Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/323830343a373466343a3a2f34382d3438203d3e20323731303134.roa
File:                     323830343a373466343a3a2f34382d3438203d3e20323731303134.roa (raw, json)
Hash identifier:          R/tGqwMBVcAtwxg44HgBytZkhR/sv+K4oUOAU39WibU=
Subject key identifier:   81:FA:34:00:C6:05:20:73:2C:F6:B5:77:F9:1A:A6:17:97:B3:32:57
Certificate issuer:       /CN=24CAF4C14D797EE171E6A6C5C11988AEA84BC352
Certificate serial:       6DB829DBA94CD1343B35B3DF8DB3A1A4AEE35707
Authority key identifier: 24:CA:F4:C1:4D:79:7E:E1:71:E6:A6:C5:C1:19:88:AE:A8:4B:C3:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/323830343a373466343a3a2f34382d3438203d3e20323731303134.roa
Signing time:             Thu 08 Feb 2024 14:05:57 +0000
ROA not before:           Thu 08 Feb 2024 14:00:57 +0000
ROA not after:            Thu 06 Feb 2025 14:05:57 +0000
asID:                     271014
IP address blocks:        2804:74f4::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:b8:29:db:a9:4c:d1:34:3b:35:b3:df:8d:b3:a1:a4:ae:e3:57:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24CAF4C14D797EE171E6A6C5C11988AEA84BC352
        Validity
            Not Before: Feb  8 14:00:57 2024 GMT
            Not After : Feb  6 14:05:57 2025 GMT
        Subject: CN=81FA3400C60520732CF6B577F91AA61797B33257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:39:c2:1f:be:6b:55:04:a2:57:1d:e2:95:7b:
                    b6:42:1f:cb:93:28:8c:f4:6a:5d:bc:39:64:2f:d8:
                    83:24:8f:9d:2f:c0:13:a5:01:c2:4f:e8:39:f0:70:
                    b4:9c:e1:9d:c7:0f:53:40:47:2d:de:5a:b4:a0:68:
                    72:fe:dd:64:2d:07:31:9b:41:42:e1:b8:36:66:f6:
                    e6:d3:0e:ec:7b:88:11:71:13:94:8c:20:8e:a8:fb:
                    c8:c0:b1:26:0c:e6:27:74:f1:0f:9e:b2:8d:e3:b3:
                    a7:f1:cf:1b:70:b7:76:d6:7b:c8:2d:17:ea:c1:91:
                    a1:8d:0f:80:2d:b5:f6:6a:d3:90:dc:fa:35:38:e9:
                    8b:e4:93:a3:db:ae:3b:27:bd:33:b9:0a:36:f1:e8:
                    78:b6:b4:c0:53:f5:fd:b6:51:6b:bc:fd:01:51:55:
                    e7:da:50:e2:d2:14:aa:9c:9f:4e:89:06:e3:37:f5:
                    c0:e1:f8:4a:dc:41:33:3d:d6:d3:48:57:57:bb:6d:
                    53:23:ae:5e:d2:69:ac:30:64:54:a7:8a:81:b8:68:
                    c6:d7:2a:2e:85:c2:41:46:1e:fb:cb:af:c7:cd:ce:
                    7b:45:be:0a:7c:ab:b1:e8:8f:b1:fb:fb:7d:5e:aa:
                    10:6b:41:b5:3b:fd:15:3d:0e:74:32:52:53:3c:02:
                    a9:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:FA:34:00:C6:05:20:73:2C:F6:B5:77:F9:1A:A6:17:97:B3:32:57
            X509v3 Authority Key Identifier:
                keyid:24:CA:F4:C1:4D:79:7E:E1:71:E6:A6:C5:C1:19:88:AE:A8:4B:C3:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/323830343a373466343a3a2f34382d3438203d3e20323731303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74f4::/48

    Signature Algorithm: sha256WithRSAEncryption
         9e:19:91:ae:aa:4b:bf:6a:d2:4c:d7:d0:d9:d3:c6:0f:58:36:
         33:61:8d:fd:bf:ba:6c:7f:f8:08:c9:3e:17:1a:2e:73:e4:80:
         6b:81:42:20:97:6c:e3:9d:dc:57:5f:47:5c:b5:c0:f4:9c:79:
         d7:55:97:ac:bd:e5:50:36:81:e9:15:11:f4:95:34:49:0c:0b:
         ac:86:a6:ed:2e:9c:e9:76:3f:c3:de:25:dc:1b:9c:5e:bd:44:
         cb:e8:f9:47:f1:f8:6a:fe:2a:8b:37:05:aa:db:3f:20:78:85:
         2e:e7:36:71:7e:1c:c4:78:50:9f:fe:bd:c6:6d:c5:8f:b4:5a:
         65:17:c0:fb:c1:d7:26:f3:66:b1:54:a2:51:9d:e7:10:eb:9d:
         40:3d:34:17:2e:0e:32:8c:8d:ee:30:0c:12:04:7e:cb:56:0c:
         8d:02:c9:ba:7f:03:c5:e9:eb:71:26:c9:70:9a:8b:11:69:0e:
         19:ad:fe:2e:51:42:d6:f1:1f:38:59:d8:6e:2e:37:e5:af:8d:
         c8:17:5e:9a:1a:75:52:bb:f3:ba:ac:a1:f4:f4:dd:6c:45:c9:
         7b:d2:47:b2:0f:33:1f:c5:2b:c2:14:e7:ea:65:08:f1:4f:e9:
         2c:01:89:62:2a:f3:d5:15:2f:02:90:ce:1f:50:92:90:2e:38:
         82:4e:6c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:46:12 2025 by rpki-client