Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8DFFaWJrZQzAk1o4S5oVY5v2pExFAERWfQcpn2aHzAaW/1/323830343a333166633a3a2f33322d3438203d3e203533303232.roa
File:                     323830343a333166633a3a2f33322d3438203d3e203533303232.roa (raw, json)
Hash identifier:          0w8gOYNEzMfvCU1KFugWlYePgxFoufVBTGAHw0jdlmY=
Subject key identifier:   E2:E8:53:63:EC:37:0D:84:F3:C8:38:D8:80:99:16:B6:B8:B8:99:8D
Certificate issuer:       /CN=93E4BA76EC60DA98DE98103D4C88131B429F3326
Certificate serial:       66D1B724D072243983B13755A16127C4FCCA512B
Authority key identifier: 93:E4:BA:76:EC:60:DA:98:DE:98:10:3D:4C:88:13:1B:42:9F:33:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93E4BA76EC60DA98DE98103D4C88131B429F3326.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8DFFaWJrZQzAk1o4S5oVY5v2pExFAERWfQcpn2aHzAaW/1/323830343a333166633a3a2f33322d3438203d3e203533303232.roa
Signing time:             Thu 06 Mar 2025 10:36:52 +0000
ROA not before:           Thu 06 Mar 2025 10:31:52 +0000
ROA not after:            Thu 05 Mar 2026 10:36:52 +0000
asID:                     53022
IP address blocks:        2804:31fc::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:d1:b7:24:d0:72:24:39:83:b1:37:55:a1:61:27:c4:fc:ca:51:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93E4BA76EC60DA98DE98103D4C88131B429F3326
        Validity
            Not Before: Mar  6 10:31:52 2025 GMT
            Not After : Mar  5 10:36:52 2026 GMT
        Subject: CN=E2E85363EC370D84F3C838D8809916B6B8B8998D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e9:f5:e6:5b:6d:f2:ff:ce:43:e2:53:94:12:
                    b8:fd:03:de:9c:73:27:bb:4e:bd:97:57:47:d0:e4:
                    e9:c6:16:02:7c:60:d8:b0:74:9d:03:8c:58:52:1a:
                    8b:5b:53:03:17:17:28:f0:14:a2:1d:29:17:f7:01:
                    9d:b9:1b:ef:f2:68:0b:0e:54:42:d9:c8:71:82:4f:
                    de:21:fe:f6:3f:19:31:ff:94:2f:d3:2b:26:f2:5d:
                    07:2d:1c:23:d1:91:78:e3:83:ed:ea:42:9b:b4:a3:
                    d2:46:08:cc:63:b8:da:12:67:f2:fc:6b:65:ba:94:
                    12:d6:b8:9a:f8:48:27:55:9d:43:15:f5:a3:91:c2:
                    e0:f9:2e:b3:54:3f:7f:dc:67:d9:6c:ab:9b:4d:10:
                    8a:88:52:4e:14:ed:f9:37:e2:88:08:78:c0:49:6b:
                    bd:2a:d0:9c:7b:1c:70:a2:ef:9f:68:61:30:11:95:
                    50:35:a9:fd:58:15:1a:01:a4:8f:75:2f:cd:10:f6:
                    18:9c:a8:8f:4c:4a:8b:88:1a:08:ef:62:cb:95:a5:
                    3a:93:43:c7:c7:e9:a3:a6:d1:8b:9a:1c:d3:cb:a1:
                    07:b0:42:66:80:c3:9d:83:e4:26:b5:e8:16:c4:bd:
                    06:c7:e9:05:9c:53:8a:6c:da:b0:b4:ae:ca:78:f7:
                    43:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:E8:53:63:EC:37:0D:84:F3:C8:38:D8:80:99:16:B6:B8:B8:99:8D
            X509v3 Authority Key Identifier:
                keyid:93:E4:BA:76:EC:60:DA:98:DE:98:10:3D:4C:88:13:1B:42:9F:33:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8DFFaWJrZQzAk1o4S5oVY5v2pExFAERWfQcpn2aHzAaW/1/93E4BA76EC60DA98DE98103D4C88131B429F3326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93E4BA76EC60DA98DE98103D4C88131B429F3326.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8DFFaWJrZQzAk1o4S5oVY5v2pExFAERWfQcpn2aHzAaW/1/323830343a333166633a3a2f33322d3438203d3e203533303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:31fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:1b:6b:98:87:27:51:ed:b1:79:e0:27:d3:ad:12:1e:2d:21:
         e9:b1:d2:df:31:33:7b:3f:80:04:bc:d2:8c:c3:f5:4c:95:e8:
         02:08:81:84:87:27:bd:fa:26:0d:1e:32:a1:54:79:52:e3:f9:
         53:13:47:d2:b6:ac:fa:0a:e1:43:03:57:90:41:fe:4a:5d:81:
         cc:16:b1:eb:fc:f6:8f:62:56:c5:97:69:d7:a2:e7:99:b9:e0:
         3e:d8:af:4c:3f:f3:7d:ad:b4:86:75:f7:08:b5:78:c7:83:18:
         56:8d:34:39:01:80:b4:b5:34:f6:73:02:65:b7:df:13:82:40:
         b3:41:0f:c6:f5:2a:36:97:10:1c:ae:d9:e6:9f:9b:ea:66:8d:
         ff:ef:3d:76:26:f4:43:58:6a:b7:2b:2e:b5:ef:c7:82:a7:59:
         a2:20:6f:cb:e5:0a:bd:b1:8c:51:cf:ea:1b:57:8f:8d:a7:35:
         c3:35:50:50:08:a7:a5:77:68:55:12:2f:8b:0f:08:d7:16:23:
         78:76:e1:a0:38:81:ea:00:02:1d:3c:b8:13:dd:f8:46:59:ac:
         33:a1:99:f3:3a:e8:5f:da:f8:76:2e:ff:c7:48:23:b2:6f:c3:
         89:b9:84:07:1b:dc:d0:9d:2f:9c:c7:9a:05:b3:bf:15:df:35:
         c2:66:a3:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:35:51 2025 by rpki-client