d:b2:43:3e:35:a1:ea:bc:5c:b9:3f:7c:84:87:59:c9:
         bc:bd:d9:fd:7e:a0:fa:13:65:63:58:b3:41:0a:ea:4f:c1:a2:
         4a:70:c8:6d:65:04:1c:e6:44:c3:8c:bd:fa:d2:4e:74:33:e7:
         f9:58:b9:81:13:91:da:b8:d7:72:01:0d:e4:07:79:a1:ad:b1:
         f4:f6:b2:e8:bf:18:ed:4e:09:63:7f:0b:cb:d3:90:47:62:3a:
         f0:4f:38:af:51:22:55:96:ab:07:15:2e:b7:9c:18:bf:eb:d4:
         ea:dd:73:20:93:d3:1d:a1:56:6b:b4:92:81:ae:5f:27:06:f1:
         5f:09:5f:b5:db:a2:42:3b:38:c2:d7:c5:68:b1:d1:8f:8a:a7:
         c9:64:8e:b0:ba:79:8a:84:26:92:7d:af:12:ad:8b:ad:e6:37:
         32:fa:c8:34:de:89:41:34:ab:94:9e:83:32:b6:81:2d:1a:6b:
         35:58:a1:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:09:02 2025 by rpki-client