Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5r1J98MiE49NCLnyxpYsTVuWhVbx1VSusohR3j8Cf418/0/323830343a363131633a3a2f33322d313238203d3e20323639323133.roa
File:                     323830343a363131633a3a2f33322d313238203d3e20323639323133.roa (raw, json)
Hash identifier:          9PA5ZrqbglyXlmTNi34532Y0uK0CUopDeUAsokplhn4=
Subject key identifier:   4F:9E:AF:59:30:47:1C:99:CB:72:80:0B:E6:E4:CC:26:A4:7D:CF:05
Certificate issuer:       /CN=3DDCE25111940B746EFDCBF0F3DC3E23EF917239
Certificate serial:       08F5D22EC152415C15E7ED3D6141BB31DDDBD281
Authority key identifier: 3D:DC:E2:51:11:94:0B:74:6E:FD:CB:F0:F3:DC:3E:23:EF:91:72:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3DDCE25111940B746EFDCBF0F3DC3E23EF917239.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5r1J98MiE49NCLnyxpYsTVuWhVbx1VSusohR3j8Cf418/0/323830343a363131633a3a2f33322d313238203d3e20323639323133.roa
Signing time:             Tue 02 Apr 2024 19:38:13 +0000
ROA not before:           Tue 02 Apr 2024 19:33:13 +0000
ROA not after:            Tue 01 Apr 2025 19:38:13 +0000
asID:                     269213
IP address blocks:        2804:611c::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:f5:d2:2e:c1:52:41:5c:15:e7:ed:3d:61:41:bb:31:dd:db:d2:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DDCE25111940B746EFDCBF0F3DC3E23EF917239
        Validity
            Not Before: Apr  2 19:33:13 2024 GMT
            Not After : Apr  1 19:38:13 2025 GMT
        Subject: CN=4F9EAF5930471C99CB72800BE6E4CC26A47DCF05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:dd:01:f7:b1:ea:16:11:a0:97:20:07:c3:cc:
                    c2:6f:9e:fd:e7:c6:89:c6:00:84:dd:70:52:c7:7e:
                    35:1e:99:16:c9:ef:58:9f:42:80:70:89:95:3a:d0:
                    c8:a5:28:bf:62:c2:af:d7:b7:ce:f8:9d:6c:3c:91:
                    0b:46:a0:87:ee:c9:d9:29:b4:19:2a:e4:ca:cf:1e:
                    ea:5e:90:66:3a:56:3a:33:86:ad:ce:10:43:36:9f:
                    af:56:52:5a:4a:f6:0d:d7:7d:9b:8f:f1:75:89:7a:
                    27:81:f6:c1:5d:24:ab:f2:39:ed:15:6c:e6:82:e7:
                    6c:6a:94:69:68:c4:d6:2e:4d:ea:37:87:1b:44:cf:
                    86:8b:d9:54:75:47:6f:8e:52:26:54:8f:0c:3e:c5:
                    cc:64:5d:d3:4d:f3:cb:d2:c0:b9:96:75:37:ca:bf:
                    08:bb:eb:91:8e:d6:55:26:93:04:61:2b:f4:4f:66:
                    60:c1:a2:3a:3c:d9:90:8c:d1:1a:da:34:df:71:cb:
                    9c:d7:dd:a2:1e:f4:d0:e7:2e:fc:13:69:58:c7:dd:
                    b9:36:2a:c6:81:6a:db:e9:02:d1:af:3d:6c:5b:b0:
                    88:25:f6:3d:84:00:a3:7b:81:2d:95:cf:a0:23:6f:
                    40:3d:d0:74:86:28:d6:f9:65:66:bd:3f:c1:62:48:
                    d0:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:9E:AF:59:30:47:1C:99:CB:72:80:0B:E6:E4:CC:26:A4:7D:CF:05
            X509v3 Authority Key Identifier:
                keyid:3D:DC:E2:51:11:94:0B:74:6E:FD:CB:F0:F3:DC:3E:23:EF:91:72:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5r1J98MiE49NCLnyxpYsTVuWhVbx1VSusohR3j8Cf418/0/3DDCE25111940B746EFDCBF0F3DC3E23EF917239.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3DDCE25111940B746EFDCBF0F3DC3E23EF917239.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5r1J98MiE49NCLnyxpYsTVuWhVbx1VSusohR3j8Cf418/0/323830343a363131633a3a2f33322d313238203d3e20323639323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:611c::/32

    Signature Algorithm: sha256WithRSAEncryption
         bd:14:32:40:22:19:9b:83:f3:7b:fb:d5:d3:38:f5:83:b9:67:
         ab:82:e9:6e:92:2b:f6:60:94:15:c9:7c:a9:d5:63:a2:3b:1a:
         5d:6b:cf:43:9b:0b:e7:b0:1a:19:40:82:69:42:22:99:12:d9:
         34:57:21:52:2d:86:53:6b:f3:2f:64:f3:de:ae:f1:bd:49:6b:
         42:af:02:55:e6:a5:f0:cb:51:6a:a9:44:74:56:a5:42:89:31:
         1f:08:d1:e8:96:d0:74:4e:42:fe:f5:73:b8:eb:19:34:89:9a:
         2c:ee:19:35:19:4a:9c:ff:bf:b2:5c:b6:15:43:bc:e5:8e:a8:
         57:e8:cc:32:de:46:83:09:7f:09:df:33:22:c0:bd:e0:3d:43:
         f1:88:35:84:d3:5f:2c:85:09:e1:d7:ea:1b:c2:55:8f:fd:fc:
         84:0b:db:99:ad:62:05:f9:2c:6f:43:60:db:79:cd:51:7d:bb:
         ae:ad:4b:81:f0:23:ea:28:71:40:d4:32:b8:d3:6c:8c:80:21:
         44:db:44:66:94:ad:3b:b5:82:30:e7:d8:d3:97:2c:6d:64:46:
         95:bd:18:36:22:c4:bd:97:e6:ec:c9:b8:b0:99:bd:b1:5e:dd:
         cc:6f:64:43:b5:66:cd:c7:9b:09:3a:d6:94:84:16:90:36:14:
         dd:fb:70:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:17:51 2025 by rpki-client