Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a3a2f33322d3438203d3e203238323630.roa
File:                     323830343a323865343a3a2f33322d3438203d3e203238323630.roa (raw, json)
Hash identifier:          D051Yaqvmnu4+5weSiGXZngemwxfXszbOZtJ8PLu+lw=
Subject key identifier:   13:B4:EF:50:AC:48:01:95:85:2D:6F:1D:46:E6:DF:FF:BB:4C:33:E7
Certificate issuer:       /CN=EDDE9456DFB0E0B6141479B36FE32CA0BF98688B
Certificate serial:       454D3D6070DC3F9FAA7953ACB0B665BA76FE50E3
Authority key identifier: ED:DE:94:56:DF:B0:E0:B6:14:14:79:B3:6F:E3:2C:A0:BF:98:68:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDDE9456DFB0E0B6141479B36FE32CA0BF98688B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a3a2f33322d3438203d3e203238323630.roa
Signing time:             Mon 27 Jan 2025 20:49:22 +0000
ROA not before:           Mon 27 Jan 2025 20:44:22 +0000
ROA not after:            Mon 26 Jan 2026 20:49:22 +0000
asID:                     28260
IP address blocks:        2804:28e4::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:4d:3d:60:70:dc:3f:9f:aa:79:53:ac:b0:b6:65:ba:76:fe:50:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDDE9456DFB0E0B6141479B36FE32CA0BF98688B
        Validity
            Not Before: Jan 27 20:44:22 2025 GMT
            Not After : Jan 26 20:49:22 2026 GMT
        Subject: CN=13B4EF50AC480195852D6F1D46E6DFFFBB4C33E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1f:67:44:af:9e:2f:ac:d8:d8:a7:a5:dd:bc:
                    9e:1d:28:35:ff:fb:ed:21:47:15:13:bc:bc:79:12:
                    58:ad:96:ac:c9:32:af:8d:ea:12:93:9d:5e:de:27:
                    67:a9:99:a8:71:77:f8:79:86:88:9f:7a:47:4b:b0:
                    59:a3:3f:f2:00:b7:7e:0b:82:d4:6c:0b:09:79:e3:
                    61:8b:f9:ff:36:7f:ed:ea:27:05:92:d7:84:7b:59:
                    57:eb:c1:fd:07:bb:98:05:75:3d:c5:65:75:87:f7:
                    d9:02:b2:25:77:7a:4e:7c:e2:06:ac:ee:cc:c3:c8:
                    8a:65:eb:08:70:5a:6a:14:3a:e3:c0:0f:0e:43:ca:
                    71:34:01:8d:6b:8f:fe:98:fe:66:64:b6:a0:8a:79:
                    8e:aa:ba:96:da:a3:23:ad:8c:7b:23:7f:47:11:3e:
                    9a:5a:c5:f8:91:a1:fc:e7:1c:72:71:6a:c2:e6:d0:
                    39:2c:32:38:91:48:ed:85:95:1b:03:69:bc:1f:04:
                    21:cb:64:5f:5d:50:8d:64:0a:ab:3b:94:7d:f2:f9:
                    4a:ca:2d:87:57:28:cf:61:e4:5c:a2:db:f8:f9:ed:
                    a3:ca:95:bf:4f:8b:6f:2e:9f:fb:c6:95:28:15:ea:
                    97:b3:13:b0:6b:bf:9f:9e:b3:44:32:66:7a:d4:23:
                    a6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:B4:EF:50:AC:48:01:95:85:2D:6F:1D:46:E6:DF:FF:BB:4C:33:E7
            X509v3 Authority Key Identifier:
                keyid:ED:DE:94:56:DF:B0:E0:B6:14:14:79:B3:6F:E3:2C:A0:BF:98:68:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/EDDE9456DFB0E0B6141479B36FE32CA0BF98688B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDDE9456DFB0E0B6141479B36FE32CA0BF98688B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a3a2f33322d3438203d3e203238323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28e4::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:8b:92:b2:10:40:6f:fd:c0:52:0f:bb:66:74:1a:f5:08:93:
         c3:a0:75:b0:a4:2e:0e:d4:ec:46:37:11:c0:8a:1c:c8:73:02:
         21:67:af:4d:ec:64:40:c2:6a:61:97:41:aa:10:dc:ae:05:7f:
         50:23:1a:aa:f3:dc:9c:f5:b1:50:eb:a4:51:4b:af:40:c6:fa:
         2a:71:34:f7:af:dd:3b:99:ed:31:e3:16:b0:a1:ed:24:b1:82:
         cf:1d:99:1e:6b:4f:88:01:4e:2d:a1:47:81:52:d5:00:b7:05:
         79:54:81:81:4d:f1:0b:10:37:96:e0:a9:b4:f2:34:0d:4d:48:
         2f:58:c4:02:33:01:7c:66:b5:dc:93:b3:f9:55:c9:30:43:fd:
         95:d9:0a:eb:e3:65:21:2d:8e:4c:96:8c:35:d1:ee:74:b2:11:
         5e:a7:7a:93:28:ec:f2:6c:25:01:c5:6c:45:3e:04:33:fe:d8:
         e8:47:38:78:89:8a:62:66:16:19:4f:2d:b5:7d:65:b2:03:af:
         a9:57:d0:3a:74:80:cf:6b:47:27:b9:8c:d0:bd:56:49:52:7c:
         b3:44:b5:4c:9b:88:5e:82:4e:1c:33:71:35:40:a3:0b:ee:17:
         7b:45:58:32:7f:9f:3a:80:e4:08:5c:82:b7:37:d1:33:48:ac:
         18:e8:1e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:51:21 2025 by rpki-client