Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/323830343a3564303a3a2f33322d3438203d3e203238323431.roa
File:                     323830343a3564303a3a2f33322d3438203d3e203238323431.roa (raw, json)
Hash identifier:          VzzVbkeiqUfn95KShPHGn87AxHTG99AA0k3mfApyWvg=
Subject key identifier:   FE:B3:6A:EF:85:E0:A2:5B:E7:6E:D5:24:AC:AF:00:35:4C:81:8E:02
Certificate issuer:       /CN=416296490F899DB0183C491C69520DEECF540394
Certificate serial:       70E93A53328EA42D084B4436C948C63A2CBD06BC
Authority key identifier: 41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/323830343a3564303a3a2f33322d3438203d3e203238323431.roa
Signing time:             Fri 03 May 2024 21:17:32 +0000
ROA not before:           Fri 03 May 2024 21:12:32 +0000
ROA not after:            Fri 02 May 2025 21:17:32 +0000
asID:                     28241
IP address blocks:        2804:5d0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:e9:3a:53:32:8e:a4:2d:08:4b:44:36:c9:48:c6:3a:2c:bd:06:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=416296490F899DB0183C491C69520DEECF540394
        Validity
            Not Before: May  3 21:12:32 2024 GMT
            Not After : May  2 21:17:32 2025 GMT
        Subject: CN=FEB36AEF85E0A25BE76ED524ACAF00354C818E02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:01:36:c6:e3:43:ec:cd:43:44:4d:95:c0:2e:
                    54:9d:84:41:2b:fc:98:88:2d:95:fb:69:74:11:aa:
                    47:c0:e8:62:3f:53:c4:b5:f4:df:71:68:9d:3c:b2:
                    0b:28:92:f8:7b:f2:e7:6d:44:1d:de:4b:72:43:9f:
                    4b:2f:f5:23:5a:21:c8:b0:93:22:dd:ff:f9:66:5e:
                    0d:cf:10:11:5e:5f:a3:14:3f:d6:94:28:cb:84:4c:
                    fc:d2:29:af:99:7e:84:a3:a4:93:a9:ad:d2:7a:55:
                    2e:12:73:bb:31:79:ee:13:4f:c5:cf:83:c8:05:94:
                    9a:3c:58:e6:ad:b6:34:37:ba:91:92:c4:e8:44:ca:
                    44:a0:d9:37:11:a8:cd:e0:2c:a5:ce:3c:0e:22:43:
                    f3:77:15:a4:1c:86:fd:96:66:cb:14:1e:d7:79:58:
                    ca:da:73:1d:46:62:82:eb:1d:79:9f:26:32:8c:7e:
                    32:65:48:8d:ff:49:be:ce:96:78:74:6b:4d:b0:89:
                    86:c2:6f:25:a8:1e:49:b0:7c:7d:74:a6:41:33:48:
                    31:f3:aa:14:db:25:19:8b:6d:b8:c2:23:d9:27:81:
                    16:0e:bd:c0:f0:4d:be:0a:6f:5e:13:fe:15:d1:94:
                    9c:30:fa:06:e3:2b:dc:03:64:ab:64:71:d2:20:b2:
                    7d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:B3:6A:EF:85:E0:A2:5B:E7:6E:D5:24:AC:AF:00:35:4C:81:8E:02
            X509v3 Authority Key Identifier:
                keyid:41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/416296490F899DB0183C491C69520DEECF540394.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/323830343a3564303a3a2f33322d3438203d3e203238323431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:41:dd:f2:0f:b2:e1:84:9b:1f:46:0a:97:6a:c3:91:d7:d0:
         c2:07:b8:05:bc:6d:61:02:9f:fc:c3:26:12:ed:35:3a:3e:db:
         44:ed:ff:7d:79:71:9d:66:30:f9:04:da:19:d8:97:a5:61:30:
         d5:10:3d:67:81:89:ab:99:b0:f4:f5:68:de:cd:4c:5d:4a:1d:
         c1:13:69:ce:c7:f7:0e:5c:6b:58:ab:3e:24:d1:ff:f0:dc:a8:
         ea:2d:35:ac:3f:28:f8:ea:40:c2:e6:89:29:57:a2:25:8f:7e:
         e6:36:5f:48:2e:b1:e7:e9:2e:04:99:58:45:3c:0f:80:4a:ea:
         b8:fe:6a:fe:fb:b5:60:09:9f:55:f4:54:e9:66:80:47:ee:74:
         ef:54:f9:a8:1a:44:0a:d9:f4:5f:bd:2b:1f:f6:15:66:7c:0e:
         57:4a:80:89:1d:ce:1d:0f:af:02:d9:10:1f:f2:9f:ac:37:76:
         42:59:b6:24:ce:31:49:2b:ad:fa:49:8c:e8:c5:57:9d:ab:70:
         74:89:12:e1:9e:c2:35:1f:7b:df:38:de:dd:58:3b:f2:8e:f9:
         30:2d:5c:f6:7b:37:ea:f9:70:67:73:4d:1a:ac:9e:69:35:fe:
         20:22:7e:cc:f4:12:c2:18:92:4f:e2:92:ca:ff:bc:79:24:cf:
         f9:b7:9a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 00:06:00 2025 by rpki-client