Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HmAZBWJZihigumcTjh3JSHbh62Wd9eWkw4qM1v2PepB4/0/323830343a373836343a3a2f33322d3438203d3e20323731323339.roa
File:                     323830343a373836343a3a2f33322d3438203d3e20323731323339.roa (raw, json)
Hash identifier:          vPDvJ/uUZ2ppyaFqMlyDbynRZjL3IIQfgSWaPHz25zs=
Subject key identifier:   4E:3B:67:DF:2A:93:7C:CD:05:25:37:18:B3:CB:B9:9B:77:C5:16:B0
Certificate issuer:       /CN=E78F6793229F60787B6BB9D88C9E47A77557ED21
Certificate serial:       3B27EC6DF003A8548D3C20B6D66BA1829DB4DB
Authority key identifier: E7:8F:67:93:22:9F:60:78:7B:6B:B9:D8:8C:9E:47:A7:75:57:ED:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78F6793229F60787B6BB9D88C9E47A77557ED21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HmAZBWJZihigumcTjh3JSHbh62Wd9eWkw4qM1v2PepB4/0/323830343a373836343a3a2f33322d3438203d3e20323731323339.roa
Signing time:             Fri 27 Dec 2024 17:22:47 +0000
ROA not before:           Fri 27 Dec 2024 17:17:47 +0000
ROA not after:            Fri 26 Dec 2025 17:22:47 +0000
asID:                     271239
IP address blocks:        2804:7864::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:27:ec:6d:f0:03:a8:54:8d:3c:20:b6:d6:6b:a1:82:9d:b4:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78F6793229F60787B6BB9D88C9E47A77557ED21
        Validity
            Not Before: Dec 27 17:17:47 2024 GMT
            Not After : Dec 26 17:22:47 2025 GMT
        Subject: CN=4E3B67DF2A937CCD05253718B3CBB99B77C516B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:66:78:05:1a:de:79:d0:f0:8b:5d:ee:07:15:
                    2e:61:6f:09:69:a8:25:82:99:36:23:a3:00:fb:cd:
                    09:45:b3:77:52:e1:84:c5:02:00:e5:32:3f:61:c6:
                    f3:a5:49:52:1f:9e:c5:91:69:48:d1:cc:fc:8a:5c:
                    fd:3d:8c:50:df:15:5d:80:27:75:6a:76:55:2e:a3:
                    1e:92:ef:75:71:9a:02:ed:99:69:a2:fb:09:dc:f7:
                    d2:b8:cb:f9:8a:2d:8e:3c:f8:5f:e7:fc:1c:1f:24:
                    2c:96:11:c6:0c:6f:f9:9d:ed:28:f5:04:50:21:7a:
                    bf:dd:d9:d7:d5:3d:6d:03:43:f8:31:44:94:70:d1:
                    53:f8:13:a7:a4:71:a0:4d:50:d9:75:57:df:e3:eb:
                    19:c5:a8:2e:bd:f5:ad:7e:76:3d:11:bc:13:41:8e:
                    b3:6d:1e:e4:f5:51:7d:80:3f:91:3c:9c:59:c4:ea:
                    2c:a4:f3:ef:d9:de:7d:81:03:94:68:61:08:57:a7:
                    28:9f:1f:fb:63:47:3e:4b:75:f1:e3:d5:38:3a:4f:
                    6b:de:d5:63:89:28:2e:b8:32:dd:7c:ae:73:8b:e6:
                    ec:a7:bc:c0:69:df:79:74:a8:39:7e:df:b0:36:bc:
                    f4:6a:09:27:04:f8:65:b6:ec:79:7d:18:4c:0d:b3:
                    55:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:3B:67:DF:2A:93:7C:CD:05:25:37:18:B3:CB:B9:9B:77:C5:16:B0
            X509v3 Authority Key Identifier:
                keyid:E7:8F:67:93:22:9F:60:78:7B:6B:B9:D8:8C:9E:47:A7:75:57:ED:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HmAZBWJZihigumcTjh3JSHbh62Wd9eWkw4qM1v2PepB4/0/E78F6793229F60787B6BB9D88C9E47A77557ED21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78F6793229F60787B6BB9D88C9E47A77557ED21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmAZBWJZihigumcTjh3JSHbh62Wd9eWkw4qM1v2PepB4/0/323830343a373836343a3a2f33322d3438203d3e20323731323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7864::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:a4:b1:d4:f8:08:2e:8a:c6:bd:a0:f6:92:d1:06:2a:67:b0:
         0e:a3:8c:0f:a7:68:2a:34:eb:76:a9:f3:fd:fb:76:4c:09:80:
         08:7b:b5:2f:6f:bf:10:36:92:7a:39:d3:92:b3:6c:a2:cb:cf:
         2a:47:6d:e4:bf:3d:cd:e5:ba:56:6a:b0:3f:7f:75:2d:8d:2e:
         7b:b0:6d:d2:d4:f9:6c:65:c4:3a:10:a7:82:2f:8e:df:95:6a:
         11:ec:c7:9c:70:ff:27:11:f3:c8:14:45:53:6d:82:93:58:d7:
         7d:07:ce:9e:0d:f4:d5:7e:8f:16:9d:f2:99:5d:df:20:49:66:
         64:25:81:c6:20:06:40:73:64:0c:d0:b7:d4:87:b5:ff:c8:68:
         23:51:bd:87:09:41:55:2c:23:77:2e:57:a8:3e:eb:03:94:8d:
         53:06:de:03:42:5d:d9:1d:16:49:4d:ec:c6:2a:e0:6c:3f:4f:
         dc:6e:4e:21:31:a4:3f:43:41:3b:6f:00:ba:da:ba:d3:8b:c9:
         e3:3d:c0:fc:a4:b4:41:37:dd:7c:5a:26:b4:f0:04:5f:0e:20:
         d1:d7:82:94:38:d7:cc:72:45:e5:dd:4e:9a:f8:50:d4:fc:55:
         29:95:0a:b0:8f:d9:c8:c3:1d:c8:96:dd:37:25:87:7c:b9:7f:
         e2:56:b7:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:32:49 2025 by rpki-client