Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/1/323830343a363566303a343030303a3a2f33342d3334203d3e20323639353234.roa
File:                     323830343a363566303a343030303a3a2f33342d3334203d3e20323639353234.roa (raw, json)
Hash identifier:          g5JzSzic4cyTyU+w3nhnDKggMg2jjx0AbL9FfmE0uoM=
Subject key identifier:   33:89:0D:AE:55:31:D7:AE:1E:1F:4E:92:C6:0D:E5:85:08:4E:B5:80
Certificate issuer:       /CN=E17F5363541897DEABD020106BBE90669B62ACA3
Certificate serial:       2345CD97071159C0A74F851BD2D2BCBF5C3D873D
Authority key identifier: E1:7F:53:63:54:18:97:DE:AB:D0:20:10:6B:BE:90:66:9B:62:AC:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E17F5363541897DEABD020106BBE90669B62ACA3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/1/323830343a363566303a343030303a3a2f33342d3334203d3e20323639353234.roa
Signing time:             Fri 26 Apr 2024 17:13:06 +0000
ROA not before:           Fri 26 Apr 2024 17:08:06 +0000
ROA not after:            Fri 25 Apr 2025 17:13:06 +0000
asID:                     269524
IP address blocks:        2804:65f0:4000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:45:cd:97:07:11:59:c0:a7:4f:85:1b:d2:d2:bc:bf:5c:3d:87:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E17F5363541897DEABD020106BBE90669B62ACA3
        Validity
            Not Before: Apr 26 17:08:06 2024 GMT
            Not After : Apr 25 17:13:06 2025 GMT
        Subject: CN=33890DAE5531D7AE1E1F4E92C60DE585084EB580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:93:83:c4:df:34:3b:e7:bb:c8:ed:fe:ba:ce:
                    3e:17:9b:e6:20:6f:2e:06:fe:ca:c0:db:f8:fa:96:
                    2b:9c:f7:f7:be:e5:45:50:a3:b1:64:4c:38:f7:40:
                    6a:33:1d:d2:87:92:16:d5:71:ae:0e:7f:94:f3:ee:
                    17:43:6e:fa:63:39:a8:72:c4:cb:52:66:f6:8c:77:
                    d6:42:03:12:72:d2:85:ed:d2:3b:13:79:2b:c0:35:
                    8f:3c:65:27:84:73:8d:f3:30:fb:49:ba:80:84:8d:
                    51:e4:80:60:53:d0:26:9c:5a:43:27:e4:ac:c2:92:
                    fc:cd:b1:88:4c:e7:7b:6f:7c:71:6f:4e:63:4d:a3:
                    79:ce:73:58:94:42:f7:1e:93:c9:87:92:c5:53:2c:
                    6a:65:d5:05:a0:a2:c1:bb:1e:41:e7:65:ce:01:22:
                    33:76:e7:4e:8f:47:71:d7:94:56:d1:97:14:53:5f:
                    07:b4:dd:52:d6:3f:5f:e2:1a:3e:dc:96:09:ed:20:
                    c6:fa:df:07:40:2d:85:ca:58:e0:4b:51:dd:1a:bd:
                    11:6e:cb:07:7a:52:7f:5a:e6:9d:f0:dc:9a:c5:9d:
                    21:2d:b3:8b:53:b4:79:28:b5:33:29:dd:d4:d7:77:
                    69:2e:71:5e:4a:56:55:c8:0a:00:16:c1:b4:6f:26:
                    55:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:89:0D:AE:55:31:D7:AE:1E:1F:4E:92:C6:0D:E5:85:08:4E:B5:80
            X509v3 Authority Key Identifier:
                keyid:E1:7F:53:63:54:18:97:DE:AB:D0:20:10:6B:BE:90:66:9B:62:AC:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/1/E17F5363541897DEABD020106BBE90669B62ACA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E17F5363541897DEABD020106BBE90669B62ACA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/1/323830343a363566303a343030303a3a2f33342d3334203d3e20323639353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:65f0:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         24:c0:2f:13:e4:fd:35:71:5b:42:a6:bb:ad:4a:2e:fd:83:a1:
         5d:bb:56:2b:14:d2:46:7a:8a:46:5e:54:fe:3c:3d:83:1c:79:
         a9:e4:36:fd:d0:b7:9a:9b:92:d5:99:32:f9:ab:ea:13:56:8f:
         f7:6f:e0:4f:45:3d:4b:80:8b:85:26:70:75:da:6b:2e:99:ec:
         dc:40:a1:e3:16:40:a4:56:c3:a7:c5:e3:a5:44:8f:59:86:4b:
         76:17:75:f8:89:6f:2c:af:72:17:23:ab:7c:bb:37:c6:6f:3e:
         40:b8:95:ec:aa:76:50:ba:49:07:3b:8f:db:9f:1f:b5:15:c0:
         2e:da:08:a1:63:58:52:53:d5:93:a5:c1:c3:88:84:1d:bb:3c:
         ff:75:44:95:f3:9f:91:7e:77:88:65:26:c5:3f:54:f8:6c:49:
         53:18:34:ea:68:b3:04:88:54:89:33:14:63:83:62:3e:fe:d3:
         e3:eb:65:ae:20:ed:ca:71:db:df:d0:1e:b5:8c:86:66:ab:50:
         d1:99:5b:dc:94:0e:d8:57:26:61:f7:92:37:4c:a1:ce:a2:51:
         8f:1e:f5:61:14:87:dd:55:c0:cf:d9:f0:4d:4b:e0:bf:1e:6d:
         de:5b:87:24:a5:f3:3e:2e:dc:5b:2f:13:e6:2d:d0:f3:c2:47:
         e4:81:83:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:57:33 2025 by rpki-client