Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/323830343a373631633a3a2f33322d3332203d3e20323731303930.roa
File:                     323830343a373631633a3a2f33322d3332203d3e20323731303930.roa (raw, json)
Hash identifier:          eA9JQpYUOIjKTMa0Ts5WPtle/+qIISL4tysml5ZEm7Y=
Subject key identifier:   E2:4F:C4:BC:2E:69:87:37:23:2A:4D:D6:5C:E5:31:51:9F:EC:E2:A2
Certificate issuer:       /CN=54CEDD2E24960DE589D4B16EB4D662384CCC0FAF
Certificate serial:       249A6E84D70A89FFA6FA98E09D14CA59C7307ACC
Authority key identifier: 54:CE:DD:2E:24:96:0D:E5:89:D4:B1:6E:B4:D6:62:38:4C:CC:0F:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/323830343a373631633a3a2f33322d3332203d3e20323731303930.roa
Signing time:             Thu 06 Mar 2025 21:00:25 +0000
ROA not before:           Thu 06 Mar 2025 20:55:25 +0000
ROA not after:            Thu 05 Mar 2026 21:00:25 +0000
asID:                     271090
IP address blocks:        2804:761c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:9a:6e:84:d7:0a:89:ff:a6:fa:98:e0:9d:14:ca:59:c7:30:7a:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54CEDD2E24960DE589D4B16EB4D662384CCC0FAF
        Validity
            Not Before: Mar  6 20:55:25 2025 GMT
            Not After : Mar  5 21:00:25 2026 GMT
        Subject: CN=E24FC4BC2E698737232A4DD65CE531519FECE2A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8e:ff:7e:60:65:86:6f:2a:61:ee:2f:33:73:
                    be:0f:b1:7c:de:a7:54:fe:4f:92:33:88:90:6f:7e:
                    cc:a0:38:af:57:36:a6:51:7d:bc:b2:6e:20:db:66:
                    1c:10:f7:43:87:dd:00:21:26:14:4f:48:20:93:89:
                    f4:ce:63:0b:a5:77:07:11:71:23:e9:c7:20:b5:78:
                    a9:3c:6c:72:95:8e:7b:30:8f:50:18:a6:5e:b4:af:
                    d4:77:ea:9d:12:8c:df:76:54:d1:8a:56:1d:8b:d8:
                    1d:4b:42:69:37:d6:04:0b:f4:ed:e8:e4:26:70:8e:
                    e4:c7:93:98:85:3e:43:3c:95:ef:e7:0d:03:0a:53:
                    0d:a5:a4:b2:27:52:b6:9b:11:54:f5:51:e1:c5:b9:
                    c6:8b:6c:9a:3c:56:1e:d5:dd:1c:27:88:9b:4a:d2:
                    0a:5b:20:7a:4f:f0:61:70:b3:ed:b8:24:6c:b5:94:
                    7e:8a:87:20:41:ed:d0:51:95:9c:4e:84:69:c2:2e:
                    b2:89:30:c3:d0:78:ff:20:4a:3d:f7:23:4b:92:33:
                    cc:da:67:d2:95:a9:30:d7:91:da:05:d5:65:55:f8:
                    41:5c:ea:3a:c0:e4:6b:42:e8:ca:8d:23:56:15:f0:
                    46:a4:6e:25:8d:9e:f0:0e:3f:b1:73:90:23:62:e0:
                    7b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:4F:C4:BC:2E:69:87:37:23:2A:4D:D6:5C:E5:31:51:9F:EC:E2:A2
            X509v3 Authority Key Identifier:
                keyid:54:CE:DD:2E:24:96:0D:E5:89:D4:B1:6E:B4:D6:62:38:4C:CC:0F:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/323830343a373631633a3a2f33322d3332203d3e20323731303930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:761c::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:4f:a4:56:b3:36:c7:41:a0:58:85:d9:7d:fe:22:af:67:2b:
         f6:d5:65:ea:0e:f3:15:25:2d:76:66:2d:6b:35:91:bc:3d:82:
         0c:66:b1:86:4b:6c:53:47:e2:21:6d:b3:cd:a9:17:fb:09:ad:
         11:8f:7e:45:a4:ca:79:b3:a4:9d:f2:9d:64:22:c0:75:a9:3d:
         35:9b:89:7f:cb:31:1f:8c:87:af:6a:39:f2:0a:d9:d6:ee:51:
         1d:bb:f8:71:a3:ca:cd:1e:be:df:87:ea:f2:f3:1e:53:d9:42:
         cf:2c:42:8b:82:9c:2a:8f:10:40:38:3e:0e:b8:fb:eb:32:71:
         a2:2e:07:d4:f5:c0:e3:af:70:d6:9a:fb:b2:36:42:c4:56:b4:
         67:fb:56:84:6a:3b:21:9e:f6:24:d4:16:63:03:80:bb:82:c7:
         2d:3f:38:67:71:fa:fc:42:02:ae:ca:e3:fd:e5:ee:2d:75:b4:
         ab:e0:54:ca:45:df:b4:28:3a:a9:9a:8a:51:6b:23:4c:6b:60:
         bd:7b:0b:50:ae:02:dc:4d:f1:38:b8:b0:0b:18:ae:8c:93:95:
         98:dc:e6:1a:e6:06:e3:44:1e:81:20:95:73:ad:4d:ad:b5:d0:
         67:37:6c:62:12:7c:66:60:2b:1a:c5:f9:28:63:3b:44:d1:f8:
         1e:f4:a3:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:22:11 2025 by rpki-client