Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/323830343a373466343a643030303a3a2f33362d3336203d3e20323731303134.roa
File:                     323830343a373466343a643030303a3a2f33362d3336203d3e20323731303134.roa (raw, json)
Hash identifier:          rjAV0lmGXVZwZI+Oxd6EVrHYaIgLbRQUXFuhP66mnYE=
Subject key identifier:   8B:3F:97:E6:98:22:EC:EB:66:8A:91:EE:A8:7A:71:8E:A0:B3:B8:33
Certificate issuer:       /CN=24CAF4C14D797EE171E6A6C5C11988AEA84BC352
Certificate serial:       5E1EFECF649C0CAAC39523389FD3DEE549946594
Authority key identifier: 24:CA:F4:C1:4D:79:7E:E1:71:E6:A6:C5:C1:19:88:AE:A8:4B:C3:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/323830343a373466343a643030303a3a2f33362d3336203d3e20323731303134.roa
Signing time:             Thu 08 Feb 2024 14:06:02 +0000
ROA not before:           Thu 08 Feb 2024 14:01:02 +0000
ROA not after:            Thu 06 Feb 2025 14:06:02 +0000
asID:                     271014
IP address blocks:        2804:74f4:d000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:1e:fe:cf:64:9c:0c:aa:c3:95:23:38:9f:d3:de:e5:49:94:65:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24CAF4C14D797EE171E6A6C5C11988AEA84BC352
        Validity
            Not Before: Feb  8 14:01:02 2024 GMT
            Not After : Feb  6 14:06:02 2025 GMT
        Subject: CN=8B3F97E69822ECEB668A91EEA87A718EA0B3B833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:92:c6:de:f3:1c:94:0d:36:19:2d:c9:0f:7a:
                    93:f0:b5:6b:63:7c:27:da:a7:fd:9b:7d:f8:0b:26:
                    9a:ff:4d:f2:37:b7:6f:8d:71:4c:d4:4a:a9:b7:a6:
                    43:7f:d5:ad:8c:b6:6e:97:ad:d3:8e:34:31:15:4f:
                    6f:0e:a2:ac:e8:e4:92:32:cc:8a:d7:10:ad:d9:25:
                    38:50:0a:3f:83:89:45:81:0b:55:d8:3e:b1:ab:6f:
                    0b:9d:e7:97:c6:87:7c:de:f6:62:a0:c7:1c:e1:3a:
                    37:63:65:85:a8:7c:e7:0b:7c:19:13:01:c1:18:d4:
                    55:24:86:53:b4:d5:83:77:f6:59:f8:b7:a0:91:34:
                    e1:01:17:6b:47:8a:a3:8e:74:50:cb:27:86:6c:ab:
                    12:c2:52:d5:45:47:60:0a:34:50:62:6d:c6:7c:d1:
                    35:e2:1e:6c:b5:e2:99:c4:26:79:e8:1c:1a:04:f8:
                    e3:70:4e:c3:37:cf:be:d0:59:9b:1f:16:35:96:5c:
                    e2:74:a3:5d:ac:76:9b:a9:a7:d5:cb:e2:f0:b2:05:
                    30:f2:78:fb:b6:d5:63:90:67:ed:52:5f:9c:62:ad:
                    41:a6:ac:24:0f:1c:1f:bc:45:4a:7d:90:f0:9b:7c:
                    86:22:60:b7:49:05:23:1e:8e:d0:28:60:e6:4a:dd:
                    d0:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:3F:97:E6:98:22:EC:EB:66:8A:91:EE:A8:7A:71:8E:A0:B3:B8:33
            X509v3 Authority Key Identifier:
                keyid:24:CA:F4:C1:4D:79:7E:E1:71:E6:A6:C5:C1:19:88:AE:A8:4B:C3:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/323830343a373466343a643030303a3a2f33362d3336203d3e20323731303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74f4:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         47:30:e0:88:49:c3:3a:7d:33:04:9d:47:3f:16:17:a5:98:b9:
         99:a0:1c:74:8a:ce:d2:68:76:ef:b3:28:ec:ab:46:0c:32:53:
         93:8a:06:7a:2f:cd:9e:9b:f3:68:7d:cf:b8:39:0f:f5:78:27:
         d0:23:3c:71:a0:41:2b:26:49:d1:be:08:1a:2f:49:ff:14:a5:
         41:50:fd:d9:49:20:d0:8f:fb:be:2e:35:d7:59:ae:6e:6a:f4:
         19:04:22:e4:6e:72:99:4f:d1:e6:39:45:4b:83:f3:23:42:68:
         47:d8:df:ec:94:77:c1:0d:13:1b:11:95:59:24:4f:e1:37:46:
         cf:e3:b0:4c:82:71:1c:fa:ae:db:ff:d0:f9:4c:b9:66:27:c6:
         07:18:cc:3e:89:90:80:f2:a3:ba:24:47:41:28:05:67:3f:41:
         09:b2:13:63:00:96:08:90:f9:d8:ab:94:13:64:99:23:08:63:
         c7:9c:21:a3:e9:83:0f:a6:e9:e5:b1:66:e5:93:06:20:3a:df:
         64:4f:bd:15:5c:2d:24:bc:2a:d8:d5:29:37:b3:18:5e:0f:63:
         93:fd:39:67:66:ac:75:06:b0:f2:bf:13:32:92:d0:28:35:c8:
         b5:a6:8f:f2:d7:9d:57:7e:ca:14:40:26:d7:41:13:70:e8:93:
         e5:f5:a6:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:57:05 2025 by rpki-client