Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/955wyRbeUZe9sh793ns3qvtiDsEsdebFzLKVow4WogkP/0/323830343a323664383a3a2f33322d313238203d3e203533313630.roa
File:                     323830343a323664383a3a2f33322d313238203d3e203533313630.roa (raw, json)
Hash identifier:          dLaqR9H7W63zl/xFyWAFk68TGG/AT0JX/SBbLTfKS7o=
Subject key identifier:   22:72:AF:0E:18:B2:4F:92:AE:69:F9:3E:A3:4E:5A:1D:06:08:51:CA
Certificate issuer:       /CN=A4EB551354D73BB4306DB510E741AB54435DC5FE
Certificate serial:       6DD39D11ED42F7A8B0D424F10223CC01382DB736
Authority key identifier: A4:EB:55:13:54:D7:3B:B4:30:6D:B5:10:E7:41:AB:54:43:5D:C5:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4EB551354D73BB4306DB510E741AB54435DC5FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/955wyRbeUZe9sh793ns3qvtiDsEsdebFzLKVow4WogkP/0/323830343a323664383a3a2f33322d313238203d3e203533313630.roa
Signing time:             Mon 03 Feb 2025 20:03:43 +0000
ROA not before:           Mon 03 Feb 2025 19:58:43 +0000
ROA not after:            Mon 02 Feb 2026 20:03:43 +0000
asID:                     53160
IP address blocks:        2804:26d8::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:d3:9d:11:ed:42:f7:a8:b0:d4:24:f1:02:23:cc:01:38:2d:b7:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4EB551354D73BB4306DB510E741AB54435DC5FE
        Validity
            Not Before: Feb  3 19:58:43 2025 GMT
            Not After : Feb  2 20:03:43 2026 GMT
        Subject: CN=2272AF0E18B24F92AE69F93EA34E5A1D060851CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a4:89:a8:8a:ad:fb:9d:64:0d:4f:fa:dc:a2:
                    8a:5a:26:d4:eb:4f:06:ac:ba:15:9b:f3:45:48:74:
                    1a:0a:6b:44:60:00:4c:a9:13:ae:84:4f:60:b5:4c:
                    df:3e:78:d4:b2:46:01:56:17:78:65:cb:64:72:d6:
                    df:a4:ce:e7:30:71:fb:4b:b8:28:05:c9:ec:db:90:
                    27:bf:cf:44:c7:0c:f9:9c:c4:e1:6b:9d:e2:e4:13:
                    29:2a:8f:59:be:b7:9d:36:8f:f8:2e:cc:d4:f9:ed:
                    7e:cd:78:fb:59:35:e2:98:d5:e8:8d:b2:7e:c0:2d:
                    91:20:ba:32:d2:41:10:c3:57:dc:f7:a0:75:a6:eb:
                    73:29:6b:e8:15:11:96:81:de:54:57:f5:1c:bb:0e:
                    fc:1d:95:00:27:52:ea:ec:66:c0:fc:fd:23:34:d4:
                    89:12:c1:29:9a:aa:49:69:52:b0:d4:e8:ad:da:56:
                    c2:94:46:8b:21:1b:93:2c:b3:32:34:11:ac:c6:07:
                    e8:a9:74:da:56:ca:db:d6:06:75:60:f7:57:cb:19:
                    36:87:5c:58:6e:3d:da:a3:ee:29:78:ab:e2:ae:66:
                    22:b9:c3:72:eb:fd:51:b9:5c:62:46:c8:d0:0b:ff:
                    7c:b6:60:2a:bb:4b:8b:80:22:db:f9:dd:1d:77:2e:
                    b9:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:72:AF:0E:18:B2:4F:92:AE:69:F9:3E:A3:4E:5A:1D:06:08:51:CA
            X509v3 Authority Key Identifier:
                keyid:A4:EB:55:13:54:D7:3B:B4:30:6D:B5:10:E7:41:AB:54:43:5D:C5:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/955wyRbeUZe9sh793ns3qvtiDsEsdebFzLKVow4WogkP/0/A4EB551354D73BB4306DB510E741AB54435DC5FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4EB551354D73BB4306DB510E741AB54435DC5FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/955wyRbeUZe9sh793ns3qvtiDsEsdebFzLKVow4WogkP/0/323830343a323664383a3a2f33322d313238203d3e203533313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:26d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:c2:aa:43:f7:81:01:4e:bf:f9:1e:7b:4c:d8:91:d6:0e:e8:
         bc:28:e4:bc:88:d1:5f:6e:32:da:cf:36:2a:9f:81:c8:a0:48:
         6a:9e:49:d0:af:13:45:59:86:2c:3c:fa:ef:ae:6b:b9:ef:10:
         cc:ca:10:82:44:8e:c6:64:fd:68:65:af:72:c2:47:2a:72:76:
         f3:8a:ec:e1:39:27:55:87:db:5a:86:9b:d5:61:59:d8:13:9c:
         a8:15:5e:98:b2:0f:55:19:7a:1f:37:27:c8:08:18:db:2b:4d:
         f0:06:ca:db:28:4d:09:22:08:a2:d6:da:62:50:11:83:25:67:
         09:90:a5:55:0a:31:d5:b8:65:b9:cd:cf:44:64:d7:d7:c0:51:
         ed:21:6e:cc:20:e6:68:d0:e7:b7:7a:aa:7e:8f:2d:bb:66:02:
         fa:ef:7c:34:db:f2:89:41:8f:f4:a5:94:39:9e:aa:3f:98:e8:
         e0:86:d7:b9:9d:60:7e:16:b4:bd:93:f5:ca:8e:6c:59:06:89:
         5b:15:83:6d:cc:76:86:fa:10:27:c8:ce:63:86:b3:32:23:51:
         9b:c9:21:c5:d5:b4:24:3f:f1:13:dd:af:4d:73:2d:13:29:86:
         3c:0a:12:fa:cb:87:e7:1d:62:fb:ee:f4:d6:59:2c:7b:09:4f:
         76:16:be:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:21:24 2025 by rpki-client