Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/323830343a323232383a3a2f33322d3332203d3e20323634353935.roa
File:                     323830343a323232383a3a2f33322d3332203d3e20323634353935.roa (raw, json)
Hash identifier:          RtSwyYthohAqqjhF+h9PXni/LCYgwfD5Lk6oki8Gfv0=
Subject key identifier:   34:33:0D:63:BE:91:28:77:D0:30:FC:A1:38:85:A5:14:EA:77:A8:4E
Certificate issuer:       /CN=B0B9B934434D02C9258B1024C067D277143B182B
Certificate serial:       16331A25D5E400C9EC11EED994F67A988AB4B076
Authority key identifier: B0:B9:B9:34:43:4D:02:C9:25:8B:10:24:C0:67:D2:77:14:3B:18:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0B9B934434D02C9258B1024C067D277143B182B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/323830343a323232383a3a2f33322d3332203d3e20323634353935.roa
Signing time:             Wed 05 Feb 2025 02:19:28 +0000
ROA not before:           Wed 05 Feb 2025 02:14:28 +0000
ROA not after:            Wed 04 Feb 2026 02:19:28 +0000
asID:                     264595
IP address blocks:        2804:2228::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:33:1a:25:d5:e4:00:c9:ec:11:ee:d9:94:f6:7a:98:8a:b4:b0:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0B9B934434D02C9258B1024C067D277143B182B
        Validity
            Not Before: Feb  5 02:14:28 2025 GMT
            Not After : Feb  4 02:19:28 2026 GMT
        Subject: CN=34330D63BE912877D030FCA13885A514EA77A84E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:cc:69:7d:5d:5c:a0:77:64:2c:90:90:40:57:
                    a9:e3:96:7e:7e:c7:0e:25:65:fc:b6:84:eb:bf:34:
                    54:44:6b:21:bd:6f:2b:c9:a8:9e:8f:e1:1a:75:7d:
                    70:59:fb:be:f7:79:2c:22:ae:6b:76:36:e0:f0:73:
                    31:46:7e:5f:c4:ad:7a:63:f5:02:a2:6a:2f:4c:68:
                    c9:52:89:8c:2a:a5:c5:69:fa:9a:3c:80:e8:f1:bd:
                    a3:d2:ff:45:30:ff:11:bc:2c:9f:8c:1d:6c:e7:3f:
                    fc:6c:d8:d2:ec:df:68:82:26:7b:e1:ed:88:88:21:
                    e5:6d:0e:5c:06:0a:2f:d5:c6:d1:3f:b7:8d:38:c3:
                    25:3f:f4:69:8c:e9:bf:39:d4:68:85:b1:15:ce:a7:
                    d6:28:78:44:f4:37:8e:8b:cc:8d:a5:5c:cf:c0:c1:
                    53:f9:24:b5:63:12:78:ef:04:c7:2f:d9:84:0c:d1:
                    9f:7e:bb:3b:41:80:27:f2:0f:d4:d1:d2:ab:66:21:
                    40:b9:54:c4:bb:45:fc:9b:3f:d1:2e:a5:22:00:9f:
                    1f:97:e2:44:56:9d:69:c9:78:55:59:03:69:36:78:
                    9f:92:02:e8:53:dd:91:b8:14:bb:1f:8d:09:f5:93:
                    62:a8:0a:33:e9:ae:a7:ba:1e:e6:36:94:77:89:de:
                    7d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:33:0D:63:BE:91:28:77:D0:30:FC:A1:38:85:A5:14:EA:77:A8:4E
            X509v3 Authority Key Identifier:
                keyid:B0:B9:B9:34:43:4D:02:C9:25:8B:10:24:C0:67:D2:77:14:3B:18:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/B0B9B934434D02C9258B1024C067D277143B182B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0B9B934434D02C9258B1024C067D277143B182B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/323830343a323232383a3a2f33322d3332203d3e20323634353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2228::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:63:70:fd:71:5a:5f:f8:12:2d:30:7f:01:e4:af:aa:50:25:
         37:93:a3:b4:b0:2c:37:9a:73:26:6d:29:89:b0:db:a8:e6:11:
         1d:a8:1b:95:cb:18:82:02:55:91:00:68:00:9e:60:ea:8b:2f:
         b7:97:16:67:28:29:6e:b2:90:30:52:ed:72:81:3b:b4:07:4f:
         47:23:2d:d5:0e:19:66:22:50:3e:65:40:42:9f:1c:ab:31:fe:
         f8:99:86:1c:ff:ab:d6:71:dd:be:d0:54:02:33:5f:88:95:1b:
         5a:be:8e:68:08:b0:10:bb:e4:ac:02:bd:2d:06:59:fb:08:e0:
         14:a3:25:08:74:21:69:6f:fc:81:91:e9:8f:7d:29:12:7a:e8:
         86:b1:6f:1c:6c:b2:32:ea:0e:e3:85:15:0f:31:84:24:aa:3b:
         cc:20:9f:c9:86:90:a2:de:8b:03:15:e2:e6:61:14:1b:2b:7a:
         68:29:f3:c5:97:d8:d9:fa:ce:97:19:ea:8d:72:f3:e1:35:d2:
         f3:f8:8b:d7:ac:52:1b:25:37:83:a5:60:d2:08:a0:07:67:a0:
         1f:5d:89:54:3f:9f:62:dd:a2:b7:ae:68:1a:5e:6f:ad:d0:71:
         9f:8d:77:3f:17:4a:e2:8a:4a:e8:91:eb:1e:8b:05:47:4d:c3:
         6d:6e:68:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:21:57 2025 by rpki-client