Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/2/323830343a333137343a383030303a3a2f33362d3336203d3e20323635303136.roa
File:                     323830343a333137343a383030303a3a2f33362d3336203d3e20323635303136.roa (raw, json)
Hash identifier:          LGBVrnP1bnWHIxgJed3Cs/tXipxHE3xlJvqKwwF3v3k=
Subject key identifier:   34:FB:68:28:DB:EB:3C:83:FC:63:0E:86:06:4B:B3:F6:B5:58:0E:B7
Certificate issuer:       /CN=EAB884B70823F4FBD6D5A6BC30F24E63D0B0CE56
Certificate serial:       03CF498B4134116717A61ED82A8228C7E006221C
Authority key identifier: EA:B8:84:B7:08:23:F4:FB:D6:D5:A6:BC:30:F2:4E:63:D0:B0:CE:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAB884B70823F4FBD6D5A6BC30F24E63D0B0CE56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/2/323830343a333137343a383030303a3a2f33362d3336203d3e20323635303136.roa
Signing time:             Wed 05 Mar 2025 19:00:30 +0000
ROA not before:           Wed 05 Mar 2025 18:55:30 +0000
ROA not after:            Wed 04 Mar 2026 19:00:30 +0000
asID:                     265016
IP address blocks:        2804:3174:8000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:cf:49:8b:41:34:11:67:17:a6:1e:d8:2a:82:28:c7:e0:06:22:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAB884B70823F4FBD6D5A6BC30F24E63D0B0CE56
        Validity
            Not Before: Mar  5 18:55:30 2025 GMT
            Not After : Mar  4 19:00:30 2026 GMT
        Subject: CN=34FB6828DBEB3C83FC630E86064BB3F6B5580EB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:67:54:c7:5c:44:f8:5f:f5:51:8e:cd:88:fe:
                    19:e8:cd:7a:10:22:f9:43:f6:a3:ac:5f:34:32:67:
                    82:6a:13:88:8c:5f:92:a5:1a:d1:3f:c9:98:d1:25:
                    56:56:58:fb:6b:e1:0b:c6:88:ee:1d:e7:b6:74:d6:
                    46:c4:84:26:16:6d:22:be:3c:f6:bd:ef:71:1c:b0:
                    db:69:ae:f0:ba:db:dd:ca:fe:6b:f0:a4:59:c8:34:
                    19:7f:a5:fe:53:d1:01:73:f9:98:48:40:d9:49:10:
                    ef:b0:8c:c3:64:8d:5f:09:b1:f4:5a:ad:28:97:99:
                    ae:47:88:bf:bd:04:96:89:2e:44:48:bf:3d:25:a7:
                    6a:0b:70:b3:9e:04:8c:0f:2e:bf:07:7f:83:2d:14:
                    44:c7:34:25:a7:91:bd:08:e1:bc:7d:96:41:98:67:
                    4a:bf:f7:c8:83:98:d0:ca:a0:dc:fc:48:80:13:0c:
                    9e:42:8e:08:cc:0b:99:14:c7:9e:4a:e3:4b:77:c0:
                    dd:c1:fb:dd:b2:1b:6c:b7:f2:ff:06:01:c8:b8:fb:
                    41:17:42:c2:01:25:bb:57:61:a1:6b:d2:19:d8:41:
                    9f:f6:4c:36:df:aa:89:59:49:04:0b:96:96:37:53:
                    08:2d:f1:31:ab:41:d3:fc:16:36:84:60:9d:46:f5:
                    21:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:FB:68:28:DB:EB:3C:83:FC:63:0E:86:06:4B:B3:F6:B5:58:0E:B7
            X509v3 Authority Key Identifier:
                keyid:EA:B8:84:B7:08:23:F4:FB:D6:D5:A6:BC:30:F2:4E:63:D0:B0:CE:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/2/EAB884B70823F4FBD6D5A6BC30F24E63D0B0CE56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAB884B70823F4FBD6D5A6BC30F24E63D0B0CE56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/2/323830343a333137343a383030303a3a2f33362d3336203d3e20323635303136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3174:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         00:61:61:8b:0f:0c:17:cc:0d:98:ac:88:21:5a:3d:b3:45:b8:
         be:f3:a4:59:43:bc:e1:06:c6:fc:c8:6b:29:98:eb:fa:80:13:
         c2:a0:be:ab:1c:b6:7d:b0:ab:0d:63:e2:82:b7:f5:1c:7a:ba:
         b2:e4:97:c7:fc:9f:c9:38:43:0c:2e:70:71:60:c0:1c:2b:63:
         5b:5f:9c:e7:ab:98:64:6a:20:28:3c:73:f2:41:8b:f3:f3:9c:
         ff:38:e4:17:92:30:fa:c7:20:86:11:7a:15:f6:d2:11:89:94:
         e8:47:b5:6b:f1:27:3d:7a:8d:68:85:e4:26:44:aa:87:c9:76:
         9f:3b:cd:f3:34:b3:5c:dd:96:3d:6b:40:c5:c5:a2:6b:41:d6:
         e3:f5:45:3e:b2:95:35:d0:e2:87:94:b5:2c:a0:4d:29:9e:53:
         3a:e9:27:ec:6e:bc:23:30:6e:bc:64:3e:df:97:26:4a:1f:b6:
         47:3f:0a:6c:7c:a0:3f:98:d3:c0:c2:02:82:8c:be:1d:cf:ab:
         ef:dd:28:b3:04:8b:3b:91:5f:f6:c7:83:bc:43:22:e4:e5:b0:
         9f:2e:47:5c:c5:01:62:e3:3d:bc:21:4e:29:18:e3:91:aa:58:
         29:6e:5c:4e:13:ac:6f:1f:ea:c9:be:a9:32:d5:49:dc:8f:74:
         6d:5c:83:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:45:23 2025 by rpki-client