Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/0/323830343a343435303a3a2f33322d3332203d3e20323637363234.roa
File:                     323830343a343435303a3a2f33322d3332203d3e20323637363234.roa (raw, json)
Hash identifier:          YDNQ9dS6N/acaCEZ23FPFvOcW+jalb+t6Wu0zmcjCpQ=
Subject key identifier:   9D:8F:C2:33:A7:29:F9:71:4D:3D:66:CF:5E:1F:37:77:4A:F7:12:AF
Certificate issuer:       /CN=2FDD244EC556A596E63C023656A4E5EF4723BBAF
Certificate serial:       06D6F3FAF3C076ABE2869D5A01C98B0D0EA463D3
Authority key identifier: 2F:DD:24:4E:C5:56:A5:96:E6:3C:02:36:56:A4:E5:EF:47:23:BB:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FDD244EC556A596E63C023656A4E5EF4723BBAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/0/323830343a343435303a3a2f33322d3332203d3e20323637363234.roa
Signing time:             Fri 01 Nov 2024 14:14:28 +0000
ROA not before:           Fri 01 Nov 2024 14:09:28 +0000
ROA not after:            Fri 31 Oct 2025 14:14:28 +0000
asID:                     267624
IP address blocks:        2804:4450::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:d6:f3:fa:f3:c0:76:ab:e2:86:9d:5a:01:c9:8b:0d:0e:a4:63:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FDD244EC556A596E63C023656A4E5EF4723BBAF
        Validity
            Not Before: Nov  1 14:09:28 2024 GMT
            Not After : Oct 31 14:14:28 2025 GMT
        Subject: CN=9D8FC233A729F9714D3D66CF5E1F37774AF712AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:7b:53:fc:ce:8d:91:e5:34:96:6e:3c:ae:a2:
                    a4:5e:80:8d:a6:fc:a2:0b:17:00:05:39:9b:f0:e3:
                    b5:c2:4c:c6:1e:ee:ad:46:e8:cf:d9:f1:d6:e2:9e:
                    fb:41:78:4e:35:e9:18:c2:75:cc:d9:f2:16:3a:ef:
                    77:95:8c:a6:54:d3:df:2a:5b:e1:28:9c:9f:9a:8a:
                    90:c1:59:f5:ac:71:5a:17:a8:45:57:4b:47:9d:7d:
                    90:d7:03:90:ed:1e:5c:61:bf:51:eb:88:c1:d6:9e:
                    b3:a0:c5:e5:dc:0d:89:5a:2b:12:b4:b8:74:49:14:
                    b7:cc:4f:be:0b:03:70:80:45:a1:de:e3:e0:2c:57:
                    98:4f:7a:10:9b:b2:5d:2a:00:a0:c0:6f:f0:b1:b0:
                    74:e1:e2:9a:e9:b7:65:2f:26:a5:fb:b5:cb:f0:1c:
                    8c:42:90:07:38:c7:d4:fb:d3:64:fb:04:ac:78:0d:
                    43:3c:22:ca:67:43:03:92:d3:a9:61:a5:f4:d1:af:
                    18:84:46:7d:81:8c:34:ba:03:64:47:08:0a:10:82:
                    74:f1:9f:98:74:8d:5d:95:67:66:12:66:fa:80:c0:
                    81:b6:21:fe:7e:a3:3f:8b:07:6f:7c:c5:fe:ac:24:
                    68:b9:de:48:82:61:5a:d0:05:1e:cf:ea:f6:ef:f2:
                    9b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:8F:C2:33:A7:29:F9:71:4D:3D:66:CF:5E:1F:37:77:4A:F7:12:AF
            X509v3 Authority Key Identifier:
                keyid:2F:DD:24:4E:C5:56:A5:96:E6:3C:02:36:56:A4:E5:EF:47:23:BB:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/0/2FDD244EC556A596E63C023656A4E5EF4723BBAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FDD244EC556A596E63C023656A4E5EF4723BBAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/0/323830343a343435303a3a2f33322d3332203d3e20323637363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4450::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:dd:e6:eb:44:f7:f5:58:36:e6:7c:9f:f8:23:f1:09:6f:f1:
         e6:78:7b:07:67:f1:5f:77:e3:73:1d:39:cf:e7:f1:e3:a6:f1:
         c2:3b:99:5d:eb:93:ec:c3:ad:d3:d7:b3:ad:d1:f0:10:1d:e5:
         95:f3:3d:15:7c:a7:a1:e2:73:bf:e1:19:15:78:0a:b5:37:d3:
         aa:b1:6b:0c:ba:77:2e:fb:87:7a:01:be:a0:a2:d0:d8:12:87:
         17:b8:82:8a:d5:6b:99:65:3f:36:c2:da:f6:c7:e0:f7:55:fc:
         57:a5:03:6a:d4:39:fe:3c:ba:1c:9c:5c:aa:e7:a6:ba:10:75:
         f8:0b:e0:01:89:c1:57:e7:25:51:ce:48:d2:bb:c1:3f:92:2d:
         d8:2e:e5:2e:9f:2e:34:62:5b:25:d5:be:34:ca:ad:69:71:6f:
         f5:94:21:33:c2:9b:39:e0:70:f7:5b:44:96:8f:69:28:32:5d:
         bd:a3:51:e2:ec:86:19:be:7b:78:31:7d:41:27:ba:46:90:ba:
         06:cd:92:bf:f8:98:ed:29:5d:29:26:e6:82:9d:04:01:8c:2f:
         ad:6e:bb:a5:08:d3:aa:27:2a:13:f9:86:65:30:11:18:53:e1:
         bc:7c:ca:25:9a:13:64:d3:20:14:91:1e:59:9a:56:4b:7e:0b:
         91:35:e9:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:56:39 2025 by rpki-client