Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a3a2f33322d3332203d3e20323733333039.roa
File:                     323830343a386337633a3a2f33322d3332203d3e20323733333039.roa (raw, json)
Hash identifier:          faDm7CBn4DFqwtg0b5WN33daPlk8PpBO8W+mE5xJhnA=
Subject key identifier:   3C:E8:22:DD:CB:38:98:B7:13:0F:55:6D:BF:79:CF:CE:7C:3A:2B:A8
Certificate issuer:       /CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
Certificate serial:       1491317F2D733340AFE7B7424E7ADD3AAEF8B20B
Authority key identifier: 11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a3a2f33322d3332203d3e20323733333039.roa
Signing time:             Thu 05 Dec 2024 19:08:31 +0000
ROA not before:           Thu 05 Dec 2024 19:03:31 +0000
ROA not after:            Thu 04 Dec 2025 19:08:31 +0000
asID:                     273309
IP address blocks:        2804:8c7c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:91:31:7f:2d:73:33:40:af:e7:b7:42:4e:7a:dd:3a:ae:f8:b2:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
        Validity
            Not Before: Dec  5 19:03:31 2024 GMT
            Not After : Dec  4 19:08:31 2025 GMT
        Subject: CN=3CE822DDCB3898B7130F556DBF79CFCE7C3A2BA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5c:88:e1:d8:8a:c8:d0:bf:15:87:69:31:8a:
                    ec:b6:90:4e:5a:64:55:38:64:35:23:7d:f1:10:f2:
                    50:51:76:fa:6f:14:58:1f:89:f3:3e:50:9d:e4:a5:
                    1f:fc:e3:7a:0a:1c:ca:5e:94:41:f5:b3:c2:40:ba:
                    c9:f4:18:4e:93:84:15:67:2c:69:2b:54:c4:d0:17:
                    cc:98:52:0c:2e:08:03:0f:6f:cc:fd:08:63:ab:ee:
                    1e:48:44:fe:c8:5e:73:ae:30:a4:84:cc:88:a6:b2:
                    3d:81:fc:4e:35:a1:b9:7a:31:bf:81:94:9a:4f:60:
                    8b:b3:e5:a6:37:53:4b:08:9e:ef:43:85:96:08:37:
                    c9:b2:58:c2:fa:0a:d8:df:4a:f4:c5:67:0e:c3:d2:
                    7b:98:de:53:c1:4a:2d:9d:d4:f0:50:dd:e3:a1:43:
                    f2:4b:fe:ff:ca:7b:64:b3:5d:78:de:e4:18:01:79:
                    0e:58:f9:20:1f:2e:34:2e:c7:fd:90:01:3a:86:95:
                    9a:9c:ef:b0:97:0b:65:8d:4e:d4:b6:47:31:66:68:
                    a3:0e:bb:53:c1:d4:80:ad:f7:a0:21:f6:dc:94:a3:
                    c4:f7:23:e3:3d:96:b7:6d:d7:6f:71:ab:a8:36:83:
                    36:ba:fa:e3:64:ec:06:32:77:7c:ff:ce:2b:cb:cd:
                    b0:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:E8:22:DD:CB:38:98:B7:13:0F:55:6D:BF:79:CF:CE:7C:3A:2B:A8
            X509v3 Authority Key Identifier:
                keyid:11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a3a2f33322d3332203d3e20323733333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c7c::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:b7:e3:3b:51:b8:b2:7f:3f:f5:c9:ad:33:03:eb:de:8f:b1:
         81:a5:39:1b:36:68:07:5a:ee:13:a6:d5:71:69:b8:5b:7c:5f:
         d8:d5:bc:5b:ea:1c:ab:a8:04:f0:35:f6:c3:0e:fa:3e:05:3f:
         f2:a6:56:9f:cd:92:44:9f:29:4e:f4:3b:0e:5c:3b:b7:30:41:
         ca:88:38:9f:52:3a:95:1b:79:fe:3c:1a:2f:ba:56:6b:38:4d:
         04:cb:20:66:b0:75:5f:59:29:1a:21:bf:4f:4e:6d:8c:81:fe:
         e8:ab:9f:98:cd:99:f4:99:d3:5d:28:23:73:ae:f7:47:44:9f:
         9b:26:fa:dd:b4:92:e7:c8:4a:3d:d9:1f:a7:68:85:50:87:9e:
         98:25:dc:4e:ab:7f:a0:de:09:2d:2a:7f:5d:cc:38:0e:12:15:
         e8:48:bb:fe:54:70:d5:6f:dc:61:b8:ac:53:80:63:e2:8c:66:
         d5:65:6e:be:9c:05:78:da:28:05:8d:25:25:6a:5e:f9:ec:ff:
         5f:c0:63:7c:97:ec:52:b1:62:78:fd:e0:e9:13:80:d4:26:9f:
         0f:9f:99:ae:18:d7:3e:e7:5d:b0:bd:5f:8b:90:ec:5e:fe:5e:
         16:6b:cc:5c:ef:8f:c9:1c:53:88:04:27:44:7b:ea:66:1a:b7:
         b6:00:49:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:26:16 2025 by rpki-client