Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/323830343a313432343a3a2f33322d3438203d3e203532393430.roa
File:                     323830343a313432343a3a2f33322d3438203d3e203532393430.roa (raw, json)
Hash identifier:          1XISGHehRPnfPGOxICuBs4Rv8GeX92uQ6CH9Txk3b1k=
Subject key identifier:   E0:3F:08:49:91:C1:A5:CE:88:90:4C:75:00:B9:E0:D9:ED:FF:80:31
Certificate issuer:       /CN=2F394F99007CD172C0832F8415F6842A1475173D
Certificate serial:       6FD99CCFB731560EE7BA062C156E157179788F1A
Authority key identifier: 2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/323830343a313432343a3a2f33322d3438203d3e203532393430.roa
Signing time:             Thu 31 Oct 2024 16:59:40 +0000
ROA not before:           Thu 31 Oct 2024 16:54:40 +0000
ROA not after:            Thu 30 Oct 2025 16:59:40 +0000
asID:                     52940
IP address blocks:        2804:1424::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:d9:9c:cf:b7:31:56:0e:e7:ba:06:2c:15:6e:15:71:79:78:8f:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F394F99007CD172C0832F8415F6842A1475173D
        Validity
            Not Before: Oct 31 16:54:40 2024 GMT
            Not After : Oct 30 16:59:40 2025 GMT
        Subject: CN=E03F084991C1A5CE88904C7500B9E0D9EDFF8031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d3:95:c4:fa:f8:5d:0e:96:9c:47:cd:fd:49:
                    78:f7:0d:d2:22:05:e0:5e:c7:26:9f:83:89:8b:0f:
                    01:62:db:97:c3:5c:63:0d:4f:8a:d2:ed:a6:20:72:
                    03:87:0b:cb:7c:0d:4e:95:12:10:de:62:f4:36:80:
                    63:9d:f1:31:6e:86:26:71:cd:91:e5:db:b5:a9:0c:
                    f4:d0:1b:d2:11:3f:fa:b8:4f:ed:07:86:d8:d6:da:
                    33:ad:ad:de:e6:24:bd:d6:5e:fc:ee:8e:55:39:c4:
                    9f:c1:56:27:ca:53:ed:41:4f:cf:e2:bb:32:0c:85:
                    4b:72:7d:4d:55:68:13:ae:9f:de:4e:0c:69:99:08:
                    e3:74:05:ab:db:df:4b:1f:b2:2f:20:60:94:38:a8:
                    57:98:f5:9f:86:0c:65:ea:67:c9:c2:9c:23:06:54:
                    f8:c1:75:62:29:91:33:6f:00:1d:54:e1:a6:1b:ec:
                    ed:ef:a6:11:76:b5:0a:74:f2:74:c1:11:91:13:09:
                    0e:7b:3f:01:fe:c3:8b:47:8b:93:80:ab:17:eb:db:
                    8c:95:3f:e2:65:b3:17:15:56:9a:7c:39:de:64:b6:
                    b6:b2:c9:d5:db:33:bf:d0:ca:1b:49:83:35:5d:fe:
                    bf:2a:df:1d:25:dd:2d:f6:39:4f:53:94:e5:d8:37:
                    24:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:3F:08:49:91:C1:A5:CE:88:90:4C:75:00:B9:E0:D9:ED:FF:80:31
            X509v3 Authority Key Identifier:
                keyid:2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/2F394F99007CD172C0832F8415F6842A1475173D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/323830343a313432343a3a2f33322d3438203d3e203532393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1424::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:e0:5b:6a:1e:d5:9f:a8:ab:ff:ea:b2:b9:61:ee:5c:73:4b:
         90:42:af:09:f8:1b:20:bf:a8:38:fb:77:21:72:0b:ad:2f:07:
         3c:46:b3:c1:62:46:7d:c4:05:40:f0:77:f4:c9:cc:d1:52:4e:
         bc:a9:6b:b9:2c:ac:ff:47:bd:d7:94:33:48:f6:34:25:0d:1c:
         b0:f6:80:d6:8e:f2:79:26:e7:b1:2c:c7:62:f0:dd:c2:b9:19:
         47:a1:f0:cf:7f:81:97:12:d1:b3:9c:dc:b8:b9:00:de:83:45:
         c0:d7:99:2d:3d:a9:b1:93:58:a3:f8:16:bf:29:6c:64:fe:04:
         ef:b8:d4:00:54:ed:33:e4:f1:6a:3b:b1:23:6e:67:bd:46:7e:
         5d:a5:61:38:26:62:be:34:a8:32:0a:e2:91:6a:91:0e:e3:4c:
         63:7c:ff:fd:3b:ea:cf:5a:07:d9:d8:d6:8d:f8:29:b8:ce:01:
         e0:d3:14:19:0b:2f:1a:5a:06:59:41:f6:b6:62:f7:07:0d:4a:
         c4:b2:27:62:fb:05:27:b3:bf:3a:f4:40:7e:04:e7:a9:b8:18:
         13:68:c1:0b:a7:cd:2c:db:1a:3f:ea:35:f5:81:9b:35:63:41:
         4a:19:1a:c0:67:cc:3d:8f:6f:2a:a4:f1:3e:ca:04:df:3d:c0:
         15:b5:5b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:52:36 2025 by rpki-client