Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/323830343a373466343a663030373a3a2f34382d3438203d3e20323731303134.roa
File:                     323830343a373466343a663030373a3a2f34382d3438203d3e20323731303134.roa (raw, json)
Hash identifier:          9RuJX4Ew638IT6GJMW5oaHj3oD5bi1cCB0FR+b56CN0=
Subject key identifier:   D5:98:CF:9D:F7:2B:72:63:1C:34:2B:00:52:CC:B6:3D:E3:57:0C:3C
Certificate issuer:       /CN=24CAF4C14D797EE171E6A6C5C11988AEA84BC352
Certificate serial:       621AC887A4D936E2117315E5652B719C62CB46D3
Authority key identifier: 24:CA:F4:C1:4D:79:7E:E1:71:E6:A6:C5:C1:19:88:AE:A8:4B:C3:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/323830343a373466343a663030373a3a2f34382d3438203d3e20323731303134.roa
Signing time:             Thu 08 Feb 2024 14:05:55 +0000
ROA not before:           Thu 08 Feb 2024 14:00:55 +0000
ROA not after:            Thu 06 Feb 2025 14:05:55 +0000
asID:                     271014
IP address blocks:        2804:74f4:f007::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:1a:c8:87:a4:d9:36:e2:11:73:15:e5:65:2b:71:9c:62:cb:46:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24CAF4C14D797EE171E6A6C5C11988AEA84BC352
        Validity
            Not Before: Feb  8 14:00:55 2024 GMT
            Not After : Feb  6 14:05:55 2025 GMT
        Subject: CN=D598CF9DF72B72631C342B0052CCB63DE3570C3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:63:2c:52:af:7f:d1:38:77:be:9d:f2:45:cf:
                    ad:3e:cf:ae:13:50:91:c7:69:ce:73:87:f9:0c:89:
                    69:17:fb:ef:32:b5:be:6c:7f:6f:b3:1e:1d:59:b5:
                    e1:56:ff:d3:f2:31:af:d7:d8:f3:c3:0f:be:b8:04:
                    e5:70:e7:24:b8:25:bd:76:22:67:c9:f9:3c:4c:e2:
                    3d:fa:aa:a3:ce:38:a1:6e:35:77:74:df:41:6b:1a:
                    eb:9d:0a:7e:82:8a:6c:bc:9f:b6:e6:27:7a:93:5e:
                    ee:01:79:82:5e:15:b6:d5:ca:99:9e:41:0a:57:af:
                    48:6b:19:d8:ea:f9:a5:9f:31:c3:b5:20:66:da:31:
                    f6:59:33:f2:12:26:83:eb:b7:e0:f0:cd:51:27:94:
                    03:99:5e:ea:3e:3c:4b:34:32:60:70:8b:f3:45:0e:
                    8c:ef:ab:73:f1:ae:b5:c1:61:7b:08:e2:ce:67:10:
                    c0:c7:ae:d9:29:a1:c0:9b:9a:db:91:57:bd:d4:0b:
                    b6:52:dc:27:4c:ae:b3:f1:39:36:98:15:54:ef:60:
                    f8:fe:54:51:fb:bd:f0:d6:25:70:22:a1:21:0f:45:
                    e4:ea:20:a1:28:0c:b9:4c:95:52:e2:c6:22:bf:d8:
                    01:4e:71:5c:ea:4d:57:0b:24:ac:40:c1:15:b6:88:
                    c1:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:98:CF:9D:F7:2B:72:63:1C:34:2B:00:52:CC:B6:3D:E3:57:0C:3C
            X509v3 Authority Key Identifier:
                keyid:24:CA:F4:C1:4D:79:7E:E1:71:E6:A6:C5:C1:19:88:AE:A8:4B:C3:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/323830343a373466343a663030373a3a2f34382d3438203d3e20323731303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74f4:f007::/48

    Signature Algorithm: sha256WithRSAEncryption
         40:96:29:b2:d3:03:57:bb:f4:00:22:e7:8a:8c:f5:66:b1:99:
         a6:ff:1a:a5:90:62:0d:f0:7d:f4:cb:71:55:13:c4:ff:7f:ce:
         97:62:01:b8:20:07:36:79:72:d4:31:c7:22:a7:26:e2:cb:a1:
         32:52:d0:ed:41:0d:a9:40:b3:db:d9:71:cc:da:0f:40:15:22:
         d1:31:4f:40:fa:5e:df:2c:6b:e5:7c:0d:bc:2b:77:7b:bf:7a:
         eb:1d:9d:4b:8c:3a:e4:da:5d:77:b5:a9:e5:bd:a0:08:96:ea:
         c4:1e:03:d4:51:40:b1:70:00:29:55:33:e4:fc:d5:3f:c9:64:
         0d:8b:a9:9e:e4:8f:fb:aa:68:fb:ce:13:ff:ad:98:ba:43:75:
         fb:b9:98:6f:f1:44:bd:2c:38:65:4c:d5:f9:0d:7b:6f:b8:77:
         8f:92:7a:67:79:fd:25:3d:32:45:54:c6:ce:c2:cf:f4:aa:98:
         5b:59:df:ad:d6:f9:70:71:fa:23:55:c9:f4:1b:6f:d0:bc:f0:
         a5:e3:79:e6:c6:38:46:ac:fc:53:61:44:dd:ed:45:d8:5b:c5:
         ab:55:27:f2:41:e0:91:f5:45:53:37:ec:be:c5:eb:47:a3:81:
         bd:38:49:e0:dc:57:2f:9b:7e:f2:0c:d2:d3:f1:82:86:e8:2f:
         f6:57:4e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 06:02:09 2025 by rpki-client