Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a383430303a3a2f33382d3338203d3e20323733333039.roa
File:                     323830343a386337633a383430303a3a2f33382d3338203d3e20323733333039.roa (raw, json)
Hash identifier:          upa3r3dI4TZYGq0pqvUdZcf3v/5jCZpmOQs4Am3BvH0=
Subject key identifier:   BD:A0:14:D3:BF:07:F0:42:0B:81:53:4C:85:88:5A:E7:35:81:33:2C
Certificate issuer:       /CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
Certificate serial:       164E20F82E19ADE5D3A4ACCE455331FF714273AB
Authority key identifier: 11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a383430303a3a2f33382d3338203d3e20323733333039.roa
Signing time:             Thu 05 Dec 2024 19:11:07 +0000
ROA not before:           Thu 05 Dec 2024 19:06:07 +0000
ROA not after:            Thu 04 Dec 2025 19:11:07 +0000
asID:                     273309
IP address blocks:        2804:8c7c:8400::/38 maxlen: 38
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:4e:20:f8:2e:19:ad:e5:d3:a4:ac:ce:45:53:31:ff:71:42:73:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
        Validity
            Not Before: Dec  5 19:06:07 2024 GMT
            Not After : Dec  4 19:11:07 2025 GMT
        Subject: CN=BDA014D3BF07F0420B81534C85885AE73581332C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2f:4a:11:e6:61:fc:d2:49:a8:14:0e:e0:94:
                    cc:ea:88:78:cf:bb:3b:9c:07:ec:2e:cc:a9:c3:84:
                    c4:57:0b:b2:43:29:8b:97:b4:24:8d:c3:35:ef:6e:
                    10:e6:67:09:25:18:ed:a2:26:e3:2b:62:62:36:6a:
                    b2:cc:28:e4:18:65:ba:5c:f2:ff:f1:62:18:02:07:
                    c3:82:70:b5:6f:a6:89:37:66:79:6a:c7:45:15:74:
                    e1:9c:1e:39:5c:c2:91:98:84:2e:a9:61:f1:2b:0f:
                    52:8a:e4:16:54:a7:cf:70:ff:ad:c2:fc:be:c7:bd:
                    32:ab:9c:64:ac:dd:c0:54:8b:f5:91:28:0c:72:a8:
                    fa:77:73:dc:2b:6c:79:d5:1a:07:62:b9:2f:8f:ce:
                    0b:01:90:ff:be:f0:fe:23:9d:f4:35:b7:95:10:9e:
                    f2:c6:14:cb:f4:77:e2:66:40:41:e9:41:0f:70:13:
                    10:f8:e5:8a:21:d5:af:98:91:2f:75:25:18:11:97:
                    38:d5:5c:1d:a5:27:f1:2e:a5:6a:1a:29:13:3c:41:
                    3c:da:57:7d:33:38:70:59:7a:52:75:3a:1a:93:b3:
                    5b:6b:cc:ad:e9:8d:d6:7e:56:6b:87:9b:3d:3d:bb:
                    71:67:42:fc:69:1b:10:a5:14:61:42:f9:5d:8e:f6:
                    6f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:A0:14:D3:BF:07:F0:42:0B:81:53:4C:85:88:5A:E7:35:81:33:2C
            X509v3 Authority Key Identifier:
                keyid:11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a383430303a3a2f33382d3338203d3e20323733333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c7c:8400::/38

    Signature Algorithm: sha256WithRSAEncryption
         be:2f:df:6e:4a:3e:8c:65:d5:ce:f1:c3:ba:9b:b2:c0:9c:2f:
         2e:31:aa:b8:c6:64:aa:d6:c3:2e:36:68:ed:ce:72:f1:72:cc:
         ff:27:5c:5b:06:23:64:0c:d6:66:c8:a9:4e:ac:4e:c7:5d:58:
         64:11:6d:52:19:b4:6f:c7:05:14:92:d1:80:a5:ca:8b:de:f3:
         a1:0e:1b:a0:eb:4e:1c:0e:d5:3b:2c:0c:1c:38:a7:7f:65:58:
         33:43:6a:25:51:71:1a:d0:77:c0:91:4b:37:ee:20:4f:28:7f:
         48:02:26:89:a7:65:1e:9b:07:11:cf:b1:d5:37:4e:6b:59:4c:
         fe:f6:f1:29:c5:ac:91:d3:34:ac:66:c4:41:f8:2d:95:1b:f7:
         6a:8e:b8:cd:8f:e6:0a:51:23:cc:05:f1:42:46:36:af:fd:dd:
         12:49:dd:59:aa:45:a2:9a:db:b3:a5:f3:ec:72:1d:cf:f9:04:
         56:c0:33:52:20:e6:ef:14:02:5e:2d:fa:1f:db:17:fd:d7:f0:
         17:08:c8:06:fb:96:d8:dc:0d:f5:32:80:26:6e:4d:12:33:49:
         de:40:78:94:3f:13:9e:05:e6:73:85:93:36:fe:3c:42:ce:36:
         50:ea:a7:6d:c5:92:2a:00:b6:28:f9:fc:d5:d1:2d:9a:0c:3d:
         c6:c5:62:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:24:03 2025 by rpki-client