Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/323830343a3939303a383030303a3a2f33342d3334203d3e20323632383735.roa
File:                     323830343a3939303a383030303a3a2f33342d3334203d3e20323632383735.roa (raw, json)
Hash identifier:          1pMXVFSnIa4IVy90f7RFD0JOdGEZECEWfk7o55eaZU8=
Subject key identifier:   C5:14:F1:90:2E:0C:CC:31:60:FE:29:35:EF:1E:E0:BB:29:76:D7:FC
Certificate issuer:       /CN=EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41
Certificate serial:       126B5B0734C620411CBCD7647656F675EDC4831E
Authority key identifier: EA:C1:26:E2:06:D0:84:30:A1:3E:DA:2D:FE:A9:B6:F9:C6:1B:BF:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/323830343a3939303a383030303a3a2f33342d3334203d3e20323632383735.roa
Signing time:             Thu 02 Jan 2025 13:13:41 +0000
ROA not before:           Thu 02 Jan 2025 13:08:41 +0000
ROA not after:            Thu 01 Jan 2026 13:13:41 +0000
asID:                     262875
IP address blocks:        2804:990:8000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:6b:5b:07:34:c6:20:41:1c:bc:d7:64:76:56:f6:75:ed:c4:83:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41
        Validity
            Not Before: Jan  2 13:08:41 2025 GMT
            Not After : Jan  1 13:13:41 2026 GMT
        Subject: CN=C514F1902E0CCC3160FE2935EF1EE0BB2976D7FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2c:ed:60:e1:68:b1:2c:25:97:00:eb:3e:97:
                    cc:ac:63:4c:57:26:52:32:29:2a:c2:cd:2a:1f:ad:
                    9a:12:fe:e2:c2:a7:1b:2a:12:63:9a:a8:b9:09:a5:
                    9b:83:8e:3f:ce:45:f0:91:bf:de:4f:e9:9c:d4:bf:
                    83:b3:ca:af:3f:9a:91:8c:47:c3:02:8d:c6:89:f0:
                    de:2e:1c:ad:7e:e2:e3:60:b4:a8:1f:bf:be:7a:5a:
                    96:de:6c:2a:88:a7:0b:c3:10:d4:f6:27:27:1e:3f:
                    19:9f:73:90:dc:79:3a:be:00:d6:1c:62:71:e4:c3:
                    24:9b:29:ea:e4:3c:db:b3:c5:3e:11:81:71:71:1a:
                    ce:c5:77:d0:80:9d:5d:e1:32:44:15:8a:29:f5:5b:
                    08:fc:7b:e2:4e:28:7a:c7:94:65:45:c8:27:a7:33:
                    6c:34:34:c5:b1:9e:ff:d2:39:43:52:1c:9f:61:de:
                    ac:ca:a9:8d:c1:ce:2a:ad:13:b7:36:61:e6:98:db:
                    f7:35:20:51:4c:0d:12:08:dc:1a:e9:d9:4c:f6:f7:
                    f1:ec:cb:e3:09:1b:53:7c:e9:24:87:35:a8:b6:e8:
                    20:70:1b:9e:47:66:8e:9a:bd:23:e7:ae:59:f3:04:
                    7c:6e:0c:f9:3a:7d:d0:ae:0a:0b:25:47:6b:b7:f3:
                    d7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:14:F1:90:2E:0C:CC:31:60:FE:29:35:EF:1E:E0:BB:29:76:D7:FC
            X509v3 Authority Key Identifier:
                keyid:EA:C1:26:E2:06:D0:84:30:A1:3E:DA:2D:FE:A9:B6:F9:C6:1B:BF:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/323830343a3939303a383030303a3a2f33342d3334203d3e20323632383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:990:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         25:0a:3c:22:2f:b8:b4:2e:d1:cd:e5:f3:08:98:56:b3:48:a6:
         b0:2e:43:9e:2b:5e:89:3a:03:6e:93:00:40:bf:bc:66:f6:f2:
         ab:dc:86:b5:a7:87:95:36:13:01:43:7e:87:bb:b3:a4:4a:98:
         c8:fe:33:1d:e2:46:57:e8:54:dc:2a:25:85:39:63:82:c8:e5:
         c5:5d:74:ae:73:13:00:bd:ad:84:e7:59:bf:e4:73:7b:f3:a7:
         4a:e6:c1:f4:5a:9c:4b:69:65:09:4c:dc:fb:ba:d5:d8:04:97:
         f0:fe:10:9c:4f:50:ba:22:4c:29:e0:4d:7c:66:16:81:0e:0b:
         d5:7c:ce:b9:51:ad:39:6f:91:c9:b0:98:f6:d2:7e:54:57:31:
         fb:2b:e6:db:79:21:d5:4c:19:9e:48:6b:20:e4:44:55:a7:81:
         ef:b3:c5:c1:f3:8c:0c:d2:0e:94:3a:da:43:6e:76:e9:0d:bd:
         b1:6c:86:f1:9a:24:2e:0f:20:66:68:c7:c6:08:58:a8:0a:3b:
         3c:41:27:8d:d3:8a:54:07:8d:8a:84:53:59:5d:ee:f7:05:1b:
         53:d6:d8:bc:ab:3a:c4:15:e6:55:9a:22:1c:c0:55:67:8c:c5:
         41:6c:b1:fc:02:86:df:69:de:28:31:85:2d:72:77:2b:14:f0:
         03:e6:a7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 16:48:08 2025 by rpki-client