Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/323830343a323663343a3a2f33322d3332203d3e20323633383535.roa
File:                     323830343a323663343a3a2f33322d3332203d3e20323633383535.roa (raw, json)
Hash identifier:          WBpWpR65tKhTQVFk9xlKrwjCfX1+/ArGHPRwP4IYruo=
Subject key identifier:   08:72:3F:B6:D7:60:70:FB:33:7E:CD:D5:E6:95:B3:07:BB:88:A9:19
Certificate issuer:       /CN=2AAAE9376A44E0C38B3B347DE65243184A2C2242
Certificate serial:       2483FC87D8E2ADB7E02994AF7050E1D52CFDEB17
Authority key identifier: 2A:AA:E9:37:6A:44:E0:C3:8B:3B:34:7D:E6:52:43:18:4A:2C:22:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AAAE9376A44E0C38B3B347DE65243184A2C2242.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/323830343a323663343a3a2f33322d3332203d3e20323633383535.roa
Signing time:             Tue 26 Nov 2024 18:54:10 +0000
ROA not before:           Tue 26 Nov 2024 18:49:10 +0000
ROA not after:            Tue 25 Nov 2025 18:54:10 +0000
asID:                     263855
IP address blocks:        2804:26c4::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:83:fc:87:d8:e2:ad:b7:e0:29:94:af:70:50:e1:d5:2c:fd:eb:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AAAE9376A44E0C38B3B347DE65243184A2C2242
        Validity
            Not Before: Nov 26 18:49:10 2024 GMT
            Not After : Nov 25 18:54:10 2025 GMT
        Subject: CN=08723FB6D76070FB337ECDD5E695B307BB88A919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c6:51:78:ce:de:cc:95:f0:b7:76:f9:f3:f0:
                    4f:f2:4d:a2:4f:eb:ea:39:e4:1f:92:81:b8:ee:30:
                    27:61:e7:3c:34:8f:3c:3e:7d:c1:7b:0a:f5:94:2c:
                    08:ea:ab:25:ca:e9:eb:ac:71:cc:66:2f:e9:07:0b:
                    ae:5b:54:1e:b7:01:76:ce:fe:8e:55:de:a4:22:73:
                    72:c0:4f:b8:0d:39:72:c7:a3:d6:6f:8a:68:d2:30:
                    c3:72:a0:68:b1:98:e3:bc:14:73:2c:6e:c2:79:6a:
                    10:6b:61:bf:a9:7d:e1:a7:94:ed:6b:ff:4c:ae:3f:
                    0e:80:a5:7c:d3:e8:d5:3c:cb:29:92:2b:35:6f:82:
                    15:31:bd:2c:c3:8a:d8:c8:a8:62:cd:23:ef:eb:a1:
                    36:10:0f:a2:46:2b:2d:c7:56:f4:7a:0d:eb:6d:4d:
                    cb:5b:5d:3e:f7:c2:af:c2:6e:74:4e:78:f6:e6:5d:
                    06:9e:68:3a:23:b8:71:1d:f3:ef:e1:c1:53:16:36:
                    dc:18:f1:3c:55:51:30:1b:a6:96:ab:ef:88:be:93:
                    99:23:12:f7:77:bb:61:a5:39:f0:1a:a8:bb:7d:06:
                    29:9e:e9:cf:3e:e9:38:a5:6c:ed:a4:ad:86:db:f5:
                    83:2b:b5:51:4b:9c:d6:e5:9b:cc:c7:f3:31:97:e4:
                    b8:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:72:3F:B6:D7:60:70:FB:33:7E:CD:D5:E6:95:B3:07:BB:88:A9:19
            X509v3 Authority Key Identifier:
                keyid:2A:AA:E9:37:6A:44:E0:C3:8B:3B:34:7D:E6:52:43:18:4A:2C:22:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/2AAAE9376A44E0C38B3B347DE65243184A2C2242.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AAAE9376A44E0C38B3B347DE65243184A2C2242.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/323830343a323663343a3a2f33322d3332203d3e20323633383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:26c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:44:24:16:e0:b3:ff:44:29:82:e5:52:71:6a:d7:d9:5e:a2:
         d4:4d:a3:49:23:67:cb:ec:a5:1e:92:ad:32:e3:a7:36:55:df:
         af:16:f4:2c:13:13:02:0f:18:7e:ae:c9:b9:eb:ac:d0:61:77:
         4a:fd:72:60:6d:4b:26:0b:01:df:7e:e3:d6:5c:67:49:fd:17:
         7c:a2:6f:74:71:40:47:18:2f:8a:be:58:ee:c6:e2:4b:45:ca:
         3d:60:e7:65:31:34:a5:57:e5:28:eb:ab:19:4b:1e:2a:ba:8e:
         6c:d4:fe:85:bf:4b:c1:5a:50:5a:e5:c8:b6:cd:18:9e:4e:4d:
         11:b6:f1:9a:e0:d6:da:96:d4:fd:59:f0:7a:9e:f3:4d:90:69:
         52:ff:32:fe:a2:73:75:71:c7:e4:08:0b:93:b9:76:e8:12:e4:
         59:74:8b:eb:cc:9c:04:68:df:6d:5e:8b:d4:8b:61:5d:76:15:
         5f:ac:15:1a:02:3a:ac:b7:b7:de:e2:4d:b3:d9:a0:8a:b0:92:
         1f:7c:aa:44:07:52:51:2e:0e:d0:f7:b2:58:4c:6f:56:6a:c5:
         8a:13:3f:64:e5:81:bd:f6:0e:50:fc:fe:50:10:d6:b9:ea:a4:
         9b:28:e7:86:04:52:08:27:bc:07:47:a4:c1:36:28:76:4e:6c:
         2d:d7:4d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 06:22:26 2025 by rpki-client