Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/323830343a373466343a313030303a3a2f33362d3336203d3e20323731303134.roa
File:                     323830343a373466343a313030303a3a2f33362d3336203d3e20323731303134.roa (raw, json)
Hash identifier:          pweir8SS6HeiwDPTpR/YlrneFYm2MHDVuVDePADZYxU=
Subject key identifier:   33:10:F4:AE:FB:66:70:FF:C0:E1:85:94:48:24:8D:77:EE:1C:29:3E
Certificate issuer:       /CN=24CAF4C14D797EE171E6A6C5C11988AEA84BC352
Certificate serial:       3340257B3BBB63FB7B9CD5AA422071014D603BB2
Authority key identifier: 24:CA:F4:C1:4D:79:7E:E1:71:E6:A6:C5:C1:19:88:AE:A8:4B:C3:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/323830343a373466343a313030303a3a2f33362d3336203d3e20323731303134.roa
Signing time:             Thu 08 Feb 2024 14:06:00 +0000
ROA not before:           Thu 08 Feb 2024 14:01:00 +0000
ROA not after:            Thu 06 Feb 2025 14:06:00 +0000
asID:                     271014
IP address blocks:        2804:74f4:1000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:40:25:7b:3b:bb:63:fb:7b:9c:d5:aa:42:20:71:01:4d:60:3b:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24CAF4C14D797EE171E6A6C5C11988AEA84BC352
        Validity
            Not Before: Feb  8 14:01:00 2024 GMT
            Not After : Feb  6 14:06:00 2025 GMT
        Subject: CN=3310F4AEFB6670FFC0E1859448248D77EE1C293E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b7:fb:e8:fe:94:35:94:a9:25:b0:b4:b3:19:
                    e8:a0:2d:bc:ee:0d:23:15:d0:14:3b:10:20:ed:65:
                    9d:1a:35:cb:59:c0:0e:40:3d:db:df:d3:b1:63:d8:
                    cc:66:10:0c:05:67:9c:d3:1a:30:5f:6d:81:ea:8d:
                    ee:e1:02:37:4e:50:2b:34:05:18:49:7c:44:15:65:
                    fb:b7:49:30:ba:71:53:4f:9b:43:c7:96:d1:e0:20:
                    0e:65:90:65:18:bc:c5:09:5d:8d:c7:43:af:39:be:
                    6b:72:d1:91:07:1a:26:38:0f:fe:8e:d5:9c:da:48:
                    ef:62:db:dd:72:cb:3a:cb:95:92:26:1e:0e:e5:b6:
                    5f:f7:95:22:2f:a2:7f:4b:7c:ab:8b:fb:c1:75:a6:
                    f8:7b:66:7b:2a:d0:51:3a:8c:e8:00:f4:44:61:2f:
                    4d:7e:eb:5c:0d:c5:f4:f7:83:ad:2f:49:d3:ca:24:
                    3a:9a:30:a0:43:03:be:fc:85:ba:aa:ec:59:12:1d:
                    26:51:c4:92:dd:0a:25:ee:43:50:a7:2b:75:2a:dd:
                    11:47:15:70:3d:22:02:00:72:cb:ce:e7:8e:4d:77:
                    a5:f2:71:a7:8d:6a:f3:ea:9d:a5:af:7f:8f:53:c1:
                    7e:89:42:23:a6:91:1e:3f:66:54:bf:1f:5f:5d:94:
                    2c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:10:F4:AE:FB:66:70:FF:C0:E1:85:94:48:24:8D:77:EE:1C:29:3E
            X509v3 Authority Key Identifier:
                keyid:24:CA:F4:C1:4D:79:7E:E1:71:E6:A6:C5:C1:19:88:AE:A8:4B:C3:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/323830343a373466343a313030303a3a2f33362d3336203d3e20323731303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74f4:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         73:cf:45:37:7b:3f:59:bc:87:88:f3:1c:3f:41:6a:22:c6:49:
         4a:db:bf:00:15:cf:7f:ad:dc:89:29:f9:4e:c0:f1:58:dc:63:
         a5:b0:25:0d:e8:86:ed:32:8a:a9:95:89:53:00:0e:b4:9c:1e:
         05:9b:ab:2e:b8:01:ba:68:dc:61:f9:2e:8a:0b:b1:0c:9e:5a:
         d2:0a:dd:9e:be:55:64:26:bb:b0:cd:96:05:be:b5:6b:05:82:
         df:6f:7a:46:f3:20:7a:44:95:59:64:7a:34:4d:8b:e9:7f:d5:
         90:ba:16:20:ee:ff:e3:48:9f:7c:07:21:82:75:08:85:22:20:
         ff:4e:85:a0:e8:ee:68:25:6b:e4:10:08:9b:79:53:2b:dc:58:
         e9:74:60:0c:94:5e:88:1b:94:8f:e9:67:b6:69:bc:23:00:97:
         7c:06:c6:2b:0c:45:e9:67:9e:08:93:fe:9f:da:88:cb:1d:91:
         32:33:d1:68:66:67:74:58:cc:87:53:d2:21:be:f6:e5:cc:2c:
         a5:7f:b2:22:30:cd:15:3d:ff:18:c1:a9:cf:d6:bb:c7:df:8c:
         9a:97:c6:5d:52:2c:3d:4c:0d:a9:bb:a1:67:d3:62:e4:b9:99:
         67:ee:85:d7:f1:d9:2d:1a:9f:09:01:e2:79:6c:36:a9:72:6b:
         9c:57:a5:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 04:04:09 2025 by rpki-client