Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/1/323830343a363566303a3a2f33342d3334203d3e20323639353234.roa
File:                     323830343a363566303a3a2f33342d3334203d3e20323639353234.roa (raw, json)
Hash identifier:          ST7l4340LhikJNR+5Bj4MQlTFCesZKv8utpM1LxRW+I=
Subject key identifier:   74:4F:C4:F5:04:4D:07:91:30:5F:E9:05:6F:95:3B:85:95:EF:47:3C
Certificate issuer:       /CN=E17F5363541897DEABD020106BBE90669B62ACA3
Certificate serial:       49E2267FBD9A1C4B4EA81E94DABE5566F6D5FBAC
Authority key identifier: E1:7F:53:63:54:18:97:DE:AB:D0:20:10:6B:BE:90:66:9B:62:AC:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E17F5363541897DEABD020106BBE90669B62ACA3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/1/323830343a363566303a3a2f33342d3334203d3e20323639353234.roa
Signing time:             Mon 08 Apr 2024 17:09:34 +0000
ROA not before:           Mon 08 Apr 2024 17:04:34 +0000
ROA not after:            Mon 07 Apr 2025 17:09:34 +0000
asID:                     269524
IP address blocks:        2804:65f0::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:e2:26:7f:bd:9a:1c:4b:4e:a8:1e:94:da:be:55:66:f6:d5:fb:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E17F5363541897DEABD020106BBE90669B62ACA3
        Validity
            Not Before: Apr  8 17:04:34 2024 GMT
            Not After : Apr  7 17:09:34 2025 GMT
        Subject: CN=744FC4F5044D0791305FE9056F953B8595EF473C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d3:4b:23:e1:86:57:1f:cc:04:93:2b:7d:40:
                    cb:a9:1b:a2:48:67:91:02:c9:f4:0c:06:f3:3a:21:
                    0a:c6:90:4e:2b:1b:69:4d:96:af:e8:74:dd:64:bd:
                    36:71:fe:25:d1:ab:9f:01:7d:11:77:8e:27:be:1f:
                    88:29:68:49:8d:16:61:f1:6c:5f:2a:e9:20:0a:d3:
                    9a:7d:42:66:77:59:17:db:59:d0:23:95:e5:97:bd:
                    e2:c8:fe:5d:60:a1:53:18:b8:ed:f7:90:59:bd:81:
                    29:15:6b:ab:84:6d:a7:36:ab:91:ab:a3:ab:44:3e:
                    c7:29:84:d5:50:1a:a5:29:87:98:cc:9e:f4:96:04:
                    bc:92:df:f5:0e:26:36:99:7d:71:bf:1e:60:21:b1:
                    bc:2c:19:2c:82:fc:18:a9:98:2b:83:e4:69:9b:3d:
                    f1:66:30:c3:65:21:2a:56:4b:d7:ba:e2:1c:3f:5b:
                    d3:e9:84:ad:e9:32:e1:d1:81:bc:b2:8d:cd:90:3a:
                    fc:16:ee:fc:71:98:a1:88:9f:63:a5:4e:e8:db:40:
                    61:9b:35:b2:90:c1:04:53:0c:dd:68:7e:9c:a3:1a:
                    42:03:45:e2:4d:10:73:5d:9b:3f:cd:22:06:4c:64:
                    4c:bf:79:db:1e:4d:7e:f1:8c:d1:a4:33:be:fe:14:
                    be:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:4F:C4:F5:04:4D:07:91:30:5F:E9:05:6F:95:3B:85:95:EF:47:3C
            X509v3 Authority Key Identifier:
                keyid:E1:7F:53:63:54:18:97:DE:AB:D0:20:10:6B:BE:90:66:9B:62:AC:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/1/E17F5363541897DEABD020106BBE90669B62ACA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E17F5363541897DEABD020106BBE90669B62ACA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/1/323830343a363566303a3a2f33342d3334203d3e20323639353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:65f0::/34

    Signature Algorithm: sha256WithRSAEncryption
         72:83:6e:29:5e:79:5a:e0:76:c6:07:73:70:25:39:2c:12:2a:
         fa:04:6c:41:cc:45:2d:03:eb:59:67:1e:c0:7c:0b:00:7c:98:
         ab:74:a2:95:9f:e5:b7:f8:21:6c:1c:d1:fd:fa:7d:eb:1c:7b:
         00:50:f8:8e:b3:c1:23:f5:c3:98:27:c2:b6:f5:84:dd:47:68:
         7b:45:21:a0:99:34:e9:1b:21:a6:f5:c6:cf:97:f7:9c:ad:5d:
         fa:81:d7:94:16:64:df:57:49:06:32:71:61:a1:98:04:4e:a0:
         05:0c:2f:d6:f7:d7:48:ff:7b:2e:ea:3d:8a:29:18:03:f7:c8:
         9f:f2:13:a8:bc:1a:42:18:b3:25:c6:5b:61:16:0c:37:1d:9f:
         c5:d0:cf:d9:c1:37:6e:e7:08:bd:21:24:a8:c7:03:70:f1:03:
         30:37:65:b6:ad:01:51:67:78:06:fc:1f:d4:c8:d4:2f:39:9a:
         59:3f:73:37:fa:1a:d8:76:20:3c:46:5b:b1:ca:08:2e:eb:b5:
         02:5b:a8:21:be:63:2e:0b:a8:a3:d6:37:25:83:55:7b:3c:31:
         06:42:a4:24:b8:15:1b:fe:d1:aa:48:c8:43:f1:9a:a7:f3:0d:
         de:2b:33:3c:fc:a9:74:df:77:30:e1:85:0a:8f:1e:b4:5a:6c:
         34:14:82:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:51:27 2025 by rpki-client