Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/323830343a313231633a383030303a3a2f33332d3333203d3e20323633343537.roa
File:                     323830343a313231633a383030303a3a2f33332d3333203d3e20323633343537.roa (raw, json)
Hash identifier:          ZhQuNgyhCxqJZEnUZ9m/uf73LJm22buaZwUeLoGxkUE=
Subject key identifier:   88:A5:AC:14:06:0E:AE:4C:86:C0:72:C4:CE:88:2F:72:98:49:75:FD
Certificate issuer:       /CN=D9B8C8035F469EEFCD42A52D48966057264B95C4
Certificate serial:       3160B66392682E3216E7834565B21478254A7FB2
Authority key identifier: D9:B8:C8:03:5F:46:9E:EF:CD:42:A5:2D:48:96:60:57:26:4B:95:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9B8C8035F469EEFCD42A52D48966057264B95C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/323830343a313231633a383030303a3a2f33332d3333203d3e20323633343537.roa
Signing time:             Wed 27 Nov 2024 13:45:32 +0000
ROA not before:           Wed 27 Nov 2024 13:40:32 +0000
ROA not after:            Wed 26 Nov 2025 13:45:32 +0000
asID:                     263457
IP address blocks:        2804:121c:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:60:b6:63:92:68:2e:32:16:e7:83:45:65:b2:14:78:25:4a:7f:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9B8C8035F469EEFCD42A52D48966057264B95C4
        Validity
            Not Before: Nov 27 13:40:32 2024 GMT
            Not After : Nov 26 13:45:32 2025 GMT
        Subject: CN=88A5AC14060EAE4C86C072C4CE882F72984975FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d6:08:07:18:06:3c:79:e3:e0:a1:e6:2f:ba:
                    52:8a:a7:95:48:dc:e0:21:f9:b9:a6:49:ea:de:e4:
                    e6:ae:85:d9:47:8d:e4:5b:1b:d4:06:ba:a4:82:e7:
                    05:cb:ff:e3:a3:f4:74:a8:51:0a:f4:44:77:10:0f:
                    b1:ed:ba:c3:20:8c:0d:ef:c8:22:81:26:24:c7:85:
                    8a:36:f2:8c:03:ad:ff:0f:c1:ad:15:e6:21:16:e3:
                    81:f1:00:51:37:ae:f3:c2:f8:7d:4a:a0:bf:f9:f1:
                    ab:2f:5b:ad:63:18:0c:42:90:6e:9a:ab:bd:58:4b:
                    df:81:72:fc:56:05:c5:16:cb:d8:99:78:42:f6:b3:
                    17:0a:f5:a3:08:36:4d:08:b8:c0:ce:55:1c:d1:d4:
                    04:d5:04:87:a6:36:15:70:fc:63:2c:8d:b9:71:9f:
                    88:a3:29:5d:bf:45:a2:34:72:ac:d0:b4:66:d2:f3:
                    47:b4:6c:37:a2:74:1a:be:7c:bf:cc:4f:2d:e1:bc:
                    6c:cb:85:2d:93:76:0a:8d:98:97:56:a5:9d:cd:65:
                    bb:bf:5a:39:64:08:51:43:e7:f0:cb:2c:f3:bf:1d:
                    d3:26:89:10:a6:00:4f:5b:53:89:54:7b:42:d9:6f:
                    fa:33:7e:54:f7:0b:72:f1:86:b9:9b:1b:fb:ed:af:
                    cb:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:A5:AC:14:06:0E:AE:4C:86:C0:72:C4:CE:88:2F:72:98:49:75:FD
            X509v3 Authority Key Identifier:
                keyid:D9:B8:C8:03:5F:46:9E:EF:CD:42:A5:2D:48:96:60:57:26:4B:95:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/D9B8C8035F469EEFCD42A52D48966057264B95C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9B8C8035F469EEFCD42A52D48966057264B95C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/323830343a313231633a383030303a3a2f33332d3333203d3e20323633343537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:121c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         5e:83:ea:80:ad:3e:bf:2f:41:dc:32:d0:95:be:5e:3e:45:3a:
         ad:62:34:87:90:ef:dd:90:90:71:4b:95:9f:3d:b5:7f:85:f6:
         bb:68:bb:ee:4b:6e:d0:ce:ab:8f:9b:e2:73:53:cc:87:78:24:
         b7:94:ec:37:72:43:e8:a0:4d:be:3a:27:2a:fd:a0:ae:ca:4c:
         1c:71:8e:4f:b6:b2:f4:0e:c9:b2:0c:6b:93:58:9b:94:ba:3f:
         b9:a9:27:ad:b6:9f:27:82:58:75:ab:8a:03:10:89:07:79:b8:
         5e:3e:1a:52:c6:12:a0:de:f1:a0:c4:3a:62:c3:0c:97:20:88:
         ae:87:f4:40:30:da:ed:b1:d0:78:10:8f:1b:a1:c8:e0:3f:3c:
         cc:69:37:50:2c:fd:a4:c1:d7:1a:5b:2e:b7:3e:90:df:0c:48:
         e2:07:7f:19:fc:7f:2a:f1:e5:da:0a:a5:5e:83:30:d0:ba:b4:
         67:b3:37:29:49:b4:e7:4f:62:c9:97:9b:e7:a7:47:bb:ec:d7:
         26:d9:a2:6b:73:eb:d1:57:c4:07:d8:23:49:b7:72:1b:08:cb:
         4b:79:36:0c:fd:00:08:e7:df:9f:b9:b1:39:9a:0d:d2:49:8f:
         38:d7:2a:03:ae:00:5b:48:f7:8d:78:6a:2d:7a:e7:f3:f9:69:
         cf:58:d5:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:17:49 2025 by rpki-client