Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a353030303a3a2f33362d3336203d3e20323734373236.roa
File:                     323830343a393261383a353030303a3a2f33362d3336203d3e20323734373236.roa (raw, json)
Hash identifier:          q4c8RCWDWkTHnBGZvHiusK8OKfNEUS9b0N8D35fMD8M=
Subject key identifier:   19:D6:CE:66:7E:16:CA:34:B7:39:97:A2:18:6B:19:58:69:F2:3E:59
Certificate issuer:       /CN=E235D9D1060516D958BB28952BAAC2B76E4FFCB1
Certificate serial:       0345FF3D27E7487037C6882FCFCD057F21962B90
Authority key identifier: E2:35:D9:D1:06:05:16:D9:58:BB:28:95:2B:AA:C2:B7:6E:4F:FC:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E235D9D1060516D958BB28952BAAC2B76E4FFCB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a353030303a3a2f33362d3336203d3e20323734373236.roa
Signing time:             Fri 14 Mar 2025 17:24:21 +0000
ROA not before:           Fri 14 Mar 2025 17:19:21 +0000
ROA not after:            Fri 13 Mar 2026 17:24:21 +0000
asID:                     274726
IP address blocks:        2804:92a8:5000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:45:ff:3d:27:e7:48:70:37:c6:88:2f:cf:cd:05:7f:21:96:2b:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E235D9D1060516D958BB28952BAAC2B76E4FFCB1
        Validity
            Not Before: Mar 14 17:19:21 2025 GMT
            Not After : Mar 13 17:24:21 2026 GMT
        Subject: CN=19D6CE667E16CA34B73997A2186B195869F23E59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:45:35:67:4a:5a:0a:0e:a6:cd:cf:11:4a:c2:
                    ca:b9:1c:34:2f:28:88:c2:56:82:7d:f5:4f:7b:af:
                    37:ed:a2:f5:c7:85:8b:2a:e1:75:87:cc:55:99:63:
                    3c:2d:92:ef:92:95:0f:1f:c8:d9:8f:37:b7:a9:a7:
                    79:e0:50:29:de:29:9a:99:2a:d2:5b:69:55:83:4a:
                    49:54:ef:ef:a8:fb:95:2d:88:0a:ef:c1:1e:6c:6c:
                    54:ca:4c:4b:81:e8:9f:da:a6:b5:92:e9:28:b6:13:
                    4b:c9:b5:5f:27:19:1c:0b:1d:5a:05:64:17:b7:e1:
                    fa:3b:72:c8:71:5d:23:50:04:c0:44:d9:26:fd:9a:
                    d6:bc:d7:e4:43:f3:44:57:2d:b8:0a:ee:85:14:6c:
                    08:65:1e:54:70:f3:79:65:66:4c:d2:05:de:fb:91:
                    70:51:e7:33:9f:ed:8c:cf:81:5f:3b:46:8c:75:3d:
                    e0:d3:e1:a8:24:3d:78:32:c6:e1:ed:71:04:91:c1:
                    81:9a:a5:6d:d4:ad:2a:95:e1:87:e2:29:0a:8b:00:
                    a6:15:ab:37:8c:59:b5:8c:4c:1c:72:5f:32:cb:9f:
                    63:c2:09:0b:18:c7:f3:42:fd:7c:1f:3e:5f:5c:fc:
                    e6:8c:98:59:2f:ea:f6:58:27:7d:4a:b5:fd:6e:f7:
                    bc:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:D6:CE:66:7E:16:CA:34:B7:39:97:A2:18:6B:19:58:69:F2:3E:59
            X509v3 Authority Key Identifier:
                keyid:E2:35:D9:D1:06:05:16:D9:58:BB:28:95:2B:AA:C2:B7:6E:4F:FC:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/E235D9D1060516D958BB28952BAAC2B76E4FFCB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E235D9D1060516D958BB28952BAAC2B76E4FFCB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a353030303a3a2f33362d3336203d3e20323734373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:92a8:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         76:d5:cb:b7:ab:1f:5a:19:9b:e3:e6:f5:88:a4:c9:1e:ba:e3:
         db:25:29:e5:cf:fd:91:c2:d5:24:69:ce:31:75:3e:51:c7:67:
         d8:c0:4d:c0:8e:65:75:ab:07:1f:d0:ce:63:e1:fb:f1:af:47:
         db:58:d3:11:f2:64:01:7c:81:45:b8:b6:49:f8:b7:98:c7:23:
         ec:5d:92:69:a2:f5:ab:a5:7c:61:fe:5f:d2:73:ef:5e:ca:c0:
         e8:b8:cc:59:c7:6a:50:6e:c5:55:b5:17:b8:20:7d:5c:d5:8e:
         19:3a:6d:ae:69:77:37:91:86:61:c7:67:70:ca:53:87:4e:8c:
         27:43:63:ea:d3:57:eb:97:a0:bb:af:51:26:0e:9e:44:bf:f8:
         2f:2e:ae:6c:21:f9:21:2c:9d:50:3f:13:51:ce:08:b2:84:01:
         d1:3a:c1:87:92:d8:e8:f9:68:5f:ef:68:8d:ea:4f:c9:c0:27:
         a8:aa:c9:27:bd:65:87:16:fa:67:d0:53:e9:48:dc:b5:14:63:
         75:25:39:f9:52:3a:87:4b:73:94:7d:43:a9:20:8f:82:23:04:
         68:a3:14:3e:b6:0c:96:17:91:ed:fc:d3:be:b4:ef:df:4e:13:
         a3:db:1c:fa:7d:f8:e2:87:d7:72:b8:06:8f:76:34:5d:ad:81:
         89:6d:e3:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:40:03 2025 by rpki-client