Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/86x48xLj26turkTUhqXzcBSas2xnEQohzqVdaKdDQKAv/0/323830343a323561633a3a2f33322d313238203d3e20323634323934.roa
File:                     323830343a323561633a3a2f33322d313238203d3e20323634323934.roa (raw, json)
Hash identifier:          2OcDC6AckblwMpOIvtar0qPgV2Q/neASrdEmp0bPtek=
Subject key identifier:   A1:1C:DA:A7:A6:8D:78:8D:91:B9:6A:AB:7E:68:07:FB:70:7B:E8:76
Certificate issuer:       /CN=93FE839003F5610824C29206ED0F21C45CE3A5B4
Certificate serial:       36ABEE54833F3219579AADEF8A3235496B27F5C7
Authority key identifier: 93:FE:83:90:03:F5:61:08:24:C2:92:06:ED:0F:21:C4:5C:E3:A5:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93FE839003F5610824C29206ED0F21C45CE3A5B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86x48xLj26turkTUhqXzcBSas2xnEQohzqVdaKdDQKAv/0/323830343a323561633a3a2f33322d313238203d3e20323634323934.roa
Signing time:             Mon 05 Aug 2024 14:22:54 +0000
ROA not before:           Mon 05 Aug 2024 14:17:54 +0000
ROA not after:            Mon 04 Aug 2025 14:22:54 +0000
asID:                     264294
IP address blocks:        2804:25ac::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:ab:ee:54:83:3f:32:19:57:9a:ad:ef:8a:32:35:49:6b:27:f5:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93FE839003F5610824C29206ED0F21C45CE3A5B4
        Validity
            Not Before: Aug  5 14:17:54 2024 GMT
            Not After : Aug  4 14:22:54 2025 GMT
        Subject: CN=A11CDAA7A68D788D91B96AAB7E6807FB707BE876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:25:12:62:dc:68:56:1e:61:b6:bc:77:24:b7:
                    66:1c:a9:cb:bc:de:17:18:8f:76:64:0f:73:6a:15:
                    0d:40:28:60:91:a0:31:c4:12:65:9b:b9:54:bd:e9:
                    fb:9a:99:ff:2d:af:7b:d0:1d:c8:d4:45:59:b3:7f:
                    f9:c5:82:3c:4f:6c:af:38:35:95:b6:81:b1:fb:96:
                    7f:5f:ff:2f:a1:77:70:88:25:c0:03:96:a0:23:8a:
                    3d:8a:61:c1:71:31:df:31:e9:6d:65:f9:97:a5:83:
                    a2:65:af:a9:39:6f:9d:08:cb:01:18:46:e2:00:6c:
                    d1:76:16:7d:e1:f7:e6:84:ad:16:aa:11:fc:b7:40:
                    2a:7a:09:fb:59:e8:53:6c:e5:57:0c:cb:eb:bb:5c:
                    4f:9e:e4:0a:15:16:a2:e3:16:c6:e7:75:5e:0c:b5:
                    58:02:96:b7:9e:98:7e:cb:88:61:91:1e:7e:eb:c4:
                    27:00:32:48:fc:a9:da:70:35:3c:b6:59:d6:6c:cf:
                    be:e5:8a:70:78:cc:35:a9:01:f3:e7:f2:55:cd:a5:
                    f5:4c:0b:bd:6f:5f:ae:d0:9f:14:15:43:fc:b3:dd:
                    8e:09:24:8b:c1:06:aa:23:16:7e:a7:d3:34:cf:9f:
                    a3:ed:d6:59:00:88:ec:16:4f:cc:0a:6a:8e:ee:7b:
                    98:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:1C:DA:A7:A6:8D:78:8D:91:B9:6A:AB:7E:68:07:FB:70:7B:E8:76
            X509v3 Authority Key Identifier:
                keyid:93:FE:83:90:03:F5:61:08:24:C2:92:06:ED:0F:21:C4:5C:E3:A5:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86x48xLj26turkTUhqXzcBSas2xnEQohzqVdaKdDQKAv/0/93FE839003F5610824C29206ED0F21C45CE3A5B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93FE839003F5610824C29206ED0F21C45CE3A5B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86x48xLj26turkTUhqXzcBSas2xnEQohzqVdaKdDQKAv/0/323830343a323561633a3a2f33322d313238203d3e20323634323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:04:07:72:55:53:42:5a:27:f5:bb:a4:34:d7:a8:f6:f6:2a:
         8f:4c:07:7c:a2:f7:9b:0d:f2:11:96:f3:d4:18:f7:6d:ad:5c:
         d4:f0:10:38:f1:38:cd:7e:8a:c5:f2:7c:33:ad:f1:8c:7c:af:
         d5:56:bc:d7:d3:21:8f:29:66:9b:03:6e:92:81:b0:73:f9:8c:
         82:52:cb:02:7c:ab:52:da:ad:02:55:82:99:8f:01:d5:7e:d4:
         29:12:f3:da:1d:52:c2:ae:31:d8:ff:f0:bb:3b:07:ac:70:3b:
         30:17:f0:93:92:bf:03:50:fa:fb:1f:9f:b4:75:a1:13:56:12:
         28:58:3d:22:a4:46:a9:48:cf:da:0f:7d:4b:ee:69:71:8f:09:
         f5:ff:88:f4:5e:ae:e2:7a:7b:69:3f:25:9b:cd:5e:52:f1:d7:
         15:f5:27:8c:5b:72:a4:85:aa:ad:8b:9f:ad:31:78:19:d7:b9:
         e5:61:14:b6:e3:78:e6:81:16:2a:7e:69:ae:a3:7a:13:d8:ee:
         03:ee:e7:48:5b:85:94:c1:47:eb:80:e1:82:18:c8:d0:29:29:
         96:35:d1:03:4c:fd:b6:cb:d9:f3:63:b1:84:c3:ac:39:dc:9d:
         0b:5e:a4:4a:9f:f9:e4:f4:41:1d:81:d2:04:51:5e:23:23:01:
         ab:59:fe:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 19:08:43 2025 by rpki-client