Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/0/323830343a6632343a3a2f33322d313238203d3e20323633353637.roa
File:                     323830343a6632343a3a2f33322d313238203d3e20323633353637.roa (raw, json)
Hash identifier:          OH54GhmqzNJTtFPCGKMCsycHaO8bZOqLM+M8pem2K40=
Subject key identifier:   16:10:E0:CE:77:49:E9:F3:F0:68:3E:E8:AE:77:34:19:5B:1E:B7:95
Certificate issuer:       /CN=594E9B5A9BC5E8A7D44AAF0E74956A3B81FCF96D
Certificate serial:       675CDD639A24E27E82F8CF004028FED74AED7E46
Authority key identifier: 59:4E:9B:5A:9B:C5:E8:A7:D4:4A:AF:0E:74:95:6A:3B:81:FC:F9:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/594E9B5A9BC5E8A7D44AAF0E74956A3B81FCF96D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/0/323830343a6632343a3a2f33322d313238203d3e20323633353637.roa
Signing time:             Fri 08 Mar 2024 18:28:15 +0000
ROA not before:           Fri 08 Mar 2024 18:23:15 +0000
ROA not after:            Fri 07 Mar 2025 18:28:15 +0000
asID:                     263567
IP address blocks:        2804:f24::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:5c:dd:63:9a:24:e2:7e:82:f8:cf:00:40:28:fe:d7:4a:ed:7e:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=594E9B5A9BC5E8A7D44AAF0E74956A3B81FCF96D
        Validity
            Not Before: Mar  8 18:23:15 2024 GMT
            Not After : Mar  7 18:28:15 2025 GMT
        Subject: CN=1610E0CE7749E9F3F0683EE8AE7734195B1EB795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:82:9d:ec:3b:df:97:dd:f3:15:0e:a1:ed:5c:
                    46:74:42:99:e5:40:6f:d9:6d:ea:32:ca:6b:31:3f:
                    02:9c:be:a1:ca:2b:aa:63:f7:dc:11:4c:27:c3:d6:
                    a1:ea:5d:3d:e1:87:a9:72:52:0d:fe:b0:94:1e:4a:
                    7c:2a:6c:02:57:08:60:8c:97:a1:a2:f6:6e:39:7f:
                    1a:c0:d8:1c:0a:b4:9a:83:36:72:32:c9:ac:b8:6c:
                    11:31:f6:13:40:2b:df:7f:5f:11:c1:69:82:0b:f3:
                    b3:94:33:0f:4c:96:55:1a:4a:f8:41:a3:ce:17:c4:
                    00:e8:e7:5f:23:60:60:3c:eb:7a:07:77:ac:d9:05:
                    0d:ba:fd:61:e8:65:78:f9:34:79:f5:1b:a5:fc:0c:
                    33:8e:6d:cc:ca:9b:0f:22:9d:56:bc:c3:7a:0a:11:
                    68:2b:8d:d8:8c:d8:39:70:3a:36:88:ff:f5:45:36:
                    75:23:34:6c:4c:7d:d0:75:95:9d:28:ea:f9:ea:3b:
                    03:f8:c0:8b:1a:d7:fb:7c:f2:dd:87:65:a0:83:36:
                    7b:10:b5:94:13:42:59:82:8f:dc:a8:a2:11:fa:e7:
                    78:e3:06:36:58:0d:7f:41:75:6b:c7:ee:5b:be:3b:
                    3d:dd:63:f9:dd:f8:2c:fe:f9:76:0a:96:dc:e6:55:
                    d0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:10:E0:CE:77:49:E9:F3:F0:68:3E:E8:AE:77:34:19:5B:1E:B7:95
            X509v3 Authority Key Identifier:
                keyid:59:4E:9B:5A:9B:C5:E8:A7:D4:4A:AF:0E:74:95:6A:3B:81:FC:F9:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/0/594E9B5A9BC5E8A7D44AAF0E74956A3B81FCF96D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/594E9B5A9BC5E8A7D44AAF0E74956A3B81FCF96D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/0/323830343a6632343a3a2f33322d313238203d3e20323633353637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:f24::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:b8:ac:24:94:ba:77:7d:9d:4a:09:5d:81:7f:aa:ae:4f:66:
         7a:ee:fc:10:80:01:1f:ec:28:9c:fe:d6:8b:9b:1b:ee:12:42:
         18:5a:1c:0a:22:3b:ab:ef:26:f4:38:24:1e:d4:d1:d1:2b:18:
         75:39:db:85:b1:3a:c6:d2:cc:80:46:d0:30:b0:a3:c3:28:59:
         74:46:82:c3:20:ed:17:bc:1d:b3:2c:19:24:55:d3:e4:12:c1:
         44:01:0e:6c:4e:b1:3f:b8:83:80:0f:84:54:be:32:7f:a1:c4:
         28:9c:26:9e:65:d9:f1:08:2b:cb:c7:46:3c:1f:34:71:ef:a7:
         88:d2:26:ab:25:ab:0b:99:5a:11:17:d0:fc:55:c3:4f:02:86:
         bc:ce:0a:c2:c7:cc:bc:7f:cf:7f:bb:2b:0a:b2:5d:7a:b8:03:
         84:46:ac:8d:3e:17:f5:38:b3:a0:96:33:c0:b5:6b:9d:22:46:
         03:14:88:38:75:3d:66:96:3a:c7:66:e8:19:9e:5a:09:b9:85:
         fb:26:f5:47:5e:c4:72:e0:48:c9:f3:7f:2e:61:4f:ea:6f:7e:
         23:30:25:dc:59:30:0e:25:42:f8:2d:cd:75:e4:e1:b5:fb:4d:
         38:39:47:5b:39:5a:ee:71:69:5c:a6:a5:21:30:24:b3:48:b3:
         bd:a8:74:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:01:37 2025 by rpki-client