Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/323830343a373466343a663030333a3a2f34382d3438203d3e20323731303134.roa
File:                     323830343a373466343a663030333a3a2f34382d3438203d3e20323731303134.roa (raw, json)
Hash identifier:          vbT9oMO3K0+zDt8vbmqaI1RnHStYtZQHUmV8a11bGn0=
Subject key identifier:   1E:C8:32:D5:6F:36:6A:2E:5F:93:7C:CF:DE:5C:05:E0:C5:9B:49:21
Certificate issuer:       /CN=24CAF4C14D797EE171E6A6C5C11988AEA84BC352
Certificate serial:       3D0DE7EFEEC1A668926A1F67B7FAAFEAF274ACF2
Authority key identifier: 24:CA:F4:C1:4D:79:7E:E1:71:E6:A6:C5:C1:19:88:AE:A8:4B:C3:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/323830343a373466343a663030333a3a2f34382d3438203d3e20323731303134.roa
Signing time:             Thu 08 Feb 2024 14:05:54 +0000
ROA not before:           Thu 08 Feb 2024 14:00:54 +0000
ROA not after:            Thu 06 Feb 2025 14:05:54 +0000
asID:                     271014
IP address blocks:        2804:74f4:f003::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:0d:e7:ef:ee:c1:a6:68:92:6a:1f:67:b7:fa:af:ea:f2:74:ac:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24CAF4C14D797EE171E6A6C5C11988AEA84BC352
        Validity
            Not Before: Feb  8 14:00:54 2024 GMT
            Not After : Feb  6 14:05:54 2025 GMT
        Subject: CN=1EC832D56F366A2E5F937CCFDE5C05E0C59B4921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:4b:93:b6:a6:a7:05:df:40:a6:61:da:71:c4:
                    98:0b:38:fc:38:cc:87:73:b0:5a:6d:53:e4:1a:86:
                    2d:6f:ce:25:43:c2:b0:29:4a:01:dc:a7:8f:0b:93:
                    c7:69:36:8e:c8:9b:8d:c8:ca:7d:62:81:65:17:95:
                    d9:37:ec:9b:72:e8:bd:46:c0:7c:61:21:af:41:c1:
                    7c:e9:1c:c3:02:51:43:38:3b:21:96:a4:88:ef:c6:
                    1c:c8:42:5c:c5:b1:a6:a3:dc:92:e0:90:1c:df:04:
                    66:80:60:e8:e3:16:da:e8:9b:a5:7b:7d:06:ff:d0:
                    12:ab:c3:2b:e8:98:31:15:73:ac:23:f3:3b:1e:2b:
                    10:65:ee:23:55:a9:d3:55:c5:97:80:3b:7f:15:d0:
                    97:0f:0f:bf:85:82:bb:e5:0f:1b:17:10:d6:38:d6:
                    8a:7f:aa:1e:88:97:e1:16:e4:de:a6:41:15:ea:f2:
                    e6:86:e5:7c:94:ef:38:a8:c4:85:e7:15:87:9b:db:
                    05:b3:22:e6:b9:86:62:b4:45:92:4d:02:1f:7f:14:
                    91:cc:f2:62:72:90:08:d4:6e:1e:15:e6:bd:9e:e4:
                    75:7b:0c:34:77:95:b9:b0:ff:1c:da:25:77:e6:61:
                    d3:37:5d:de:51:fd:96:f3:0d:9a:88:bc:d4:5a:91:
                    f2:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:C8:32:D5:6F:36:6A:2E:5F:93:7C:CF:DE:5C:05:E0:C5:9B:49:21
            X509v3 Authority Key Identifier:
                keyid:24:CA:F4:C1:4D:79:7E:E1:71:E6:A6:C5:C1:19:88:AE:A8:4B:C3:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/323830343a373466343a663030333a3a2f34382d3438203d3e20323731303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74f4:f003::/48

    Signature Algorithm: sha256WithRSAEncryption
         18:f0:8f:31:02:9d:8a:83:2f:ce:e5:15:99:b4:0d:63:03:46:
         1a:7c:34:57:94:f1:1a:8d:0c:c7:25:47:f3:07:8d:99:34:67:
         e5:b4:ee:65:4b:a1:e2:6b:18:da:ab:f4:93:0c:ba:de:ce:84:
         0b:e9:d0:2b:d9:b0:a3:13:68:93:52:12:07:56:9f:c8:d9:90:
         9f:48:58:11:f9:f3:bb:81:65:90:fd:66:30:8e:8b:e5:2e:04:
         2b:ab:94:b2:09:06:be:8d:7f:6f:71:c7:87:ab:94:a0:70:7f:
         91:53:6b:3d:e7:00:00:1e:3b:54:46:d3:52:bf:cf:f0:58:6e:
         c0:4f:4b:13:f0:8a:d2:e9:97:eb:b0:e2:4f:0d:e3:42:e4:b2:
         15:90:66:d2:7b:6a:e4:2a:80:7e:b1:62:7f:6a:b7:4e:05:4b:
         3d:4d:57:b5:f9:1f:1e:ce:b3:0a:b3:20:2a:29:99:5d:5c:ec:
         06:d3:f9:d7:62:60:40:0e:95:14:7d:00:47:cf:5d:4a:2b:19:
         0b:fd:05:51:93:0e:0d:70:ba:01:26:b4:28:6e:78:13:df:7c:
         65:e8:e3:d7:5a:2f:a1:ac:2b:39:da:2d:d3:01:dd:46:05:b8:
         38:be:9e:3d:11:cf:ac:d8:e6:c9:c7:5f:1f:06:e0:f0:81:a8:
         af:5e:da:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:15:30 2025 by rpki-client