Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/323830343a373466343a643030303a3a2f34352d3435203d3e20323731303134.roa
File:                     323830343a373466343a643030303a3a2f34352d3435203d3e20323731303134.roa (raw, json)
Hash identifier:          2hu+aNMwBzRoH9DtXK4BxUTWOu6vP0zZsTJjLXRj7I4=
Subject key identifier:   2B:64:B3:9C:9F:61:86:87:42:D9:71:92:E1:D4:15:71:DB:9C:AF:86
Certificate issuer:       /CN=24CAF4C14D797EE171E6A6C5C11988AEA84BC352
Certificate serial:       3D679CEB5594A67FA7FC20A9EC51435B1161A38C
Authority key identifier: 24:CA:F4:C1:4D:79:7E:E1:71:E6:A6:C5:C1:19:88:AE:A8:4B:C3:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/323830343a373466343a643030303a3a2f34352d3435203d3e20323731303134.roa
Signing time:             Thu 08 Feb 2024 14:05:55 +0000
ROA not before:           Thu 08 Feb 2024 14:00:55 +0000
ROA not after:            Thu 06 Feb 2025 14:05:55 +0000
asID:                     271014
IP address blocks:        2804:74f4:d000::/45 maxlen: 45
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:67:9c:eb:55:94:a6:7f:a7:fc:20:a9:ec:51:43:5b:11:61:a3:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24CAF4C14D797EE171E6A6C5C11988AEA84BC352
        Validity
            Not Before: Feb  8 14:00:55 2024 GMT
            Not After : Feb  6 14:05:55 2025 GMT
        Subject: CN=2B64B39C9F61868742D97192E1D41571DB9CAF86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:48:23:d6:96:b3:d6:bf:74:72:fb:a4:3f:1b:
                    7a:bc:61:7d:3f:4a:01:1c:74:c3:14:39:81:0d:76:
                    44:48:42:27:31:f6:ea:1f:cd:c8:01:bf:f8:d6:d8:
                    21:e3:f2:ec:3f:7b:8b:d2:e4:41:7b:e3:29:85:ca:
                    df:7d:45:1f:3c:02:6c:5b:9f:a9:5e:53:c4:5f:a1:
                    e2:49:13:bc:ff:6e:e1:34:55:f8:ea:70:fa:fb:9a:
                    df:75:71:0f:ed:71:99:55:4b:cb:a8:28:8f:c4:ae:
                    ec:78:b2:62:10:12:6f:1b:fb:d5:c8:89:86:5c:96:
                    7f:0e:e6:98:f9:3a:eb:a4:c1:5f:d3:f0:58:84:40:
                    ed:f0:ae:ba:8b:5e:b7:74:b5:a0:7d:37:19:1d:6f:
                    bd:bb:f4:5e:19:eb:86:e4:63:62:31:6e:d1:df:fb:
                    43:3e:52:26:e9:55:07:8b:9a:79:c4:05:05:df:d6:
                    9f:37:d6:78:2b:37:94:a8:f7:99:e8:26:63:90:f9:
                    9f:f0:2d:b0:35:9e:84:99:21:af:a0:64:67:31:4d:
                    1d:4b:4f:25:23:58:b3:ce:e1:98:45:10:db:8a:7f:
                    00:b4:29:85:0e:de:85:cb:86:d3:c0:17:42:87:1b:
                    92:4a:23:ff:55:b9:a5:43:30:1a:aa:d0:36:f5:8c:
                    be:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:64:B3:9C:9F:61:86:87:42:D9:71:92:E1:D4:15:71:DB:9C:AF:86
            X509v3 Authority Key Identifier:
                keyid:24:CA:F4:C1:4D:79:7E:E1:71:E6:A6:C5:C1:19:88:AE:A8:4B:C3:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/323830343a373466343a643030303a3a2f34352d3435203d3e20323731303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74f4:d000::/45

    Signature Algorithm: sha256WithRSAEncryption
         bb:34:e6:80:98:59:f9:f4:26:3e:d0:e2:40:35:3e:1a:6d:b3:
         88:53:12:16:2b:18:42:c2:ab:bd:6e:87:26:8f:49:42:ff:29:
         7e:3a:f2:2f:fa:ee:ed:db:8d:a9:9a:ee:07:81:74:1a:90:de:
         ee:c5:02:58:ff:b7:d1:94:84:ad:b1:87:d1:ea:06:c9:d7:71:
         c7:a8:19:90:64:45:78:6b:c7:7a:62:a7:fa:ac:0f:f6:b3:fc:
         f8:24:7a:c4:b3:d5:4b:8f:e8:d7:44:cd:f2:53:db:3a:34:94:
         3d:8b:96:4a:75:39:03:68:06:bd:65:9b:6d:be:c4:77:e0:1f:
         89:c0:98:77:0c:e0:c2:4f:31:f3:07:98:67:29:41:60:d8:ac:
         38:b2:1d:7f:be:0f:16:2f:3d:71:29:ba:b7:45:4b:e6:d3:50:
         7d:1d:40:eb:e7:28:05:20:69:4e:7e:16:6d:e6:34:8d:80:ed:
         52:14:49:66:f2:7b:0b:00:54:82:25:29:66:22:09:87:90:2d:
         36:0f:2c:02:cc:58:40:78:7e:7e:db:09:ee:f5:4a:f1:4f:93:
         57:b4:a5:d6:ec:46:5f:6b:2b:34:9a:9d:8d:4a:e8:b3:bb:f6:
         a0:66:fa:71:e3:1a:f9:f5:1c:10:4a:4c:16:71:8a:20:b7:e2:
         d3:6a:2b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:15:39 2025 by rpki-client