Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/323830343a373466343a383030303a3a2f34362d3436203d3e20323731303134.roa
File:                     323830343a373466343a383030303a3a2f34362d3436203d3e20323731303134.roa (raw, json)
Hash identifier:          9+UO7btn16VKae9vZ2ysCbjWmy9Xbxk/2qYsxFDU8xo=
Subject key identifier:   AA:3B:C3:D7:45:D6:93:8A:44:F2:92:08:EC:FC:92:24:18:9E:28:4B
Certificate issuer:       /CN=24CAF4C14D797EE171E6A6C5C11988AEA84BC352
Certificate serial:       196DE78C920DE17AAEF6A88961F3673EA9364607
Authority key identifier: 24:CA:F4:C1:4D:79:7E:E1:71:E6:A6:C5:C1:19:88:AE:A8:4B:C3:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/323830343a373466343a383030303a3a2f34362d3436203d3e20323731303134.roa
Signing time:             Thu 08 Feb 2024 14:05:56 +0000
ROA not before:           Thu 08 Feb 2024 14:00:56 +0000
ROA not after:            Thu 06 Feb 2025 14:05:56 +0000
asID:                     271014
IP address blocks:        2804:74f4:8000::/46 maxlen: 46
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:6d:e7:8c:92:0d:e1:7a:ae:f6:a8:89:61:f3:67:3e:a9:36:46:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24CAF4C14D797EE171E6A6C5C11988AEA84BC352
        Validity
            Not Before: Feb  8 14:00:56 2024 GMT
            Not After : Feb  6 14:05:56 2025 GMT
        Subject: CN=AA3BC3D745D6938A44F29208ECFC9224189E284B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:33:71:c2:0d:db:7a:dc:46:63:58:cc:27:68:
                    95:1b:e6:25:4c:3a:fb:20:67:3c:fe:37:dd:c1:cd:
                    67:62:fe:01:f4:14:39:1e:d5:d3:bb:43:49:7b:f6:
                    3d:6e:2a:a9:d0:ec:e7:7d:e8:4c:13:a5:ed:63:ee:
                    1c:83:54:27:b3:75:aa:e4:27:2e:be:48:05:d6:22:
                    b5:21:fb:fb:75:07:7f:1f:56:71:f3:ec:77:9c:94:
                    3f:1d:fb:2d:9d:f7:06:2f:bd:ca:9b:6f:3a:f5:6d:
                    bf:ac:b1:cd:ae:e7:d0:b8:31:44:b6:c5:f3:8c:e9:
                    2c:ce:9b:48:6e:d6:ea:e1:53:ca:76:aa:b0:9f:19:
                    7d:d7:e9:64:d5:7a:9b:c6:82:cb:15:33:7f:6e:98:
                    52:3e:06:e1:55:76:6e:86:01:e3:07:7c:36:e6:ec:
                    50:ab:04:88:f2:15:01:97:90:97:64:dd:dd:10:f9:
                    eb:85:99:3b:8c:e9:d9:87:81:6c:5e:a5:94:5d:53:
                    d8:88:ce:e8:92:fe:dd:c2:5b:b8:44:08:dc:e1:7a:
                    fa:24:a4:34:ab:7f:9a:68:56:38:c3:a0:37:55:8c:
                    ed:81:53:23:9d:2a:56:ac:01:1c:1e:d5:e4:e8:fd:
                    5d:a1:22:01:dd:08:82:0b:0c:22:84:36:0a:e3:12:
                    63:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:3B:C3:D7:45:D6:93:8A:44:F2:92:08:EC:FC:92:24:18:9E:28:4B
            X509v3 Authority Key Identifier:
                keyid:24:CA:F4:C1:4D:79:7E:E1:71:E6:A6:C5:C1:19:88:AE:A8:4B:C3:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/323830343a373466343a383030303a3a2f34362d3436203d3e20323731303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74f4:8000::/46

    Signature Algorithm: sha256WithRSAEncryption
         93:59:a4:6d:1d:30:77:c9:dc:72:c5:bb:3a:37:7b:18:e0:29:
         e6:e4:af:f9:d1:ed:d1:2e:27:b6:81:c1:6d:15:11:99:90:c4:
         89:05:93:f9:50:a5:2a:d8:2e:ee:ff:15:74:f5:a9:89:e0:4c:
         0e:c3:1f:67:5d:bc:3e:83:e9:a2:c1:34:7a:31:5e:73:da:be:
         6e:53:87:95:76:a1:8d:bf:ae:43:0b:cd:ba:6b:d4:25:47:55:
         a9:e9:10:29:52:49:47:f9:a7:23:85:22:30:3a:48:3a:5c:0b:
         74:13:4e:ae:21:9f:2c:c6:43:10:c5:8b:9a:23:67:f9:70:ec:
         5c:15:89:f6:44:68:b4:b5:cd:74:11:fa:65:00:44:b3:83:d9:
         e3:82:6b:59:36:96:d7:a4:7d:51:2a:a9:71:1a:24:ea:ff:bc:
         6e:95:98:d6:fa:02:2e:e1:96:f9:53:05:eb:cb:66:4c:2c:c3:
         38:85:ba:e5:bf:56:86:08:d3:6d:a3:f4:84:ac:05:98:86:67:
         49:5d:29:42:f5:0b:33:f6:75:1e:84:4a:25:c9:b4:b8:e5:b6:
         61:84:14:10:e2:ee:02:28:9a:7f:7c:02:f3:0c:48:55:1d:98:
         37:72:32:9d:20:ed:6d:3e:47:0f:6d:1f:72:50:5b:83:5c:7f:
         3d:a3:37:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:15:19 2025 by rpki-client