Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4p3K7ZzKsrxqjMz4jmp3eXBZg8dcQLv8AXytoMp811DN/0/323830343a323465303a3a2f33322d3332203d3e20323634323436.roa
File:                     323830343a323465303a3a2f33322d3332203d3e20323634323436.roa (raw, json)
Hash identifier:          tJPMFWZ+1qGj+ROUXRV14fvUXilJfLStoQ5sJtZHN+s=
Subject key identifier:   96:20:F2:85:2D:5A:35:FF:3B:23:47:41:8B:77:5A:D4:D7:61:77:7F
Certificate issuer:       /CN=DBA4961E6C8AB8C5F70BEB670C1ADB2F9D09D3FC
Certificate serial:       60F8591D91CF1405B518D49406F3136688F25181
Authority key identifier: DB:A4:96:1E:6C:8A:B8:C5:F7:0B:EB:67:0C:1A:DB:2F:9D:09:D3:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA4961E6C8AB8C5F70BEB670C1ADB2F9D09D3FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4p3K7ZzKsrxqjMz4jmp3eXBZg8dcQLv8AXytoMp811DN/0/323830343a323465303a3a2f33322d3332203d3e20323634323436.roa
Signing time:             Fri 06 Dec 2024 19:05:36 +0000
ROA not before:           Fri 06 Dec 2024 19:00:36 +0000
ROA not after:            Fri 05 Dec 2025 19:05:36 +0000
asID:                     264246
IP address blocks:        2804:24e0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:f8:59:1d:91:cf:14:05:b5:18:d4:94:06:f3:13:66:88:f2:51:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBA4961E6C8AB8C5F70BEB670C1ADB2F9D09D3FC
        Validity
            Not Before: Dec  6 19:00:36 2024 GMT
            Not After : Dec  5 19:05:36 2025 GMT
        Subject: CN=9620F2852D5A35FF3B2347418B775AD4D761777F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:2f:75:98:df:86:8a:65:6e:4c:c4:2b:92:29:
                    6f:72:a1:9e:66:ec:ac:37:27:87:26:46:5c:d3:93:
                    ff:15:89:d3:e8:76:36:99:3a:7c:70:01:a3:42:3d:
                    0d:d4:47:0f:cc:30:d2:ff:42:df:88:9b:ed:8d:c8:
                    1b:85:6b:95:fc:53:cb:26:4c:c4:d8:72:fe:19:38:
                    41:20:a5:1d:54:11:c5:a8:28:75:99:24:e0:0b:65:
                    7c:a1:24:5d:18:c1:44:49:72:7d:33:c7:0a:76:4c:
                    31:b7:aa:23:f4:ab:72:16:59:49:26:13:06:24:d4:
                    d9:0e:66:42:e9:0e:8e:86:ce:b3:cb:12:3c:88:c6:
                    f8:ec:63:fd:67:9d:74:9e:97:98:13:11:84:4e:8a:
                    46:f0:d8:e5:46:70:30:82:26:22:59:ed:9f:6d:83:
                    4f:d1:07:e7:46:2e:4c:57:6c:08:76:f9:ef:16:7e:
                    d8:96:21:41:da:ca:4c:21:e7:47:28:d9:5a:87:68:
                    00:83:b9:66:85:1b:94:b9:1e:4e:f6:84:ef:d2:11:
                    5c:56:9d:dd:7b:7c:6f:96:e5:e4:e9:1f:cb:f8:7a:
                    8b:11:8d:56:64:0f:1e:cd:16:9e:45:36:ab:02:8b:
                    33:f0:8a:78:ca:46:8f:b9:70:09:72:e4:da:8d:1c:
                    e2:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:20:F2:85:2D:5A:35:FF:3B:23:47:41:8B:77:5A:D4:D7:61:77:7F
            X509v3 Authority Key Identifier:
                keyid:DB:A4:96:1E:6C:8A:B8:C5:F7:0B:EB:67:0C:1A:DB:2F:9D:09:D3:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4p3K7ZzKsrxqjMz4jmp3eXBZg8dcQLv8AXytoMp811DN/0/DBA4961E6C8AB8C5F70BEB670C1ADB2F9D09D3FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA4961E6C8AB8C5F70BEB670C1ADB2F9D09D3FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4p3K7ZzKsrxqjMz4jmp3eXBZg8dcQLv8AXytoMp811DN/0/323830343a323465303a3a2f33322d3332203d3e20323634323436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:24e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a9:d9:8f:a8:1d:ad:2b:76:f6:44:5c:63:92:36:7f:a3:b6:1d:
         54:ec:9c:19:e3:ee:14:71:d0:db:6a:98:d5:2c:56:51:c0:62:
         ef:3c:f0:f1:bc:ad:bd:82:1d:0d:d4:83:5e:56:09:e7:ca:a3:
         ff:f6:77:14:38:18:eb:3b:68:01:dd:f4:bb:78:d3:1e:7a:ea:
         dd:4e:d5:80:ff:4c:e4:62:1a:cb:a7:34:34:a8:e8:96:30:d2:
         8b:60:bf:6f:21:1f:98:4d:d9:cc:0c:0e:d1:9d:92:d1:c2:10:
         73:6a:8c:71:4f:d7:05:66:48:3a:87:62:c2:cb:ca:f7:8a:19:
         50:92:07:6e:b5:8f:0c:4e:2d:06:4b:e3:02:65:03:59:dc:46:
         ea:5f:a5:b0:25:92:b4:df:0a:b1:6a:77:f5:d5:c3:f1:38:17:
         bd:0b:d1:01:4e:34:d5:23:63:d7:fe:f3:94:87:d6:3e:f9:bf:
         f5:96:cb:ef:87:97:a6:3b:14:bb:84:aa:32:c5:95:d2:e3:11:
         df:39:be:6d:c7:bd:c7:2e:6c:8b:aa:7f:7c:93:41:78:ac:62:
         40:d1:b9:34:c2:40:43:91:de:58:5f:46:26:49:19:e1:93:60:
         cb:47:a5:fa:be:8f:85:bb:22:68:74:34:27:63:16:1f:00:1e:
         97:d5:e6:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:53:39 2025 by rpki-client