Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/323830343a373466343a373030303a3a2f34382d3438203d3e20323731303134.roa
File:                     323830343a373466343a373030303a3a2f34382d3438203d3e20323731303134.roa (raw, json)
Hash identifier:          buS7so9N5mkX9Jeg1F/8cObeb/XrJMRqR4mYQWr1n2E=
Subject key identifier:   AA:0A:12:10:DF:2B:25:22:83:35:F0:DC:4A:26:E1:17:1B:93:7B:C0
Certificate issuer:       /CN=24CAF4C14D797EE171E6A6C5C11988AEA84BC352
Certificate serial:       255EAE1D3BB43E7134C204692962E61654A3D345
Authority key identifier: 24:CA:F4:C1:4D:79:7E:E1:71:E6:A6:C5:C1:19:88:AE:A8:4B:C3:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/323830343a373466343a373030303a3a2f34382d3438203d3e20323731303134.roa
Signing time:             Thu 08 Feb 2024 14:05:55 +0000
ROA not before:           Thu 08 Feb 2024 14:00:55 +0000
ROA not after:            Thu 06 Feb 2025 14:05:55 +0000
asID:                     271014
IP address blocks:        2804:74f4:7000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:5e:ae:1d:3b:b4:3e:71:34:c2:04:69:29:62:e6:16:54:a3:d3:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24CAF4C14D797EE171E6A6C5C11988AEA84BC352
        Validity
            Not Before: Feb  8 14:00:55 2024 GMT
            Not After : Feb  6 14:05:55 2025 GMT
        Subject: CN=AA0A1210DF2B25228335F0DC4A26E1171B937BC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e9:12:8e:d1:3d:e1:f4:a6:31:05:17:d9:8d:
                    3f:be:25:fc:70:0c:b2:21:34:e7:5d:9c:ca:42:b0:
                    89:a4:53:8f:bf:af:7e:57:e2:45:3c:d3:fb:32:bc:
                    7c:77:a5:ae:06:a8:2b:cf:87:56:9e:13:9d:8a:3c:
                    ca:65:03:68:ca:1b:97:80:dd:80:c9:3d:b5:f2:f6:
                    df:24:83:32:d4:29:c1:2c:25:9b:d0:c7:0b:5e:61:
                    9a:4c:11:8c:aa:69:9b:ba:b8:89:ae:de:8d:68:90:
                    8d:5a:32:fd:40:f7:29:8b:70:da:2b:21:77:85:1a:
                    d1:5a:c7:48:36:54:7d:12:66:74:0b:1f:2c:b0:18:
                    ff:f5:96:fe:f8:c4:ec:82:66:5d:bd:73:1d:b6:13:
                    c9:2c:91:86:09:c8:ae:02:3c:f4:e2:ca:ea:4b:aa:
                    25:80:35:77:07:fe:a1:30:3e:11:db:fc:83:de:12:
                    08:0b:98:c1:60:09:5e:c2:fe:e8:25:2c:d1:ff:d1:
                    91:61:d3:e2:3a:c2:8b:c5:8f:f4:e3:ac:8f:da:7b:
                    e6:97:7e:af:a4:08:d7:b5:77:61:8a:de:70:02:f5:
                    c5:71:4a:a8:f6:c9:6b:6a:ac:61:34:f9:f8:2b:2e:
                    fb:26:8f:31:83:4a:d0:d8:c8:83:28:dd:19:2c:95:
                    36:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:0A:12:10:DF:2B:25:22:83:35:F0:DC:4A:26:E1:17:1B:93:7B:C0
            X509v3 Authority Key Identifier:
                keyid:24:CA:F4:C1:4D:79:7E:E1:71:E6:A6:C5:C1:19:88:AE:A8:4B:C3:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/323830343a373466343a373030303a3a2f34382d3438203d3e20323731303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74f4:7000::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:9f:6e:2f:46:f7:4a:ab:6e:e6:68:f9:9b:9b:fc:ca:68:0a:
         57:44:ef:b0:0e:7e:4f:36:02:07:2f:be:5e:04:b0:7b:b9:c3:
         3b:8f:7f:79:09:86:3f:04:7d:f6:f9:b9:de:87:c8:50:db:5b:
         d2:ec:77:85:f0:69:0a:c5:e3:e7:17:2a:ef:e7:c8:be:e1:80:
         4a:81:cf:d6:87:c6:5e:35:6f:34:e7:83:07:24:d6:a4:f0:64:
         6f:5a:22:f9:0b:7a:66:43:35:13:04:00:e4:f0:57:ae:d3:1a:
         0f:41:75:ee:d1:32:9d:59:21:c2:2f:0a:87:87:d8:e6:07:dc:
         dd:3d:40:77:a2:31:55:b8:d2:68:1a:3c:48:bc:a6:ba:63:08:
         56:37:42:f5:bf:01:60:d0:b9:a3:4d:8b:32:74:75:50:b1:34:
         9f:bf:d7:17:26:26:9e:ee:2f:c2:f1:65:74:15:dc:0d:78:5e:
         9d:b1:7a:ee:1e:79:f7:fb:e7:8f:c8:e0:16:68:4c:ce:be:9c:
         a6:d0:62:b6:1b:22:18:62:bf:ac:3b:4a:3f:69:98:c3:07:2b:
         17:5a:51:5f:61:8c:22:92:0d:9d:d7:cb:cd:1f:ee:a3:e1:e0:
         82:9d:83:87:16:62:6f:ab:99:1c:14:f1:ca:b4:8b:48:ed:af:
         fc:f3:8a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 06:01:31 2025 by rpki-client