Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a343030303a3a2f33342d3334203d3e20323734373236.roa
File:                     323830343a393261383a343030303a3a2f33342d3334203d3e20323734373236.roa (raw, json)
Hash identifier:          2rYBtkoVuHHPbit4D35j3WRjpK35VVt9WGELtoqywo4=
Subject key identifier:   04:76:D4:DD:DC:5D:60:97:78:D5:1C:09:43:41:1F:77:B5:A5:AC:53
Certificate issuer:       /CN=E235D9D1060516D958BB28952BAAC2B76E4FFCB1
Certificate serial:       4E5C603742345D945BB7D5B6EB57A974494FA7E9
Authority key identifier: E2:35:D9:D1:06:05:16:D9:58:BB:28:95:2B:AA:C2:B7:6E:4F:FC:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E235D9D1060516D958BB28952BAAC2B76E4FFCB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a343030303a3a2f33342d3334203d3e20323734373236.roa
Signing time:             Fri 14 Mar 2025 17:24:19 +0000
ROA not before:           Fri 14 Mar 2025 17:19:19 +0000
ROA not after:            Fri 13 Mar 2026 17:24:19 +0000
asID:                     274726
IP address blocks:        2804:92a8:4000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:5c:60:37:42:34:5d:94:5b:b7:d5:b6:eb:57:a9:74:49:4f:a7:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E235D9D1060516D958BB28952BAAC2B76E4FFCB1
        Validity
            Not Before: Mar 14 17:19:19 2025 GMT
            Not After : Mar 13 17:24:19 2026 GMT
        Subject: CN=0476D4DDDC5D609778D51C0943411F77B5A5AC53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:79:a5:76:98:ba:b3:b2:d0:55:09:42:ce:30:
                    d4:43:f5:a6:f4:04:5b:9a:48:ef:75:9c:b6:05:0a:
                    c3:73:f2:32:cd:31:df:23:85:e4:a1:04:06:5e:bf:
                    a0:7d:01:30:79:0a:54:38:57:32:82:c4:24:bf:7c:
                    8b:ad:68:ba:7d:83:a7:9f:9e:17:bd:6b:57:51:91:
                    89:2f:50:36:76:e4:ac:de:42:cd:74:7b:a4:9a:d9:
                    dd:f8:a8:1b:a8:f1:8f:e6:48:ca:71:1a:dd:ad:a4:
                    31:45:98:83:b9:2c:f5:3e:27:51:5f:41:eb:3b:06:
                    7c:36:40:17:70:ff:06:f8:94:b7:16:de:1a:5a:e9:
                    fc:76:2a:e7:89:1e:69:20:9d:c9:ad:be:3a:67:de:
                    90:96:b5:16:b1:08:e4:69:d6:07:e7:ec:e2:1b:8e:
                    a5:d8:b5:67:22:5b:d4:10:32:37:4e:8f:d3:67:a9:
                    16:f0:fe:04:45:33:84:9b:88:3b:f4:f4:2e:95:03:
                    cd:c1:7a:22:f1:c1:6b:0b:54:7e:46:2f:7b:19:35:
                    4d:32:d1:63:cb:a4:07:f1:d9:69:0f:29:02:81:c1:
                    be:28:38:94:3b:4c:94:14:2c:aa:79:df:f2:e5:70:
                    54:25:29:35:80:37:13:45:aa:8c:ca:ca:eb:1b:40:
                    21:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:76:D4:DD:DC:5D:60:97:78:D5:1C:09:43:41:1F:77:B5:A5:AC:53
            X509v3 Authority Key Identifier:
                keyid:E2:35:D9:D1:06:05:16:D9:58:BB:28:95:2B:AA:C2:B7:6E:4F:FC:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/E235D9D1060516D958BB28952BAAC2B76E4FFCB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E235D9D1060516D958BB28952BAAC2B76E4FFCB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a343030303a3a2f33342d3334203d3e20323734373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:92a8:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         26:90:24:f4:e4:f5:4d:84:61:6f:67:7a:fb:dc:29:f6:ce:44:
         e0:8d:a4:51:63:51:c1:65:c6:09:96:d2:1e:1e:b8:af:9e:b1:
         2d:c9:6f:08:b4:e0:33:08:dc:45:e0:09:ec:28:09:89:cf:ea:
         6f:b8:48:52:b6:5c:b9:38:e4:6e:e2:55:f3:67:89:0c:23:9a:
         63:8b:0f:66:71:12:e9:37:86:54:e7:06:62:9d:6b:0e:40:e6:
         68:f7:64:aa:08:06:6a:97:c6:c7:3c:5c:ae:e7:62:c2:69:33:
         06:a8:64:83:30:d3:97:ae:dd:0b:5d:e4:e5:5f:5c:db:7d:a3:
         76:c3:e7:70:af:7b:3c:a8:98:40:67:16:2f:aa:1d:3a:6f:21:
         32:29:e5:11:af:5b:b0:c5:ea:5b:0c:bd:27:07:e0:84:7b:a5:
         28:57:ac:74:8b:1f:90:1b:ba:da:eb:56:f0:fd:77:99:27:d6:
         52:77:98:fb:ed:5a:58:4a:3f:9c:db:60:8f:b2:3e:0d:80:a9:
         53:b5:b3:f5:e4:a5:7c:e3:f4:94:e8:0e:a0:c8:e2:d2:de:37:
         f5:9d:ed:0b:33:14:11:e2:53:be:b5:48:d9:7e:68:be:7c:09:
         48:51:27:6e:62:eb:75:ae:79:75:25:21:a9:22:89:76:c0:83:
         b3:5a:91:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:39:09 2025 by rpki-client