Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/323830343a356534633a3a2f33322d3332203d3e20323639303234.roa
File:                     323830343a356534633a3a2f33322d3332203d3e20323639303234.roa (raw, json)
Hash identifier:          VXLwKl5vk15st1C2GAfaKcGNMZCE8SHgxNIQp4qyH+Y=
Subject key identifier:   46:11:99:61:23:AB:B6:A8:F2:A5:C4:19:E5:7E:E0:32:F0:6F:80:30
Certificate issuer:       /CN=DDA22D6D75544BECC6E53486FED661DF02BAFC69
Certificate serial:       3167CACCC62E245E18270E18877986C44CFFB99D
Authority key identifier: DD:A2:2D:6D:75:54:4B:EC:C6:E5:34:86:FE:D6:61:DF:02:BA:FC:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA22D6D75544BECC6E53486FED661DF02BAFC69.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/323830343a356534633a3a2f33322d3332203d3e20323639303234.roa
Signing time:             Mon 10 Feb 2025 18:03:52 +0000
ROA not before:           Mon 10 Feb 2025 17:58:52 +0000
ROA not after:            Mon 09 Feb 2026 18:03:52 +0000
asID:                     269024
IP address blocks:        2804:5e4c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:67:ca:cc:c6:2e:24:5e:18:27:0e:18:87:79:86:c4:4c:ff:b9:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDA22D6D75544BECC6E53486FED661DF02BAFC69
        Validity
            Not Before: Feb 10 17:58:52 2025 GMT
            Not After : Feb  9 18:03:52 2026 GMT
        Subject: CN=4611996123ABB6A8F2A5C419E57EE032F06F8030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ce:bd:22:f0:5c:c3:a9:1c:8f:88:17:76:17:
                    2e:87:ce:ac:c3:45:fb:23:05:20:6c:83:69:94:b3:
                    86:12:69:ee:34:b9:88:5c:8c:ba:95:36:ec:1b:81:
                    ce:3a:a5:5d:21:43:ee:20:0d:3d:2f:d0:39:23:3d:
                    f5:5e:6a:89:35:a5:93:7d:a1:0a:75:ac:7e:2d:9f:
                    f9:af:eb:d2:67:f6:68:4c:1e:2d:5e:aa:6d:fc:08:
                    f3:1a:1a:63:fb:24:05:b2:fa:df:11:99:c4:1a:d2:
                    a0:32:7b:14:e5:56:8d:8c:21:cb:ec:27:b2:eb:f0:
                    e6:9a:0e:41:8c:bd:48:f1:27:bd:08:0b:31:63:38:
                    93:cf:e2:5e:b9:b7:66:4a:82:74:80:c6:71:0c:c6:
                    49:a9:27:00:b0:6c:3f:e9:66:6a:6d:01:12:48:f0:
                    d3:0a:e0:60:1c:60:cf:8a:57:ad:26:b9:b5:84:84:
                    d0:37:4e:38:8a:25:ca:0f:46:b8:6d:7b:05:f4:02:
                    78:06:c5:6d:c0:87:32:b6:45:16:e7:df:74:6a:47:
                    f0:03:1c:1e:e2:d9:5d:b2:1b:82:21:67:43:05:2a:
                    b3:24:db:82:ae:86:0b:f4:6a:4f:08:3a:e6:82:d3:
                    b2:c5:d8:8d:65:b8:02:38:78:75:eb:86:6e:5a:d1:
                    09:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:11:99:61:23:AB:B6:A8:F2:A5:C4:19:E5:7E:E0:32:F0:6F:80:30
            X509v3 Authority Key Identifier:
                keyid:DD:A2:2D:6D:75:54:4B:EC:C6:E5:34:86:FE:D6:61:DF:02:BA:FC:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/DDA22D6D75544BECC6E53486FED661DF02BAFC69.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA22D6D75544BECC6E53486FED661DF02BAFC69.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/323830343a356534633a3a2f33322d3332203d3e20323639303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5e4c::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:42:aa:6f:10:27:6d:e9:ca:68:ae:03:fe:42:3d:8f:7a:f1:
         97:16:36:d3:f7:0e:1c:8e:b3:38:d5:fc:cd:cc:48:d2:52:9f:
         2d:61:13:e9:aa:68:39:a9:aa:f8:43:2b:a1:75:b6:19:60:5b:
         e5:36:88:f4:b0:b0:3a:02:e8:34:1b:6a:4b:7b:50:6f:65:fb:
         71:a9:68:00:0b:cb:a8:df:5e:4e:c5:c7:9c:94:79:c9:36:27:
         2b:f8:c4:1d:42:34:92:80:5b:c8:3e:a2:a9:6b:83:4c:ae:ff:
         d9:b2:97:e7:3f:02:ec:6f:8d:b0:24:58:79:20:37:9d:53:93:
         f6:40:2f:fa:1a:9b:da:f2:96:c4:70:1c:f1:f9:41:d3:0a:e9:
         c0:db:da:0e:a6:73:d4:09:73:10:6a:31:4f:c3:61:a4:9c:ad:
         de:21:da:29:b9:4d:a2:24:44:e7:f0:ee:99:72:0e:21:2e:47:
         fc:ee:8b:aa:24:a5:20:0b:7e:17:1a:70:29:9f:d8:95:ff:70:
         2a:5e:04:6e:5d:54:90:f4:78:c8:84:a9:48:96:39:a3:8a:c9:
         33:bd:48:23:56:e5:6f:d2:55:fd:47:01:42:4f:df:b5:4f:43:
         2e:a9:87:6d:94:a4:d1:c1:25:77:a4:c9:6a:50:2d:76:68:09:
         19:fe:ac:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:32:25 2025 by rpki-client