Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/323830343a373466343a643030303a3a2f34382d3438203d3e20323731303134.roa
File:                     323830343a373466343a643030303a3a2f34382d3438203d3e20323731303134.roa (raw, json)
Hash identifier:          frpxRMw1w4W5zWWQaG+6n1E4pOsfSik8YNhcPzyR2vs=
Subject key identifier:   65:8C:EC:05:45:85:EF:49:B7:C6:EA:68:03:CA:41:94:B9:17:7B:E3
Certificate issuer:       /CN=24CAF4C14D797EE171E6A6C5C11988AEA84BC352
Certificate serial:       4BB0E97237CCB3DFAC0142058561B27630B82DBF
Authority key identifier: 24:CA:F4:C1:4D:79:7E:E1:71:E6:A6:C5:C1:19:88:AE:A8:4B:C3:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/323830343a373466343a643030303a3a2f34382d3438203d3e20323731303134.roa
Signing time:             Thu 08 Feb 2024 14:06:00 +0000
ROA not before:           Thu 08 Feb 2024 14:01:00 +0000
ROA not after:            Thu 06 Feb 2025 14:06:00 +0000
asID:                     271014
IP address blocks:        2804:74f4:d000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:b0:e9:72:37:cc:b3:df:ac:01:42:05:85:61:b2:76:30:b8:2d:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24CAF4C14D797EE171E6A6C5C11988AEA84BC352
        Validity
            Not Before: Feb  8 14:01:00 2024 GMT
            Not After : Feb  6 14:06:00 2025 GMT
        Subject: CN=658CEC054585EF49B7C6EA6803CA4194B9177BE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:61:7b:da:b5:fb:47:9c:c4:08:2e:71:d8:79:
                    37:ea:78:9e:d5:da:54:86:49:a7:04:60:90:4f:da:
                    2c:79:8e:3e:1e:67:96:9a:7b:0d:4d:66:3c:2e:02:
                    e3:e9:de:1b:0f:f6:b4:06:d8:90:e6:3b:d0:2c:43:
                    a8:5c:c7:04:b8:91:51:89:66:e3:09:ba:c3:d2:02:
                    bd:91:4c:25:29:45:0f:7f:69:f2:e5:78:73:c0:c1:
                    0a:f7:c5:96:49:76:0e:93:96:20:f3:d7:92:41:6b:
                    25:40:2a:3c:e0:7e:eb:d2:a0:ee:22:1a:07:52:02:
                    a2:76:8c:27:8a:72:98:dc:cc:a1:ce:3e:21:c1:db:
                    c7:b9:29:a0:bf:85:6a:b8:36:02:a3:80:55:43:c8:
                    a9:70:8e:f9:94:71:c2:9d:af:33:6d:c7:c3:89:14:
                    b4:34:5a:ac:17:4c:2e:e6:10:8d:70:b1:2c:63:9d:
                    3c:46:c6:f9:76:cd:b5:c4:f5:18:02:48:b4:ed:dc:
                    9a:21:8a:79:5b:86:bb:cf:ea:f8:42:f6:c0:89:86:
                    82:5a:84:09:d9:bf:46:b9:7c:f8:f3:7a:06:ec:61:
                    bf:3d:fe:d2:32:e4:b5:12:1b:a9:5a:1b:1c:a0:61:
                    91:dc:d3:fc:01:ae:db:6f:5c:8e:6b:70:ad:be:df:
                    7a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:8C:EC:05:45:85:EF:49:B7:C6:EA:68:03:CA:41:94:B9:17:7B:E3
            X509v3 Authority Key Identifier:
                keyid:24:CA:F4:C1:4D:79:7E:E1:71:E6:A6:C5:C1:19:88:AE:A8:4B:C3:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/323830343a373466343a643030303a3a2f34382d3438203d3e20323731303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74f4:d000::/48

    Signature Algorithm: sha256WithRSAEncryption
         7c:79:bc:5b:43:3f:e7:3c:b2:be:98:4f:ab:bb:72:77:2f:b5:
         bc:90:20:8e:af:73:21:fe:06:67:99:98:e7:8b:81:8b:4c:1e:
         fe:64:5c:41:0a:52:e1:b3:a8:17:3b:1c:f5:90:67:e1:99:8e:
         8e:26:6c:f8:58:72:98:6e:27:c3:2f:55:12:20:6a:c7:3f:b9:
         17:81:ff:92:e2:7e:46:1e:d2:5b:6e:68:57:51:12:f4:38:e4:
         0a:40:f6:24:27:49:ff:a8:d2:60:e3:e8:b9:5f:14:cd:dc:af:
         1c:85:b8:80:eb:71:ed:00:8d:37:e0:3c:56:29:d7:4e:5e:78:
         b2:75:28:cb:c4:35:04:32:72:04:d8:06:a2:5d:d4:32:8c:b5:
         42:90:b2:f5:8c:9e:db:41:b4:6c:95:79:74:e5:ee:84:2c:38:
         36:0e:39:af:38:a3:20:9b:a2:16:1f:71:be:e6:80:81:df:92:
         52:2b:58:3e:85:4f:f0:aa:17:51:b2:a4:c1:66:55:41:64:9f:
         46:ef:20:64:90:19:87:f9:20:ae:72:db:b1:d9:cc:84:5c:26:
         da:0f:f8:a8:c6:00:52:2c:04:35:5e:2b:05:b1:66:aa:81:78:
         52:bb:67:25:a4:29:8e:59:6a:70:70:a2:80:38:ec:db:2e:34:
         70:e6:99:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 04:06:29 2025 by rpki-client