Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/323830343a323139303a3a2f33322d3334203d3e20323634353632.roa
File:                     323830343a323139303a3a2f33322d3334203d3e20323634353632.roa (raw, json)
Hash identifier:          clFSs7HkSsNX5QelyaAGSJxb8/KVK2kJkEq7txq87Mw=
Subject key identifier:   CD:B7:CA:81:CB:B5:B3:C9:C8:E1:B8:CB:05:1C:7D:3F:D8:14:69:E6
Certificate issuer:       /CN=CA948884CA136F59A5F29D9B37F2E11919035585
Certificate serial:       2165F9E553FF6257EDD2C082A4EA0572BE0CCC9A
Authority key identifier: CA:94:88:84:CA:13:6F:59:A5:F2:9D:9B:37:F2:E1:19:19:03:55:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA948884CA136F59A5F29D9B37F2E11919035585.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/323830343a323139303a3a2f33322d3334203d3e20323634353632.roa
Signing time:             Tue 30 Apr 2024 20:43:31 +0000
ROA not before:           Tue 30 Apr 2024 20:38:31 +0000
ROA not after:            Tue 29 Apr 2025 20:43:31 +0000
asID:                     264562
IP address blocks:        2804:2190::/32 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:65:f9:e5:53:ff:62:57:ed:d2:c0:82:a4:ea:05:72:be:0c:cc:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA948884CA136F59A5F29D9B37F2E11919035585
        Validity
            Not Before: Apr 30 20:38:31 2024 GMT
            Not After : Apr 29 20:43:31 2025 GMT
        Subject: CN=CDB7CA81CBB5B3C9C8E1B8CB051C7D3FD81469E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1e:e8:28:3b:64:b5:d4:8d:b6:50:8b:91:8d:
                    7d:6b:c3:e7:d2:63:64:ec:a0:90:66:7c:30:06:4c:
                    93:6e:6c:1a:f4:28:fa:26:dd:c1:aa:45:86:fb:f4:
                    97:45:b6:2d:09:f7:84:35:72:76:3e:b4:bc:40:9a:
                    d7:8e:c0:b2:67:20:87:3c:e3:d4:1e:da:94:70:0f:
                    f6:ad:da:1b:07:ec:40:f3:25:d6:ce:19:d4:75:c5:
                    f2:4f:92:d2:02:83:00:16:c9:a7:83:49:ad:3e:4c:
                    4c:8d:2f:38:6f:cd:3b:e2:fb:bc:5e:e0:b3:72:0d:
                    3a:e6:17:2a:00:e8:16:79:84:f8:8e:33:ec:dd:17:
                    1f:79:ef:4e:89:19:29:24:5f:61:1b:07:83:10:bf:
                    d0:01:40:36:89:46:b1:9d:63:9c:ef:f6:14:14:ad:
                    83:3e:6b:de:5c:7e:23:69:9c:02:04:9f:87:cd:3f:
                    ec:50:e9:8f:58:3e:63:8d:38:39:a8:6f:1a:c7:6f:
                    2f:9a:8b:d6:9a:18:4a:97:5d:4f:20:5f:cd:72:eb:
                    e1:41:e1:16:74:e6:8c:44:c6:80:08:2b:1b:0e:5d:
                    08:46:98:92:2d:87:e5:bc:8c:ce:ea:62:1c:d1:b8:
                    97:3a:e6:00:65:f5:c0:d0:f3:e5:c6:5d:e0:fe:f1:
                    43:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:B7:CA:81:CB:B5:B3:C9:C8:E1:B8:CB:05:1C:7D:3F:D8:14:69:E6
            X509v3 Authority Key Identifier:
                keyid:CA:94:88:84:CA:13:6F:59:A5:F2:9D:9B:37:F2:E1:19:19:03:55:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/CA948884CA136F59A5F29D9B37F2E11919035585.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA948884CA136F59A5F29D9B37F2E11919035585.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/323830343a323139303a3a2f33322d3334203d3e20323634353632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2190::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:04:89:07:52:a2:7e:e8:c4:73:28:90:10:79:fa:da:0a:2f:
         b1:e4:ec:b9:e5:a9:cb:52:a2:0b:34:9e:8d:9f:e6:79:6a:f1:
         34:a3:0a:26:78:6a:21:e3:c5:b2:34:ec:dd:7d:55:30:4f:72:
         25:0e:ee:72:c5:f7:c3:ad:03:c0:7d:05:38:c5:3d:db:09:7f:
         30:5b:9b:96:31:56:e1:1a:7a:18:f5:94:55:e1:6c:b1:58:05:
         bd:2b:9b:5e:3f:bf:a7:43:1b:8b:61:b7:d4:b6:6e:6c:50:89:
         80:94:80:29:8d:3a:07:e0:f2:d3:20:94:bf:9c:5c:d8:81:c6:
         be:49:ba:85:79:7a:30:42:14:b8:f1:a6:a8:2a:97:c1:84:c2:
         61:07:ce:87:c0:8b:1f:24:d4:90:06:24:27:69:19:c9:0e:e0:
         b8:8d:68:8e:a5:17:7a:e9:5d:4a:be:49:f1:d3:ae:31:f1:27:
         71:75:55:fb:13:c5:71:26:1d:28:58:ec:a8:39:38:c7:72:03:
         f4:1b:4d:dc:d2:fa:9a:f7:99:83:68:05:e9:07:bb:ee:78:4a:
         f2:86:66:74:af:35:bb:e2:4f:21:a7:de:a9:a9:ef:0b:66:c8:
         30:d5:15:ae:6c:f3:9d:ab:1c:22:90:91:a9:93:be:1b:d3:c7:
         79:2a:7b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:40:52 2025 by rpki-client