Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EWoEjDQRqmJT2Yi4u4AZ7VWFahnpix9tH2PVXfQMyGA4/0/323830343a323831633a3a2f33322d3438203d3e20323633393431.roa
File:                     323830343a323831633a3a2f33322d3438203d3e20323633393431.roa (raw, json)
Hash identifier:          /9y2cJydpVaE3pQBcArdWZWt+GUNh+hctDc36GOPu+c=
Subject key identifier:   BC:22:40:A4:78:4D:21:A3:17:57:8C:86:B5:A3:CB:01:35:08:D6:98
Certificate issuer:       /CN=15454F5864506215FD2C79471D5D512C400CB724
Certificate serial:       42E554DCE35686D8CF8861AD0700F897E69380D9
Authority key identifier: 15:45:4F:58:64:50:62:15:FD:2C:79:47:1D:5D:51:2C:40:0C:B7:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15454F5864506215FD2C79471D5D512C400CB724.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EWoEjDQRqmJT2Yi4u4AZ7VWFahnpix9tH2PVXfQMyGA4/0/323830343a323831633a3a2f33322d3438203d3e20323633393431.roa
Signing time:             Sun 10 Nov 2024 16:29:57 +0000
ROA not before:           Sun 10 Nov 2024 16:24:57 +0000
ROA not after:            Sun 09 Nov 2025 16:29:57 +0000
asID:                     263941
IP address blocks:        2804:281c::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:e5:54:dc:e3:56:86:d8:cf:88:61:ad:07:00:f8:97:e6:93:80:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15454F5864506215FD2C79471D5D512C400CB724
        Validity
            Not Before: Nov 10 16:24:57 2024 GMT
            Not After : Nov  9 16:29:57 2025 GMT
        Subject: CN=BC2240A4784D21A317578C86B5A3CB013508D698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b3:16:80:08:98:58:4a:31:17:c3:2c:39:f9:
                    45:6f:4a:31:b7:ec:f0:53:0e:01:a5:d6:ac:f5:10:
                    45:a9:6f:b0:99:56:86:79:a2:a8:18:d5:d0:60:e8:
                    d7:96:5a:44:c9:60:bd:05:f4:13:49:e7:15:69:b5:
                    56:17:f2:ca:81:6c:49:f7:d2:04:e5:73:72:53:7a:
                    44:10:6c:1f:5e:52:43:a7:60:e3:76:6e:ad:d5:be:
                    76:08:d5:88:7f:95:06:10:4b:92:dd:02:b8:c4:9a:
                    2e:ce:17:3d:32:e7:4a:c3:84:28:ac:f6:bb:04:16:
                    53:f6:ce:b4:de:61:c4:e1:7a:83:ee:80:a4:0e:2e:
                    d0:85:ff:3d:80:b3:f4:3c:d2:45:22:c1:0c:9c:10:
                    cf:9d:2f:1e:39:13:d0:2e:84:25:b4:19:7a:e2:67:
                    13:62:ca:5c:c5:44:34:ff:e7:c9:13:4d:55:d8:83:
                    f1:36:10:8f:df:f9:d6:d0:c8:ac:d7:2a:6c:cd:51:
                    da:c5:f9:c5:5e:0b:1d:3a:b9:69:3c:5e:28:02:f5:
                    75:b4:41:80:7b:a3:25:c0:22:32:27:57:5e:a6:2a:
                    81:b7:5c:ca:b2:83:d8:27:c3:3f:ad:68:37:70:4f:
                    9f:b9:6e:b0:fa:4b:a7:78:e1:df:38:9f:04:e6:35:
                    fd:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:22:40:A4:78:4D:21:A3:17:57:8C:86:B5:A3:CB:01:35:08:D6:98
            X509v3 Authority Key Identifier:
                keyid:15:45:4F:58:64:50:62:15:FD:2C:79:47:1D:5D:51:2C:40:0C:B7:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EWoEjDQRqmJT2Yi4u4AZ7VWFahnpix9tH2PVXfQMyGA4/0/15454F5864506215FD2C79471D5D512C400CB724.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15454F5864506215FD2C79471D5D512C400CB724.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EWoEjDQRqmJT2Yi4u4AZ7VWFahnpix9tH2PVXfQMyGA4/0/323830343a323831633a3a2f33322d3438203d3e20323633393431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:281c::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:ca:0d:07:a5:61:59:9d:08:e0:7a:b9:13:36:a9:e4:6d:76:
         7d:be:9f:ea:b4:8e:3a:5a:1e:e8:48:6c:c6:c6:70:0b:26:41:
         b5:91:2d:8a:25:b1:2b:fe:ff:23:44:7e:9a:71:32:e2:4f:57:
         3d:2c:d4:9c:88:8e:2d:58:60:c8:bd:24:86:37:e0:8f:22:8c:
         e6:ce:c6:38:b7:88:bf:b3:73:bf:10:96:9f:28:d9:a5:18:45:
         c1:78:25:3d:15:c8:ef:72:9f:a2:0d:59:66:a0:be:e1:fa:95:
         53:dc:83:ed:ee:38:db:55:7a:58:7a:ce:85:6c:22:f8:78:34:
         f5:9c:b4:19:02:d9:6f:60:4a:3c:db:d9:93:d7:ea:43:55:fb:
         db:89:9f:13:d2:bc:5f:31:1d:83:ae:28:e7:af:7b:92:c7:68:
         96:42:76:f4:29:fa:a5:0b:ab:8e:ba:71:d1:33:3c:d9:51:8a:
         ea:9a:35:51:48:a2:d0:96:95:0b:6f:a9:6d:9e:04:22:de:b8:
         04:e3:ff:7e:6f:42:03:68:5d:2b:27:27:8a:75:7a:33:2a:80:
         10:cd:3c:f3:59:c3:d5:94:30:e5:34:4c:32:29:52:27:0f:31:
         a0:06:e4:52:75:ef:49:53:63:e1:4e:08:37:6d:e6:81:73:ce:
         bc:d7:98:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:25:30 2025 by rpki-client