Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/0/323830343a313932383a3a2f33322d313238203d3e203631373735.roa
File:                     323830343a313932383a3a2f33322d313238203d3e203631373735.roa (raw, json)
Hash identifier:          IWzSmFdkO2Q0RmUIftKi8nvQRE+8yMTi6Px8VdKYHUM=
Subject key identifier:   3E:28:1E:C8:64:27:0B:32:86:0A:90:CE:3F:4A:E9:9F:75:6C:BB:21
Certificate issuer:       /CN=1F0DF3C10B489849F826B52958C15E39B8524EEB
Certificate serial:       09949E6B48253302E5C6BBF8A9F5F570156691F9
Authority key identifier: 1F:0D:F3:C1:0B:48:98:49:F8:26:B5:29:58:C1:5E:39:B8:52:4E:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F0DF3C10B489849F826B52958C15E39B8524EEB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/0/323830343a313932383a3a2f33322d313238203d3e203631373735.roa
Signing time:             Mon 08 Jan 2024 18:19:55 +0000
ROA not before:           Mon 08 Jan 2024 18:14:55 +0000
ROA not after:            Mon 06 Jan 2025 18:19:55 +0000
asID:                     61775
IP address blocks:        2804:1928::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:94:9e:6b:48:25:33:02:e5:c6:bb:f8:a9:f5:f5:70:15:66:91:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F0DF3C10B489849F826B52958C15E39B8524EEB
        Validity
            Not Before: Jan  8 18:14:55 2024 GMT
            Not After : Jan  6 18:19:55 2025 GMT
        Subject: CN=3E281EC864270B32860A90CE3F4AE99F756CBB21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:87:05:54:8a:c5:87:61:92:9a:8a:a5:f0:d9:
                    6a:06:a8:05:16:1e:0b:fe:13:3e:d0:dc:d6:aa:15:
                    f0:17:d7:ed:45:a8:dd:cf:df:94:b5:32:1d:69:3f:
                    8c:0a:52:b4:b5:3f:ad:ab:24:92:be:cd:f7:77:3a:
                    44:c2:67:27:34:33:7d:f8:7b:d7:24:b0:d3:11:1c:
                    39:e8:fe:c0:4e:36:3b:31:54:62:a2:5a:53:11:b9:
                    3e:bd:d4:d5:ac:86:1c:7c:17:da:72:35:25:15:0c:
                    e6:92:c3:32:af:a0:c8:89:ff:49:b6:46:d7:6d:8d:
                    83:94:da:ac:93:75:16:93:d8:21:76:cb:52:d7:53:
                    5e:22:06:d0:69:61:b5:ba:40:54:74:eb:ac:27:16:
                    b0:5e:38:7f:a9:cc:71:92:0d:e3:63:75:e3:61:39:
                    af:c1:9c:7b:63:2a:ad:65:d8:6f:a9:61:dd:6c:5a:
                    7d:6e:c1:47:fe:4e:e2:0a:40:56:2f:fe:73:cc:27:
                    e2:42:53:34:d5:ed:e6:b5:84:ff:77:93:38:5e:04:
                    46:58:c0:1e:d1:ed:1a:a7:77:de:f4:63:64:47:a4:
                    51:57:ee:e2:5a:28:36:38:7a:84:81:53:75:c1:28:
                    19:74:f3:49:78:86:2f:bb:8d:77:9c:7e:15:5f:08:
                    dc:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:28:1E:C8:64:27:0B:32:86:0A:90:CE:3F:4A:E9:9F:75:6C:BB:21
            X509v3 Authority Key Identifier:
                keyid:1F:0D:F3:C1:0B:48:98:49:F8:26:B5:29:58:C1:5E:39:B8:52:4E:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/0/1F0DF3C10B489849F826B52958C15E39B8524EEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F0DF3C10B489849F826B52958C15E39B8524EEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/0/323830343a313932383a3a2f33322d313238203d3e203631373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1928::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:7b:7a:4a:1a:85:29:41:c4:1e:34:15:50:72:38:fb:44:e6:
         00:05:ed:4f:18:95:f3:10:40:c6:ae:d5:37:36:03:7c:26:7c:
         0f:51:15:e7:c9:c9:be:86:68:4b:44:69:e7:26:93:ab:20:24:
         11:59:d2:1f:f0:5f:33:bb:21:e0:a9:ed:c4:fa:39:37:70:65:
         f3:bf:c3:d1:a4:6b:1e:e8:20:97:41:98:6b:d1:d5:7c:e6:c5:
         78:7f:74:74:d9:9d:cb:c3:ef:6b:85:0d:17:e6:5d:b2:51:db:
         2e:5f:11:31:f7:65:ec:03:8d:ca:6b:39:7a:35:b6:3c:e5:21:
         62:cb:22:36:f5:43:23:81:c3:2e:85:88:4f:d1:73:16:27:9e:
         12:6c:2b:b5:73:85:c1:db:d0:48:d5:48:7f:30:3f:cb:ec:23:
         87:8f:53:bb:cd:4c:b6:72:f3:ab:8e:9a:4f:eb:d1:92:bc:8c:
         9d:8a:a1:e9:d8:15:2a:39:5e:11:fa:06:bd:2f:de:8f:6a:7e:
         b9:a8:8c:3c:79:f3:67:c8:07:ea:ca:6b:da:c8:30:ef:17:a6:
         81:ef:cd:42:2a:91:ae:4e:cd:ee:90:fe:c6:fb:bf:c8:d0:f5:
         e1:30:f3:30:59:9f:55:ec:8e:6c:f2:51:4e:64:69:3c:04:96:
         f5:09:7b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 03:26:56 2025 by rpki-client