Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/92RcaRZuJsUfeCFJnxACF6eDiRfyz66sbAhS1QjfB3Mi/2/323830343a363032343a3a2f33322d3438203d3e20323639313438.roa
File:                     323830343a363032343a3a2f33322d3438203d3e20323639313438.roa (raw, json)
Hash identifier:          lpO+H3LpDjdqMY34hgEihhyK8q77gh+qOJTe6vCHpbI=
Subject key identifier:   C8:EB:29:DB:39:17:90:00:2D:57:00:22:32:A4:27:D5:7D:42:1B:7C
Certificate issuer:       /CN=1D3829E5A9073F7F5614BCF961CF641519A58E94
Certificate serial:       287066812DCE1E20A9088868039F3A8323358A60
Authority key identifier: 1D:38:29:E5:A9:07:3F:7F:56:14:BC:F9:61:CF:64:15:19:A5:8E:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D3829E5A9073F7F5614BCF961CF641519A58E94.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/92RcaRZuJsUfeCFJnxACF6eDiRfyz66sbAhS1QjfB3Mi/2/323830343a363032343a3a2f33322d3438203d3e20323639313438.roa
Signing time:             Thu 06 Mar 2025 16:52:22 +0000
ROA not before:           Thu 06 Mar 2025 16:47:22 +0000
ROA not after:            Thu 05 Mar 2026 16:52:22 +0000
asID:                     269148
IP address blocks:        2804:6024::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:70:66:81:2d:ce:1e:20:a9:08:88:68:03:9f:3a:83:23:35:8a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D3829E5A9073F7F5614BCF961CF641519A58E94
        Validity
            Not Before: Mar  6 16:47:22 2025 GMT
            Not After : Mar  5 16:52:22 2026 GMT
        Subject: CN=C8EB29DB391790002D57002232A427D57D421B7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:75:a1:60:59:56:37:40:6e:f9:36:7c:66:06:
                    d9:a9:e5:e1:a2:ff:9c:e7:ba:a6:e3:a4:53:bc:49:
                    f8:57:0c:b4:08:11:1f:d0:4e:e4:8f:ab:12:a5:ee:
                    5a:b2:fe:03:49:7c:ac:fe:05:f4:b1:d6:03:a7:14:
                    c2:0b:87:f4:f2:3b:30:97:c2:2f:66:8d:22:50:6f:
                    6c:bc:50:c5:c3:5d:6d:fb:08:f1:72:6a:7e:d4:b5:
                    40:80:a3:04:e2:0a:29:52:46:21:c1:98:1a:fa:b0:
                    1c:af:36:f0:bd:03:b5:14:c4:e5:95:2a:06:5e:b3:
                    8a:a8:be:48:7e:60:8a:57:16:68:13:f5:79:56:65:
                    09:c1:80:19:ac:93:a5:c7:74:c6:88:a3:e5:33:0d:
                    e5:57:a2:03:48:0e:2d:5a:ef:c1:67:5c:05:ba:0b:
                    1d:fe:cb:88:1c:5a:69:7b:24:b8:55:01:82:67:50:
                    60:1f:08:ad:1e:7c:4d:0a:48:49:21:28:c8:08:73:
                    e2:55:f4:4f:de:3e:16:86:9b:28:5d:3b:04:c4:00:
                    db:93:36:82:f9:bd:70:85:bc:9b:6a:cb:90:62:0e:
                    42:96:2e:36:70:21:7d:4d:07:c9:6d:28:5a:62:4f:
                    48:ed:ca:8f:c1:a3:a5:64:6d:39:0a:4f:15:7d:37:
                    fc:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:EB:29:DB:39:17:90:00:2D:57:00:22:32:A4:27:D5:7D:42:1B:7C
            X509v3 Authority Key Identifier:
                keyid:1D:38:29:E5:A9:07:3F:7F:56:14:BC:F9:61:CF:64:15:19:A5:8E:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/92RcaRZuJsUfeCFJnxACF6eDiRfyz66sbAhS1QjfB3Mi/2/1D3829E5A9073F7F5614BCF961CF641519A58E94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D3829E5A9073F7F5614BCF961CF641519A58E94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/92RcaRZuJsUfeCFJnxACF6eDiRfyz66sbAhS1QjfB3Mi/2/323830343a363032343a3a2f33322d3438203d3e20323639313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6024::/32

    Signature Algorithm: sha256WithRSAEncryption
         da:d3:69:3d:62:71:39:b2:3d:ec:61:b2:0c:4a:91:81:81:0f:
         2d:46:79:31:52:ca:6e:0f:9e:07:11:35:d2:ef:6e:45:64:5c:
         89:7a:15:f1:7f:52:49:5f:ae:c1:84:51:ce:69:71:c2:1e:fc:
         37:d6:bd:08:58:5d:e1:77:02:69:16:d4:80:ca:af:16:3d:c3:
         3c:8a:2a:4c:72:0a:c3:e7:86:88:2f:c1:22:6c:6f:17:1e:ef:
         08:4d:a7:86:2d:30:84:00:f6:b2:0b:55:3b:d7:7c:da:88:19:
         dc:28:dd:e8:81:c6:5e:29:71:32:c6:94:56:da:db:54:1f:76:
         83:61:b1:ef:89:15:2c:d0:b2:ef:52:0c:71:a1:d9:e4:2b:e9:
         5c:8f:04:49:48:7c:40:c2:65:b9:ba:e3:ab:51:ca:fc:db:bd:
         8b:d5:ec:96:de:e2:3a:bf:b3:ef:93:95:19:5e:ee:06:96:4a:
         8f:a5:0c:9e:60:49:16:7a:ae:ee:fd:d8:50:25:75:50:f1:04:
         46:cf:28:08:61:04:60:c7:d3:f4:0e:1b:f4:0c:9a:bd:df:8c:
         6d:cf:ad:6c:90:cf:b7:f1:9f:02:22:dd:dd:5d:b9:14:59:00:
         4d:7e:79:ff:79:4e:be:b9:91:54:8a:95:60:80:b6:36:62:47:
         97:26:d7:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:55:33 2025 by rpki-client