Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/1/323830343a323139303a343030303a3a2f33342d3334203d3e20323634353632.roa
File:                     323830343a323139303a343030303a3a2f33342d3334203d3e20323634353632.roa (raw, json)
Hash identifier:          6AW4+Ie7FXBvxb7804vmjpPsgdifU7GOcJEs7/mZRTk=
Subject key identifier:   E7:B8:FF:EC:7D:43:02:EB:FA:35:B7:57:17:FC:88:D9:1E:AD:F3:36
Certificate issuer:       /CN=D7FEB8333E4AA11344E779BB749E8570B27FBCCD
Certificate serial:       4529DB7A1331A0BA14EBCF566791CEAE430DE52B
Authority key identifier: D7:FE:B8:33:3E:4A:A1:13:44:E7:79:BB:74:9E:85:70:B2:7F:BC:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7FEB8333E4AA11344E779BB749E8570B27FBCCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/1/323830343a323139303a343030303a3a2f33342d3334203d3e20323634353632.roa
Signing time:             Fri 26 Apr 2024 19:28:43 +0000
ROA not before:           Fri 26 Apr 2024 19:23:43 +0000
ROA not after:            Fri 25 Apr 2025 19:28:43 +0000
asID:                     264562
IP address blocks:        2804:2190:4000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:29:db:7a:13:31:a0:ba:14:eb:cf:56:67:91:ce:ae:43:0d:e5:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7FEB8333E4AA11344E779BB749E8570B27FBCCD
        Validity
            Not Before: Apr 26 19:23:43 2024 GMT
            Not After : Apr 25 19:28:43 2025 GMT
        Subject: CN=E7B8FFEC7D4302EBFA35B75717FC88D91EADF336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:62:be:39:33:9f:00:b9:42:28:4f:f0:d6:9d:
                    31:c7:74:19:59:3f:dc:05:5f:09:8b:fc:7d:45:6e:
                    6f:76:ae:db:0b:bd:3e:0b:44:91:25:03:e1:fb:43:
                    c8:fb:bc:c2:97:2b:4a:31:09:8e:df:de:3f:3a:72:
                    f7:e3:c8:a1:e4:97:5b:73:fd:ae:5f:79:12:f5:e5:
                    ad:18:13:d8:7f:72:df:af:9e:55:f1:4c:3d:b6:be:
                    9f:3a:39:df:65:5a:14:b1:68:57:84:17:aa:5e:62:
                    0f:0b:52:62:2f:fc:7f:3c:b7:6d:21:41:6c:6f:fc:
                    f4:87:ea:d7:bc:74:5c:87:ca:66:88:03:08:02:68:
                    a3:11:93:08:90:39:bf:86:b1:65:98:6a:a1:89:59:
                    40:db:4d:f2:06:39:eb:34:92:c4:2d:3b:c7:bc:9a:
                    5a:4b:69:6a:9e:54:53:fc:c0:c8:1e:b8:33:6d:00:
                    dd:04:52:a2:de:6d:4c:51:25:e2:43:e3:f8:75:62:
                    99:73:c7:8d:0d:aa:05:d4:26:60:8b:3d:b7:ee:c2:
                    e9:0b:b9:bd:c8:20:7d:3d:d2:d3:ca:46:c8:33:63:
                    cd:3e:32:b2:cb:ef:c8:c2:bf:4f:44:28:00:de:39:
                    1d:4c:0b:48:af:3b:ec:7b:a5:cf:7c:28:e4:9e:03:
                    e3:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:B8:FF:EC:7D:43:02:EB:FA:35:B7:57:17:FC:88:D9:1E:AD:F3:36
            X509v3 Authority Key Identifier:
                keyid:D7:FE:B8:33:3E:4A:A1:13:44:E7:79:BB:74:9E:85:70:B2:7F:BC:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/1/D7FEB8333E4AA11344E779BB749E8570B27FBCCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7FEB8333E4AA11344E779BB749E8570B27FBCCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/1/323830343a323139303a343030303a3a2f33342d3334203d3e20323634353632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2190:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         b9:97:5e:49:e5:5c:92:09:8e:15:9c:5b:d4:50:87:20:ca:99:
         11:55:55:e4:dc:5e:45:92:fd:a7:94:6e:18:78:de:9e:f3:a4:
         76:dc:9d:c8:b5:0b:ca:16:38:6e:da:e9:59:46:64:2c:2b:64:
         51:76:db:63:88:ad:f4:82:8a:3f:d0:ae:88:d2:28:5e:ee:b7:
         22:7a:52:71:53:55:26:7c:a9:03:1c:93:0a:26:93:bd:6e:08:
         ca:41:8e:f3:e7:85:58:af:61:b8:65:1b:73:b1:08:76:5b:38:
         f3:61:04:83:b1:60:31:93:16:b7:d2:d9:dc:53:41:50:26:69:
         3a:30:4a:09:60:33:53:2f:24:2b:de:11:90:29:e8:22:8a:9e:
         d4:dd:94:bf:b1:e4:d8:c8:dd:57:eb:5b:26:7a:6f:ef:ec:75:
         0a:c2:54:01:4b:1b:9f:db:15:9c:92:5a:92:50:f6:99:26:d9:
         2a:44:23:3a:4f:03:76:a2:56:61:ce:9d:c8:47:00:72:2b:fa:
         5b:a6:34:49:fd:61:6c:b2:8f:a9:8b:65:c7:59:2a:90:77:3c:
         17:a2:2d:72:08:ac:29:ff:7e:fe:ee:b4:ec:ec:40:0b:a2:b8:
         b1:04:27:e4:0a:aa:ff:8e:9d:b3:8f:fc:4c:f3:b7:4d:1a:78:
         c8:3a:a2:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:06:25 2025 by rpki-client