Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/323830343a376332343a643030303a3a2f33362d3336203d3e20323731343738.roa
File:                     323830343a376332343a643030303a3a2f33362d3336203d3e20323731343738.roa (raw, json)
Hash identifier:          TV/8J81ItO/6vRPeWlNxaQJ645VxejW7gbhlAWeM1Tc=
Subject key identifier:   01:B0:B5:E2:FF:DC:27:F7:E7:5C:7E:BD:C5:24:04:95:42:ED:4C:F9
Certificate issuer:       /CN=E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400
Certificate serial:       1AAEDFBE7D9B6467D05413C18BD717CC6A8C7426
Authority key identifier: E4:C2:C6:B3:DC:8A:DA:E1:96:FF:70:A0:C7:73:99:00:1F:5A:74:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/323830343a376332343a643030303a3a2f33362d3336203d3e20323731343738.roa
Signing time:             Fri 13 Dec 2024 15:44:32 +0000
ROA not before:           Fri 13 Dec 2024 15:39:32 +0000
ROA not after:            Fri 12 Dec 2025 15:44:32 +0000
asID:                     271478
IP address blocks:        2804:7c24:d000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:ae:df:be:7d:9b:64:67:d0:54:13:c1:8b:d7:17:cc:6a:8c:74:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400
        Validity
            Not Before: Dec 13 15:39:32 2024 GMT
            Not After : Dec 12 15:44:32 2025 GMT
        Subject: CN=01B0B5E2FFDC27F7E75C7EBDC524049542ED4CF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c7:69:cf:84:eb:35:4b:3a:f3:9a:96:cb:fb:
                    23:61:6c:67:9a:d5:af:bb:53:79:80:1f:1d:eb:2f:
                    07:a2:11:66:81:e0:b9:ce:9d:2f:c3:dd:e6:f9:89:
                    ef:2f:70:55:a0:7e:4e:2d:40:49:4f:5b:9b:2e:5d:
                    0e:81:ef:b0:7d:2e:2e:58:94:ac:5c:8a:e1:18:3e:
                    a2:04:03:a8:8f:2a:d0:f6:a0:e6:43:0f:35:ff:84:
                    51:7b:5a:69:b0:58:3a:20:64:a8:fa:87:8f:ab:b0:
                    3b:30:3d:d1:f5:ea:82:91:40:62:b0:49:a3:12:23:
                    30:8a:0a:20:da:f0:af:b4:a9:89:0f:65:30:e9:5e:
                    dc:b0:f4:bc:19:c7:1c:e7:fb:6d:f2:7a:f6:23:ff:
                    53:1e:c1:ef:28:53:52:5f:7a:d0:01:d9:00:b4:e6:
                    06:dc:93:08:be:6c:76:22:93:d7:21:a8:e0:40:8c:
                    07:52:20:cf:80:56:ae:7e:92:cc:50:13:73:e9:56:
                    aa:56:8f:91:3f:29:db:b5:ef:2f:1e:ec:71:de:66:
                    2b:24:a2:1f:b1:85:64:8d:00:69:19:c8:c5:44:cb:
                    15:2c:07:e4:34:50:51:5e:1c:8b:10:68:6c:08:92:
                    9a:b4:1d:cf:13:e6:5e:33:81:1f:f2:9b:6c:ea:7a:
                    ae:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B0:B5:E2:FF:DC:27:F7:E7:5C:7E:BD:C5:24:04:95:42:ED:4C:F9
            X509v3 Authority Key Identifier:
                keyid:E4:C2:C6:B3:DC:8A:DA:E1:96:FF:70:A0:C7:73:99:00:1F:5A:74:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/323830343a376332343a643030303a3a2f33362d3336203d3e20323731343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c24:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         84:e9:58:1d:1e:14:cf:96:76:39:19:c2:5d:ba:aa:91:65:9d:
         f2:80:4e:a6:a3:e1:ca:18:17:db:cb:e6:8a:10:fb:96:c2:8c:
         bc:64:cb:ec:dd:ba:57:be:a5:22:d6:1d:d1:57:44:c9:f4:e3:
         5e:6f:8d:97:38:c0:ee:47:71:1d:ba:6b:50:c1:4f:d1:3e:25:
         42:50:40:74:28:09:b9:4c:8b:05:35:35:59:38:c5:e3:57:4f:
         c2:97:10:53:e4:64:bd:36:91:ad:24:c8:40:d6:b2:18:dc:fc:
         4a:9d:43:52:ff:86:19:4c:ee:f2:45:5e:97:10:1d:1c:b8:2b:
         b8:ec:54:78:8a:54:2b:75:2d:65:7c:9c:e2:27:a8:36:9b:79:
         42:0e:e8:32:67:04:45:e7:a1:6d:f9:d7:30:f7:b2:16:a0:11:
         5a:0b:69:16:d6:c9:9e:47:43:e9:56:5f:34:3f:28:9a:9e:84:
         a1:79:99:1f:2f:2b:c0:6e:57:67:e5:b5:cc:a2:1a:7a:3c:20:
         9c:da:6c:df:e4:ec:59:b9:0b:76:af:93:eb:96:20:b1:78:d3:
         b6:e7:a3:4f:15:ad:7d:59:d7:19:e0:d1:6b:10:2c:33:74:9d:
         98:a9:3c:d4:5b:98:4e:63:aa:43:1d:ed:ab:8e:e0:c7:da:0c:
         d1:58:c0:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:01:11 2025 by rpki-client