Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5pCLcYKxUQYj4StmBkGNPf1x9MAvwak5fyEoorN7ncQL/0/323830343a346537383a3a2f33322d3332203d3e20323638323633.roa
File:                     323830343a346537383a3a2f33322d3332203d3e20323638323633.roa (raw, json)
Hash identifier:          IQOH2IvT68VznNRLVgv1CleZNEUyAvAON1PBPo6RS4Y=
Subject key identifier:   BB:49:0D:51:2C:28:1A:35:C1:39:7A:7C:D7:BF:AE:47:C3:48:B6:38
Certificate issuer:       /CN=E22818D8F42D1506482150955FA216049875C2A8
Certificate serial:       24501DE24E8BEF180BD45686A83866681E8B9D22
Authority key identifier: E2:28:18:D8:F4:2D:15:06:48:21:50:95:5F:A2:16:04:98:75:C2:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E22818D8F42D1506482150955FA216049875C2A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5pCLcYKxUQYj4StmBkGNPf1x9MAvwak5fyEoorN7ncQL/0/323830343a346537383a3a2f33322d3332203d3e20323638323633.roa
Signing time:             Mon 05 Feb 2024 18:47:21 +0000
ROA not before:           Mon 05 Feb 2024 18:42:21 +0000
ROA not after:            Mon 03 Feb 2025 18:47:21 +0000
asID:                     268263
IP address blocks:        2804:4e78::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:50:1d:e2:4e:8b:ef:18:0b:d4:56:86:a8:38:66:68:1e:8b:9d:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E22818D8F42D1506482150955FA216049875C2A8
        Validity
            Not Before: Feb  5 18:42:21 2024 GMT
            Not After : Feb  3 18:47:21 2025 GMT
        Subject: CN=BB490D512C281A35C1397A7CD7BFAE47C348B638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a6:b5:56:3e:04:cb:d9:f1:4f:54:d1:10:3a:
                    54:e2:41:a2:13:a0:de:77:4e:b8:56:7e:89:c1:95:
                    67:85:e5:4c:51:0c:5d:cc:65:c7:ac:0e:9f:3b:7d:
                    db:34:b7:14:30:30:ac:b0:c3:82:02:23:dd:35:29:
                    01:86:33:2b:85:0a:98:63:43:1b:0a:96:25:d0:89:
                    2d:5e:5f:c2:2d:63:0c:2e:6d:2f:d0:f8:a6:49:06:
                    82:70:04:8f:21:51:3d:4a:2d:06:87:d4:37:34:19:
                    ef:35:32:eb:05:4d:03:5e:7e:d7:ee:28:67:c3:a0:
                    f3:22:f1:a9:cb:48:73:62:a9:bc:90:5f:aa:a8:91:
                    aa:08:c8:f2:55:a9:e2:01:ed:02:0e:c1:f4:88:aa:
                    b5:c5:8d:4b:6f:4b:60:23:c7:4d:de:c0:09:32:ed:
                    b2:e6:25:18:3e:59:7f:06:e2:17:8e:c5:1b:e0:d7:
                    34:b9:41:fb:fe:86:01:f4:8b:7b:60:36:94:c7:33:
                    5d:44:91:36:98:20:d2:e1:cf:a7:b9:46:f4:8a:79:
                    78:b0:09:4f:fd:3a:33:c6:1f:50:86:3e:15:ed:f5:
                    fb:0a:94:c3:d4:ea:19:fd:b3:c7:6d:91:3c:5c:68:
                    d6:cf:33:ff:7b:7c:7b:76:58:b0:bd:26:4f:ed:15:
                    56:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:49:0D:51:2C:28:1A:35:C1:39:7A:7C:D7:BF:AE:47:C3:48:B6:38
            X509v3 Authority Key Identifier:
                keyid:E2:28:18:D8:F4:2D:15:06:48:21:50:95:5F:A2:16:04:98:75:C2:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5pCLcYKxUQYj4StmBkGNPf1x9MAvwak5fyEoorN7ncQL/0/E22818D8F42D1506482150955FA216049875C2A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E22818D8F42D1506482150955FA216049875C2A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5pCLcYKxUQYj4StmBkGNPf1x9MAvwak5fyEoorN7ncQL/0/323830343a346537383a3a2f33322d3332203d3e20323638323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e78::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:75:94:8f:c8:9f:e5:c0:ef:c3:f4:2a:9b:ef:16:d6:8d:ed:
         b9:73:e2:72:00:19:e2:2d:b0:10:51:97:e7:b1:01:8f:7f:9e:
         40:9f:85:fc:d6:01:00:cd:cf:eb:0f:ee:90:9c:fa:ff:19:d4:
         2a:0b:3f:6e:fe:ac:89:a7:b7:05:9c:44:24:42:8f:7b:93:7e:
         10:16:b6:ca:58:63:60:7c:6e:3f:ba:91:c8:a4:c3:cd:72:27:
         7d:71:17:e7:c5:ed:0c:e5:ab:ac:6f:bb:3d:b6:e3:59:46:a8:
         85:12:23:99:ed:cb:4f:99:d0:44:c1:58:93:49:3e:a2:48:c8:
         89:28:f4:c9:3b:d3:2f:99:33:0e:00:ee:c1:ee:a8:de:38:a9:
         57:eb:ed:59:3c:b4:90:ef:5c:e2:ae:b3:ce:d7:be:9e:6b:a6:
         02:0e:dd:96:00:a0:e3:9d:17:1c:22:43:34:a7:57:1c:3a:17:
         f2:4f:c2:dc:9f:77:a3:bb:05:98:19:f2:24:35:eb:d5:05:e1:
         cf:03:6c:48:56:1e:1d:34:fc:c5:50:1e:4d:d9:82:68:de:47:
         8f:6b:f9:1f:96:77:81:c6:6a:ce:54:7f:70:f6:20:a1:69:49:
         53:25:39:30:7e:29:00:61:da:06:d5:c1:b0:b0:61:d9:2d:af:
         97:e9:25:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:13:27 2025 by rpki-client