Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/323830343a373466343a663030303a3a2f34382d3438203d3e20323731303134.roa
File:                     323830343a373466343a663030303a3a2f34382d3438203d3e20323731303134.roa (raw, json)
Hash identifier:          JppIirlupu0x1qjFhOU6g6T+Zw65QUm6AZSdwtrRoWU=
Subject key identifier:   7B:08:69:E8:3C:62:F7:E0:24:B1:DB:9B:B1:D3:35:CE:F7:1D:3F:EF
Certificate issuer:       /CN=24CAF4C14D797EE171E6A6C5C11988AEA84BC352
Certificate serial:       6FAC2E03B0600ACF050F17DCB9F3EC121D731D7C
Authority key identifier: 24:CA:F4:C1:4D:79:7E:E1:71:E6:A6:C5:C1:19:88:AE:A8:4B:C3:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/323830343a373466343a663030303a3a2f34382d3438203d3e20323731303134.roa
Signing time:             Thu 08 Feb 2024 14:05:54 +0000
ROA not before:           Thu 08 Feb 2024 14:00:54 +0000
ROA not after:            Thu 06 Feb 2025 14:05:54 +0000
asID:                     271014
IP address blocks:        2804:74f4:f000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:ac:2e:03:b0:60:0a:cf:05:0f:17:dc:b9:f3:ec:12:1d:73:1d:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24CAF4C14D797EE171E6A6C5C11988AEA84BC352
        Validity
            Not Before: Feb  8 14:00:54 2024 GMT
            Not After : Feb  6 14:05:54 2025 GMT
        Subject: CN=7B0869E83C62F7E024B1DB9BB1D335CEF71D3FEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:55:1f:17:e8:38:cf:27:60:2b:5c:a6:b4:03:
                    54:2b:e0:2e:0c:c6:b4:93:5f:a9:17:64:05:28:70:
                    e2:65:fe:31:47:52:10:09:df:43:36:54:ab:5d:14:
                    ad:40:05:ff:c0:a1:57:d2:15:7d:65:bd:94:97:d0:
                    ab:c9:73:1e:04:d2:94:4f:3b:ef:08:71:92:1e:ad:
                    57:7b:59:63:f4:ab:fb:37:08:e8:0c:1a:70:89:ae:
                    92:85:08:17:01:47:c7:27:58:15:45:91:62:4f:75:
                    d2:47:c8:2e:ca:ab:29:c4:ed:cd:fc:6d:49:77:7f:
                    73:29:f2:75:a1:bc:cc:30:7e:ee:59:05:ab:5f:ea:
                    78:b1:d0:01:11:c2:c4:b4:b6:e0:ea:02:f6:71:1b:
                    dd:a0:95:4c:f1:86:56:ed:75:33:0a:e2:ae:5b:a0:
                    6b:2d:67:85:4a:3f:8c:e0:78:a9:88:31:d6:51:ad:
                    6b:b0:70:7b:79:d1:94:f3:32:12:9c:38:ff:5f:fd:
                    81:f6:a5:91:c0:0d:de:1c:14:62:b7:70:c5:1e:90:
                    65:0f:e2:7b:a7:15:49:4f:18:56:8b:6b:92:23:cb:
                    58:72:cb:f4:2f:38:59:c3:54:ef:2e:3a:48:6a:0f:
                    da:fc:84:90:32:b6:f5:6c:1f:01:87:77:e7:58:4e:
                    6c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:08:69:E8:3C:62:F7:E0:24:B1:DB:9B:B1:D3:35:CE:F7:1D:3F:EF
            X509v3 Authority Key Identifier:
                keyid:24:CA:F4:C1:4D:79:7E:E1:71:E6:A6:C5:C1:19:88:AE:A8:4B:C3:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/323830343a373466343a663030303a3a2f34382d3438203d3e20323731303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74f4:f000::/48

    Signature Algorithm: sha256WithRSAEncryption
         7e:53:a4:fa:65:78:19:9a:cd:24:9a:38:98:1f:1a:6e:19:41:
         88:1a:cd:6d:25:ed:fd:39:56:10:c7:4b:a8:a9:02:25:05:2d:
         8d:9c:94:88:e8:3a:42:bc:b5:a4:12:b9:6f:07:ef:71:7f:5d:
         d7:9a:f9:2c:4a:50:f1:f8:71:d2:44:66:75:97:30:70:5b:bf:
         18:c5:f7:10:97:2f:29:7d:f9:d0:66:f8:d4:67:cd:78:fd:12:
         e7:25:d0:fd:f1:6a:02:cc:eb:ee:fa:9d:87:58:25:9b:86:ed:
         24:9a:2b:d0:6d:ad:37:5f:fb:4c:16:38:78:5c:d5:48:6e:6a:
         87:18:f0:5c:54:9e:c8:8c:bd:c4:91:a8:3e:83:66:65:99:1f:
         89:48:7d:83:1a:60:f3:95:f3:ac:ca:af:17:62:dd:e6:f3:d2:
         ec:bd:26:08:41:7a:70:9e:00:5e:b6:84:55:23:a7:70:4e:52:
         16:fb:6c:cc:5a:ec:1d:e3:21:75:19:7c:84:11:58:12:d7:9d:
         fc:98:61:0d:d3:18:f4:cd:e3:ba:46:0a:23:49:11:d0:8c:13:
         8a:47:69:39:59:b0:14:93:e3:a0:04:e6:73:18:ba:d0:1d:6a:
         f6:ff:62:4c:eb:87:16:45:9f:a5:07:cc:a0:3f:9e:31:f8:0d:
         13:b8:6d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:29:47 2025 by rpki-client