Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EmQF7LdXHDMkEwsvsomego24xJArotwrxfd4rvyGYGQY/0/323830343a383831343a3a2f33322d3438203d3e20323732373530.roa
File:                     323830343a383831343a3a2f33322d3438203d3e20323732373530.roa (raw, json)
Hash identifier:          D3jfDzAeloa2c4lD9o9k1K0lwUfpmjQC3pRQ5AGnEm0=
Subject key identifier:   3A:85:78:61:48:CB:1F:3B:07:F3:A3:FC:B9:39:B8:2D:0E:D8:E1:0D
Certificate issuer:       /CN=5793093F91C6E0D4868DB4AE9EEA350E45720423
Certificate serial:       65191BB693ACF6F54B00205B0CD50FCF4FD07D59
Authority key identifier: 57:93:09:3F:91:C6:E0:D4:86:8D:B4:AE:9E:EA:35:0E:45:72:04:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5793093F91C6E0D4868DB4AE9EEA350E45720423.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EmQF7LdXHDMkEwsvsomego24xJArotwrxfd4rvyGYGQY/0/323830343a383831343a3a2f33322d3438203d3e20323732373530.roa
Signing time:             Thu 05 Dec 2024 12:28:58 +0000
ROA not before:           Thu 05 Dec 2024 12:23:58 +0000
ROA not after:            Thu 04 Dec 2025 12:28:58 +0000
asID:                     272750
IP address blocks:        2804:8814::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:19:1b:b6:93:ac:f6:f5:4b:00:20:5b:0c:d5:0f:cf:4f:d0:7d:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5793093F91C6E0D4868DB4AE9EEA350E45720423
        Validity
            Not Before: Dec  5 12:23:58 2024 GMT
            Not After : Dec  4 12:28:58 2025 GMT
        Subject: CN=3A85786148CB1F3B07F3A3FCB939B82D0ED8E10D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e2:f3:e7:0a:0e:5e:52:1c:3d:82:4f:3f:74:
                    ca:d4:07:99:bf:d6:2e:80:03:64:ff:4b:44:2e:47:
                    13:39:cb:e0:bb:f5:2f:42:62:c9:b5:75:01:13:ee:
                    73:1a:e0:a4:2f:80:6d:0e:13:fb:69:8a:f1:c5:5a:
                    00:06:b0:f0:3d:e1:66:fc:08:c0:33:96:8b:a4:8a:
                    0a:54:d1:e5:5b:da:46:9b:a9:be:b3:e3:8d:5e:de:
                    d5:f5:8f:47:4a:b2:b9:6e:54:42:08:ec:fe:d0:73:
                    d7:38:b7:f2:66:56:6a:cc:8d:24:a4:5f:ca:51:ff:
                    26:25:dd:a1:02:85:c8:56:9d:9d:57:e6:bb:af:6e:
                    1f:b2:81:ff:7b:b9:90:4b:1c:92:b0:d9:3c:01:4b:
                    03:02:0d:c1:09:b6:b6:b1:99:74:47:8e:ac:cf:d9:
                    8c:b2:14:55:3a:bc:7a:7a:f5:01:8e:40:e9:18:55:
                    20:ec:7e:20:be:f1:7b:86:04:4f:4e:c3:1f:c2:35:
                    a1:b0:b2:77:19:b7:65:a4:d8:7a:1f:9e:b6:16:3e:
                    14:83:1d:9d:49:c0:e9:75:6a:9b:29:87:fa:b0:b0:
                    63:77:4c:75:ba:2f:d9:30:dd:5a:db:5b:58:d6:3d:
                    ad:b6:7f:f5:b7:a7:8f:db:98:ae:b5:44:54:bc:b2:
                    62:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:85:78:61:48:CB:1F:3B:07:F3:A3:FC:B9:39:B8:2D:0E:D8:E1:0D
            X509v3 Authority Key Identifier:
                keyid:57:93:09:3F:91:C6:E0:D4:86:8D:B4:AE:9E:EA:35:0E:45:72:04:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EmQF7LdXHDMkEwsvsomego24xJArotwrxfd4rvyGYGQY/0/5793093F91C6E0D4868DB4AE9EEA350E45720423.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5793093F91C6E0D4868DB4AE9EEA350E45720423.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EmQF7LdXHDMkEwsvsomego24xJArotwrxfd4rvyGYGQY/0/323830343a383831343a3a2f33322d3438203d3e20323732373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8814::/32

    Signature Algorithm: sha256WithRSAEncryption
         b1:c4:02:b0:4a:1d:06:f1:04:a4:76:21:a5:3d:f6:3c:94:cb:
         1a:33:f3:ba:36:a8:4e:0d:3f:81:3a:98:1b:f2:5f:e6:cc:2f:
         74:65:ee:d8:6a:d4:ad:65:90:cf:bf:1a:79:b9:14:5c:f7:97:
         98:a4:a3:6e:87:16:7b:f6:be:0f:82:e8:1a:b4:b4:5b:89:fe:
         02:f1:7f:70:39:af:d0:82:c9:dd:71:83:a3:3d:38:c5:be:8d:
         33:1b:b2:21:e9:12:ac:87:a4:2a:38:8b:76:30:d8:6c:4f:e9:
         62:20:c0:83:d9:9b:fc:b1:74:c2:8a:a8:b5:49:eb:88:71:83:
         26:23:28:07:38:54:bb:74:8d:76:3e:3f:32:fd:69:a4:68:b5:
         28:95:f4:1a:d0:64:25:39:f2:25:0d:42:93:aa:bc:97:5d:8f:
         20:f0:d3:01:fc:5c:b8:fe:2d:16:69:9a:6e:8a:6f:eb:66:a4:
         25:5c:17:f1:16:80:08:ae:3f:e2:ef:24:29:e0:96:2d:f0:87:
         b6:c3:18:99:20:3d:7c:73:43:6d:13:f7:c4:25:e1:f2:5e:50:
         01:2a:e0:d1:a9:2d:41:bd:eb:d7:22:22:33:a1:c2:bb:24:f0:
         13:4e:13:dc:6b:a0:7e:4f:8c:27:3e:b6:5b:34:54:95:4d:c3:
         33:e4:6c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 02:44:19 2025 by rpki-client