Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/323830343a373464383a383030303a3a2f33332d3333203d3e20323731303037.roa
File:                     323830343a373464383a383030303a3a2f33332d3333203d3e20323731303037.roa (raw, json)
Hash identifier:          r2UHzEpGCqOSXHuvzZx6DVVjR1E4UixPedNSlWVbcbo=
Subject key identifier:   99:F8:A1:25:0F:C1:76:75:32:71:F3:E1:7B:6E:D8:23:1D:07:C8:50
Certificate issuer:       /CN=031B7A807743AC5BE7218B45A482A2BB809962D6
Certificate serial:       022FCD9BD0BACA6E4D755B49292E416752BF930A
Authority key identifier: 03:1B:7A:80:77:43:AC:5B:E7:21:8B:45:A4:82:A2:BB:80:99:62:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/031B7A807743AC5BE7218B45A482A2BB809962D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/323830343a373464383a383030303a3a2f33332d3333203d3e20323731303037.roa
Signing time:             Fri 06 Sep 2024 18:15:29 +0000
ROA not before:           Fri 06 Sep 2024 18:10:29 +0000
ROA not after:            Fri 05 Sep 2025 18:15:29 +0000
asID:                     271007
IP address blocks:        2804:74d8:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:2f:cd:9b:d0:ba:ca:6e:4d:75:5b:49:29:2e:41:67:52:bf:93:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=031B7A807743AC5BE7218B45A482A2BB809962D6
        Validity
            Not Before: Sep  6 18:10:29 2024 GMT
            Not After : Sep  5 18:15:29 2025 GMT
        Subject: CN=99F8A1250FC176753271F3E17B6ED8231D07C850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d9:7f:3c:86:ff:18:99:d9:48:50:28:14:17:
                    e4:94:22:18:c4:f4:c8:2c:d8:a7:a0:1d:fa:84:c1:
                    2a:b7:23:66:72:e6:78:58:00:70:c9:37:c0:2b:78:
                    54:c6:e6:9a:8e:5a:ab:c0:c2:3d:66:5f:55:fa:df:
                    00:54:9e:92:9b:06:c2:0d:92:9d:1a:1b:b4:f3:0c:
                    11:00:67:01:ce:bb:5b:fa:d8:87:d5:8a:49:49:ec:
                    75:ae:a6:d4:c4:cc:fd:99:e8:94:5d:db:8d:3c:a2:
                    59:3f:29:15:16:c1:c4:f2:e2:a0:ea:89:ac:ae:8b:
                    3c:22:a1:46:bf:30:1d:cc:9c:d3:f7:9e:c6:81:5a:
                    d2:ff:db:19:53:42:6b:f1:ce:a8:6a:3f:a1:da:56:
                    28:e0:e3:b1:c7:d0:c6:a5:1b:cc:77:9e:e1:4a:e8:
                    1f:20:4f:22:6f:f8:01:c9:b3:55:19:a7:88:38:1f:
                    95:56:27:ce:b3:c9:c3:5c:5f:f0:c9:d8:a5:3e:a2:
                    18:14:d8:15:9f:5f:ac:e3:db:dc:46:1b:12:01:e9:
                    31:49:73:d8:20:44:a0:23:0a:2d:0c:a8:03:d9:ed:
                    6d:a0:ce:65:75:cd:a4:33:d9:fc:6c:5a:f0:c4:45:
                    38:f9:80:13:2d:a0:1e:a8:e2:62:8f:28:fb:10:3d:
                    c5:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:F8:A1:25:0F:C1:76:75:32:71:F3:E1:7B:6E:D8:23:1D:07:C8:50
            X509v3 Authority Key Identifier:
                keyid:03:1B:7A:80:77:43:AC:5B:E7:21:8B:45:A4:82:A2:BB:80:99:62:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/031B7A807743AC5BE7218B45A482A2BB809962D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/031B7A807743AC5BE7218B45A482A2BB809962D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/323830343a373464383a383030303a3a2f33332d3333203d3e20323731303037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74d8:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         51:e4:5a:45:48:46:32:dc:51:8c:99:28:80:02:32:c9:26:91:
         b3:a3:12:1c:73:63:c7:d8:61:74:3f:83:52:04:9e:e5:9d:95:
         a9:26:c2:9b:a8:61:90:29:3f:c9:5b:c8:51:93:ac:b9:27:1e:
         b4:e8:ef:82:de:c6:b9:29:71:f0:cb:cb:b3:6b:ae:c2:f9:1b:
         a6:61:66:a9:ea:15:fc:ce:97:c8:21:b4:57:f8:7f:96:b8:d2:
         d7:09:85:cd:c6:9c:13:c9:ec:e0:a5:87:78:c4:07:1c:64:f9:
         3f:86:08:e6:79:6a:db:b8:34:1e:09:54:d9:e6:72:b6:ac:9e:
         35:cf:38:6f:57:cb:85:7c:25:2c:8f:7e:05:dc:b0:86:c9:e8:
         6d:b9:64:cf:9e:5d:f3:87:55:f6:7d:e3:41:59:de:c5:34:7b:
         ae:ec:c4:ac:5f:f3:8e:1e:86:55:51:8d:13:78:a4:1f:30:4b:
         44:08:68:f8:56:2a:ae:45:49:73:83:1c:7f:e9:fc:76:41:18:
         35:80:0b:df:b6:5c:d8:00:4f:a7:4f:7e:91:d7:8b:f4:f6:77:
         d8:88:cc:0a:5f:90:0a:41:40:0c:73:f6:78:8d:2c:3d:42:6f:
         22:4e:6f:80:0f:0a:b7:fe:52:60:2f:47:fa:9d:0a:78:08:73:
         bf:c1:e4:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:33 2025 by rpki-client