Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a3a2f33342d3334203d3e20323734373236.roa
File:                     323830343a393261383a3a2f33342d3334203d3e20323734373236.roa (raw, json)
Hash identifier:          ZACpGCcuomKn5UGdY2lWGmFH32l7Wa30EGzYdqbNCm0=
Subject key identifier:   78:74:44:01:A6:E8:E1:58:3D:F9:D4:BC:B6:7B:0B:8C:01:19:AC:37
Certificate issuer:       /CN=E235D9D1060516D958BB28952BAAC2B76E4FFCB1
Certificate serial:       34492861C85E1DFD876368DD181D42B6E662BCCE
Authority key identifier: E2:35:D9:D1:06:05:16:D9:58:BB:28:95:2B:AA:C2:B7:6E:4F:FC:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E235D9D1060516D958BB28952BAAC2B76E4FFCB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a3a2f33342d3334203d3e20323734373236.roa
Signing time:             Fri 14 Mar 2025 17:24:22 +0000
ROA not before:           Fri 14 Mar 2025 17:19:22 +0000
ROA not after:            Fri 13 Mar 2026 17:24:22 +0000
asID:                     274726
IP address blocks:        2804:92a8::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:49:28:61:c8:5e:1d:fd:87:63:68:dd:18:1d:42:b6:e6:62:bc:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E235D9D1060516D958BB28952BAAC2B76E4FFCB1
        Validity
            Not Before: Mar 14 17:19:22 2025 GMT
            Not After : Mar 13 17:24:22 2026 GMT
        Subject: CN=78744401A6E8E1583DF9D4BCB67B0B8C0119AC37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e9:92:c1:85:9b:c4:38:fb:ac:5b:b4:13:e1:
                    ef:1e:0c:df:f1:8f:7e:a5:d1:63:63:6d:3e:03:c2:
                    ce:fa:c3:6b:b8:6b:b8:87:58:87:4a:29:e4:8d:eb:
                    99:13:a1:3f:84:0a:8e:3f:39:5a:f9:97:b5:60:fb:
                    86:8a:20:f5:3b:52:38:89:6f:21:b1:1f:01:2e:20:
                    d0:8d:c6:37:43:ad:64:5d:85:cb:67:04:39:38:9f:
                    49:f0:dd:05:a8:66:65:26:9e:e1:8e:20:41:08:1a:
                    d7:00:b3:ba:7d:e0:6f:bb:c9:c3:bb:47:b5:1a:c6:
                    ff:ff:0c:1f:b4:19:d1:96:c0:49:6a:15:e4:3a:e6:
                    d5:3d:52:d1:35:2c:4e:b1:2b:e8:11:b8:92:b8:a5:
                    bd:b8:e8:28:17:d6:50:48:72:ca:7c:6f:03:ca:ef:
                    c9:e4:69:9e:37:e5:88:7d:46:c6:24:25:4d:fc:fb:
                    b3:ef:91:dc:8a:24:76:5d:7f:66:83:1b:dd:ea:59:
                    44:9f:c6:62:49:17:f5:c3:22:b9:95:33:30:ce:f2:
                    50:4d:0e:29:26:f4:5a:b6:e5:50:26:c0:f7:25:40:
                    f4:ca:77:86:c7:ac:95:51:a8:35:39:d3:66:1a:b7:
                    da:c6:ab:ae:56:96:4a:4a:8a:fd:08:7d:16:24:83:
                    bc:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:74:44:01:A6:E8:E1:58:3D:F9:D4:BC:B6:7B:0B:8C:01:19:AC:37
            X509v3 Authority Key Identifier:
                keyid:E2:35:D9:D1:06:05:16:D9:58:BB:28:95:2B:AA:C2:B7:6E:4F:FC:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/E235D9D1060516D958BB28952BAAC2B76E4FFCB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E235D9D1060516D958BB28952BAAC2B76E4FFCB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a3a2f33342d3334203d3e20323734373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:92a8::/34

    Signature Algorithm: sha256WithRSAEncryption
         3e:da:d7:cf:04:e1:37:5f:45:d2:bf:75:aa:63:ea:1d:b4:b3:
         75:d2:27:58:29:2f:58:30:c1:42:92:55:59:36:0b:31:38:68:
         7a:ef:55:dd:82:e0:44:fb:6f:e5:4c:41:43:c4:3b:02:ce:d0:
         75:e5:c4:bb:56:a6:14:18:82:b6:cb:4a:5f:2e:0b:0c:93:e1:
         b8:8f:b6:90:28:a6:b6:49:69:59:f1:75:7c:b8:29:da:92:7d:
         86:55:73:0e:ff:1a:bc:d0:fc:b4:49:3b:d4:22:94:83:a2:b2:
         20:c8:f8:da:e8:f0:18:b7:14:57:2b:b1:74:74:63:98:33:02:
         68:77:52:0c:9f:06:9d:7d:a3:6c:2a:9c:5d:44:5d:52:43:fd:
         e5:65:a8:4b:ec:d9:4e:e5:b0:e9:e7:d9:ff:04:f4:a1:fb:7c:
         41:ee:d9:04:60:8f:ee:db:d6:13:bb:76:04:93:b4:df:a4:42:
         52:e9:2c:3e:b5:c0:96:f3:51:8e:88:68:47:7c:40:a3:71:5f:
         e7:8f:fd:8f:63:79:ea:b6:48:06:23:24:72:df:0b:8f:ad:01:
         bd:2c:7e:35:45:2d:3a:08:ee:a8:04:09:6a:01:e2:eb:2f:21:
         94:04:e1:80:d2:68:27:5e:a7:0a:c0:e7:30:a3:13:4b:cd:44:
         37:6f:e4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:28:57 2025 by rpki-client