Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/323830343a376537383a3a2f33322d3332203d3e20323731363236.roa
File:                     323830343a376537383a3a2f33322d3332203d3e20323731363236.roa (raw, json)
Hash identifier:          v90q9a6iZ4z29BGDpKwRpOVx8N0sxuCLg7M0nR15X5Q=
Subject key identifier:   84:59:6A:8D:1E:6D:5E:28:B5:91:14:13:6D:CC:54:2A:E4:98:CB:C5
Certificate issuer:       /CN=226524F55AA764292A51BB669FC2AD0B4C417266
Certificate serial:       31D4F21C830E553FC07049D9B763FAC71D3B318F
Authority key identifier: 22:65:24:F5:5A:A7:64:29:2A:51:BB:66:9F:C2:AD:0B:4C:41:72:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/226524F55AA764292A51BB669FC2AD0B4C417266.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/323830343a376537383a3a2f33322d3332203d3e20323731363236.roa
Signing time:             Fri 22 Nov 2024 18:21:16 +0000
ROA not before:           Fri 22 Nov 2024 18:16:16 +0000
ROA not after:            Fri 21 Nov 2025 18:21:16 +0000
asID:                     271626
IP address blocks:        2804:7e78::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:d4:f2:1c:83:0e:55:3f:c0:70:49:d9:b7:63:fa:c7:1d:3b:31:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=226524F55AA764292A51BB669FC2AD0B4C417266
        Validity
            Not Before: Nov 22 18:16:16 2024 GMT
            Not After : Nov 21 18:21:16 2025 GMT
        Subject: CN=84596A8D1E6D5E28B59114136DCC542AE498CBC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8b:58:ad:6b:4f:80:de:f8:f6:c2:b3:ac:9b:
                    e3:1b:b3:f4:36:98:28:f9:51:8f:5c:c6:9b:c6:b5:
                    fa:4e:10:b7:b5:e7:b1:55:07:0d:37:fe:71:d3:36:
                    ce:01:e8:7b:6f:69:cf:ca:fc:df:92:e4:14:5a:8f:
                    15:62:79:fa:0a:ea:05:7b:c0:e8:4f:29:1a:1d:be:
                    d3:2c:26:99:4f:0d:4a:5a:04:7d:4a:b8:c1:ec:e0:
                    77:c3:5c:72:6e:1e:c1:a9:f8:f6:dc:cc:84:a5:b2:
                    22:65:86:ab:95:bc:cd:40:48:63:2c:6d:92:63:d4:
                    05:da:c1:f2:70:14:6e:27:21:53:cb:8c:44:ed:fd:
                    3a:52:c9:92:4c:62:0e:ee:9d:9d:4a:07:8d:8b:d2:
                    bc:df:07:87:bc:4f:95:8b:2f:6b:24:e2:68:f2:ef:
                    5d:22:75:16:a4:ca:4e:51:aa:b2:c2:0e:d9:d3:6e:
                    47:87:03:14:1f:41:ed:b3:f0:63:5a:ae:44:d8:72:
                    60:7a:65:37:62:b8:e2:e9:cc:bd:ea:44:85:42:66:
                    6c:20:f0:e2:b9:51:67:5d:02:f5:4d:4a:87:5c:f2:
                    47:d9:98:45:a8:f3:10:ad:e6:71:33:09:ff:ae:7a:
                    83:8a:7f:1d:30:5f:94:e6:1d:7b:dd:45:52:de:61:
                    40:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:59:6A:8D:1E:6D:5E:28:B5:91:14:13:6D:CC:54:2A:E4:98:CB:C5
            X509v3 Authority Key Identifier:
                keyid:22:65:24:F5:5A:A7:64:29:2A:51:BB:66:9F:C2:AD:0B:4C:41:72:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/226524F55AA764292A51BB669FC2AD0B4C417266.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/226524F55AA764292A51BB669FC2AD0B4C417266.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/323830343a376537383a3a2f33322d3332203d3e20323731363236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e78::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:e0:5d:0e:30:cb:3f:80:5d:7c:36:5e:a6:0c:85:0b:c2:c9:
         6b:30:93:db:7c:17:77:ce:41:33:42:12:ae:a5:81:73:d0:6a:
         ca:62:a8:a8:b0:a4:0f:b0:41:be:97:5b:76:b3:0e:f2:f2:01:
         01:85:90:89:26:c4:fa:2c:55:d5:5e:5c:85:2e:26:f5:85:36:
         14:34:1a:3d:f1:3d:ee:cb:1c:ac:d9:1b:54:de:13:95:a1:43:
         d2:63:37:1c:84:08:07:cf:2e:cb:82:b1:e2:9a:6d:65:2a:a1:
         c2:7b:ed:d1:53:6a:38:3e:f0:14:a3:a4:63:4b:29:62:46:31:
         b5:36:06:3a:84:73:b6:d2:25:3c:9c:80:6a:f2:44:1c:e4:1a:
         03:7e:00:0a:01:a0:e7:ae:e3:f4:82:a1:48:a5:cf:33:db:1d:
         1f:e7:de:ae:56:37:e1:c3:e7:e7:a0:d8:f5:19:00:93:73:1b:
         57:07:ab:c7:a5:2b:f4:b3:d5:ca:47:5b:88:81:70:e1:d2:fe:
         f1:cc:52:24:8d:56:91:43:5c:90:62:ce:2a:ec:8c:cb:07:3d:
         9a:c0:99:56:c7:87:9e:0c:31:e5:1b:7d:93:08:8f:e1:09:33:
         d6:93:be:d9:0b:27:fb:ea:e7:df:d4:21:aa:2d:54:b9:2b:4e:
         29:61:e0:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:54:45 2025 by rpki-client