Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a653030303a3a2f33362d3336203d3e20323734373236.roa
File:                     323830343a393261383a653030303a3a2f33362d3336203d3e20323734373236.roa (raw, json)
Hash identifier:          aLS9TCYMgWH3JP1UxPsjuUJyEPWw+hsyGBFaKg/9gQw=
Subject key identifier:   71:AB:11:91:51:33:93:EF:49:F4:04:E5:B9:8D:01:1E:B0:4D:82:57
Certificate issuer:       /CN=E235D9D1060516D958BB28952BAAC2B76E4FFCB1
Certificate serial:       7B82A6D8C27FCA823E45EF737936666A92204239
Authority key identifier: E2:35:D9:D1:06:05:16:D9:58:BB:28:95:2B:AA:C2:B7:6E:4F:FC:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E235D9D1060516D958BB28952BAAC2B76E4FFCB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a653030303a3a2f33362d3336203d3e20323734373236.roa
Signing time:             Fri 14 Mar 2025 17:24:22 +0000
ROA not before:           Fri 14 Mar 2025 17:19:22 +0000
ROA not after:            Fri 13 Mar 2026 17:24:22 +0000
asID:                     274726
IP address blocks:        2804:92a8:e000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:82:a6:d8:c2:7f:ca:82:3e:45:ef:73:79:36:66:6a:92:20:42:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E235D9D1060516D958BB28952BAAC2B76E4FFCB1
        Validity
            Not Before: Mar 14 17:19:22 2025 GMT
            Not After : Mar 13 17:24:22 2026 GMT
        Subject: CN=71AB1191513393EF49F404E5B98D011EB04D8257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:62:a7:17:25:06:22:30:cb:2e:b8:f9:b1:89:
                    dc:96:fb:6a:11:d0:ee:42:c9:70:c2:f7:c6:2e:5e:
                    0c:93:41:0d:83:3b:31:1b:25:2c:0e:04:26:4f:36:
                    25:d1:79:0b:dc:cc:9b:7e:bd:43:21:42:cb:fe:d2:
                    3e:8e:cc:49:2b:4c:4b:01:a4:65:d0:4e:54:ec:ed:
                    30:08:cb:65:05:bb:8a:f9:24:68:6f:76:55:87:ba:
                    32:36:3d:71:07:9d:db:4d:5e:c2:9a:50:27:18:fb:
                    9f:85:5a:dd:b9:3d:f2:10:0e:8f:30:2e:16:f0:6f:
                    16:e1:84:97:6f:9a:fb:9c:ee:91:9e:bd:df:68:49:
                    ae:99:ab:0a:ec:db:a0:db:60:df:5a:13:09:5a:f1:
                    d1:b5:d6:91:75:d8:3d:14:b6:c4:36:57:e5:4d:28:
                    11:f9:9f:7c:ec:4e:0f:d0:45:13:95:de:5b:e3:79:
                    c9:29:36:e7:f0:1a:25:e7:01:23:a1:9e:a1:7b:e3:
                    53:61:20:a3:fd:53:12:4b:e1:17:18:18:51:88:da:
                    e6:b5:55:6c:0e:9c:f2:c4:eb:b0:c6:cc:15:f7:bf:
                    6d:c6:2a:25:cf:31:06:c0:83:90:1a:4e:78:c8:f6:
                    92:f1:d5:d6:af:02:f3:0c:d4:d1:bc:36:38:c1:19:
                    1c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:AB:11:91:51:33:93:EF:49:F4:04:E5:B9:8D:01:1E:B0:4D:82:57
            X509v3 Authority Key Identifier:
                keyid:E2:35:D9:D1:06:05:16:D9:58:BB:28:95:2B:AA:C2:B7:6E:4F:FC:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/E235D9D1060516D958BB28952BAAC2B76E4FFCB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E235D9D1060516D958BB28952BAAC2B76E4FFCB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a653030303a3a2f33362d3336203d3e20323734373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:92a8:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         b4:6e:bd:b0:41:97:f4:91:1c:e6:8f:fe:14:4f:5d:7e:bc:b8:
         3d:ef:68:49:b8:29:da:4e:1e:1b:9f:6f:2e:28:92:48:53:d8:
         00:9d:13:c1:e1:e8:7d:2b:34:27:59:67:74:00:b2:a9:18:ed:
         34:ef:3d:0f:e6:8c:d3:46:1c:8d:e9:d3:8a:ec:37:a0:a0:49:
         5b:ab:90:65:7f:1c:84:2b:df:c7:41:6c:37:19:99:a3:89:ba:
         15:99:ca:0b:fc:e5:1c:cd:2f:0e:a9:a6:f2:eb:74:db:22:0b:
         a4:6e:78:ce:33:75:20:a3:09:e2:e2:a1:09:f8:07:9d:a1:a2:
         6d:1b:fc:e0:83:d1:8b:af:b3:88:a1:a9:f7:48:c3:31:78:03:
         1c:26:b6:5a:83:dc:27:c3:4d:81:a1:b7:3c:30:bc:18:7f:5c:
         06:7b:07:b4:78:7d:be:4a:b6:ad:b7:af:7c:01:9a:f3:27:39:
         11:ac:cf:a2:42:db:c0:23:d0:dc:27:96:98:ce:48:fa:e2:7c:
         3f:e1:b3:ae:5a:b8:dc:cc:22:b2:b9:21:96:11:21:f1:6e:e4:
         23:9f:c3:75:7a:0f:d2:21:4c:dd:57:50:5e:d3:01:c0:96:43:
         33:d9:6a:00:d3:65:11:c9:ba:a1:3b:56:f8:ed:27:02:b7:97:
         31:ad:13:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:43:42 2025 by rpki-client