Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ENAsAeBvqssLvgXkM9jr3zTTCTysa5voNYz4bu4Vtmbj/0/323830343a383265383a3a2f33342d3334203d3e20323732313634.roa
File:                     323830343a383265383a3a2f33342d3334203d3e20323732313634.roa (raw, json)
Hash identifier:          W+zwHq8oPHh8cqSiZu3Odd0AWyHGm/tBDTh9My9I7Os=
Subject key identifier:   FF:59:6A:59:FF:01:65:96:AA:B1:04:52:21:48:D8:5E:09:C4:42:FF
Certificate issuer:       /CN=999BAB4331AD91DD7B08643BF9CAB750C9C37E76
Certificate serial:       37479B07F63F0EB9826E89412F1B4F329F47EC03
Authority key identifier: 99:9B:AB:43:31:AD:91:DD:7B:08:64:3B:F9:CA:B7:50:C9:C3:7E:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/999BAB4331AD91DD7B08643BF9CAB750C9C37E76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ENAsAeBvqssLvgXkM9jr3zTTCTysa5voNYz4bu4Vtmbj/0/323830343a383265383a3a2f33342d3334203d3e20323732313634.roa
Signing time:             Fri 31 Jan 2025 18:37:51 +0000
ROA not before:           Fri 31 Jan 2025 18:32:51 +0000
ROA not after:            Fri 30 Jan 2026 18:37:51 +0000
asID:                     272164
IP address blocks:        2804:82e8::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:47:9b:07:f6:3f:0e:b9:82:6e:89:41:2f:1b:4f:32:9f:47:ec:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=999BAB4331AD91DD7B08643BF9CAB750C9C37E76
        Validity
            Not Before: Jan 31 18:32:51 2025 GMT
            Not After : Jan 30 18:37:51 2026 GMT
        Subject: CN=FF596A59FF016596AAB104522148D85E09C442FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:bd:e3:b9:f5:81:52:38:b9:b1:01:3a:7d:52:
                    c3:4f:1a:f8:fb:ec:96:c5:13:c9:16:ea:d1:d0:a6:
                    7e:15:1c:95:7a:54:5d:29:69:cf:3b:9c:ee:2b:d9:
                    5a:8c:33:46:33:31:12:a7:95:b3:b3:8b:1b:de:82:
                    97:6d:9d:f8:02:58:2b:18:c1:5b:26:5c:b4:34:48:
                    ae:36:2a:2a:4f:5e:87:13:80:01:93:e6:b3:92:61:
                    1c:ec:90:9c:88:4e:dd:a6:fa:df:35:8d:45:93:b0:
                    0e:0b:3e:c8:44:20:a4:2d:70:ca:ae:5a:a5:bb:ff:
                    d0:a0:22:cd:75:75:a9:68:e5:18:44:a5:a3:bc:58:
                    03:de:eb:ec:52:c8:90:42:4d:cc:82:ad:15:1f:d0:
                    9f:9f:b1:2e:ea:00:19:4b:e8:71:dd:e8:ee:43:9e:
                    e6:61:ee:ca:38:60:11:2b:c5:f6:f6:c3:69:cf:ee:
                    d1:36:c5:3e:31:70:e7:2a:05:98:aa:11:49:21:cc:
                    e0:b3:7f:5a:52:b4:69:d9:42:0e:3d:27:cf:08:7d:
                    28:5c:a2:89:eb:9f:44:aa:30:46:44:2e:19:15:88:
                    c8:f4:aa:0c:ea:3b:85:bd:21:ef:d2:cd:61:7a:a1:
                    0c:aa:82:9c:09:18:8b:a1:a3:a8:c7:7a:4a:ad:0f:
                    1d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:59:6A:59:FF:01:65:96:AA:B1:04:52:21:48:D8:5E:09:C4:42:FF
            X509v3 Authority Key Identifier:
                keyid:99:9B:AB:43:31:AD:91:DD:7B:08:64:3B:F9:CA:B7:50:C9:C3:7E:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ENAsAeBvqssLvgXkM9jr3zTTCTysa5voNYz4bu4Vtmbj/0/999BAB4331AD91DD7B08643BF9CAB750C9C37E76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/999BAB4331AD91DD7B08643BF9CAB750C9C37E76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ENAsAeBvqssLvgXkM9jr3zTTCTysa5voNYz4bu4Vtmbj/0/323830343a383265383a3a2f33342d3334203d3e20323732313634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:82e8::/34

    Signature Algorithm: sha256WithRSAEncryption
         3c:d5:97:22:3f:06:83:f8:a0:b4:9c:15:1a:b7:57:1d:72:b9:
         fa:43:7c:5d:00:92:5e:f7:5a:86:a6:83:1a:7e:89:45:e4:79:
         49:ad:63:5e:de:f0:b2:6d:73:4f:0b:eb:86:32:c4:74:df:11:
         77:9f:eb:d5:10:1c:00:fa:d9:9e:10:a1:15:a6:1d:c6:90:06:
         61:0e:58:63:2b:b9:f4:18:26:fe:31:59:51:c0:3c:e9:a1:0e:
         4f:45:d8:26:89:76:e0:d1:b8:93:c9:bf:be:68:e9:c1:36:26:
         2f:d0:20:94:d7:53:fd:ce:4d:73:18:bd:2a:26:76:3d:da:89:
         d3:1e:fd:c4:24:63:c9:3c:3c:aa:64:1d:54:d5:6b:48:72:e0:
         58:a7:e4:d3:f8:06:49:ed:31:af:43:6c:9c:4b:a1:d4:71:dc:
         ee:e2:f6:b6:01:dd:58:fc:ef:95:18:02:10:bd:cd:84:d3:19:
         e2:f8:11:a8:78:fd:c3:02:4f:78:3e:dd:19:29:1d:e9:8f:56:
         29:ea:78:45:92:a0:d9:62:28:69:e1:09:0c:fa:90:93:e6:e2:
         28:a4:23:59:fe:cb:31:4f:33:d2:a0:fc:04:fa:62:a2:19:ee:
         97:75:db:26:57:40:c6:be:35:ba:08:2b:05:ce:57:14:83:7d:
         9e:31:a0:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:33:52 2025 by rpki-client