Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/323830343a313765303a3a2f33322d313238203d3e20323633323536.roa
File:                     323830343a313765303a3a2f33322d313238203d3e20323633323536.roa (raw, json)
Hash identifier:          ymapjRSxS+OMEbfGoPOXbkUQcz52HjgFg66qy2wXrnU=
Subject key identifier:   21:4D:42:31:74:76:7D:B3:15:FB:22:C4:FE:09:79:12:5D:C7:A5:65
Certificate issuer:       /CN=4AC63499535F096FC094DF4DF02AC3681513D3B2
Certificate serial:       589DD341726EFA6C6844C7F34989547BA43FAF73
Authority key identifier: 4A:C6:34:99:53:5F:09:6F:C0:94:DF:4D:F0:2A:C3:68:15:13:D3:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AC63499535F096FC094DF4DF02AC3681513D3B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/323830343a313765303a3a2f33322d313238203d3e20323633323536.roa
Signing time:             Mon 09 Dec 2024 19:59:11 +0000
ROA not before:           Mon 09 Dec 2024 19:54:11 +0000
ROA not after:            Mon 08 Dec 2025 19:59:11 +0000
asID:                     263256
IP address blocks:        2804:17e0::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:9d:d3:41:72:6e:fa:6c:68:44:c7:f3:49:89:54:7b:a4:3f:af:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AC63499535F096FC094DF4DF02AC3681513D3B2
        Validity
            Not Before: Dec  9 19:54:11 2024 GMT
            Not After : Dec  8 19:59:11 2025 GMT
        Subject: CN=214D423174767DB315FB22C4FE0979125DC7A565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:80:30:e4:df:46:29:88:1d:cb:47:c0:a4:d9:
                    15:9c:ff:a4:ab:6e:e4:3e:4a:55:b2:64:25:05:e2:
                    23:44:51:d1:56:0e:0d:53:b8:87:3e:49:cd:d6:ca:
                    e1:c3:5f:e9:8c:c1:bb:dd:de:a1:88:3d:be:d7:e4:
                    bd:31:4f:65:18:5e:f5:50:c5:e7:30:4c:6b:fd:d4:
                    2f:08:60:e5:2b:08:49:8e:ce:81:54:32:bc:66:1c:
                    25:ee:7a:32:ae:c6:8d:28:5f:f8:a1:e8:03:df:8b:
                    63:31:39:79:ff:6c:cf:b3:0e:91:84:41:54:66:02:
                    1a:04:ba:f2:13:78:7a:43:e7:7b:1f:e6:30:29:a2:
                    66:12:59:89:c8:6e:c7:b1:72:76:60:87:19:0c:cf:
                    26:8d:80:17:87:ba:ad:4f:2e:3b:cb:32:90:4d:e9:
                    3e:2e:53:c6:a7:3b:72:a9:fa:5b:2b:0a:0d:04:5e:
                    0e:b7:fe:75:15:4b:49:d5:b9:e2:9f:da:59:b9:6f:
                    f2:1f:18:a7:76:f5:ea:87:e2:3f:b7:a7:cf:63:31:
                    99:55:97:e6:d1:ce:70:b8:87:54:59:2b:96:fc:71:
                    1f:dd:d4:ad:a6:4a:e2:98:96:05:f6:67:ea:f2:9e:
                    c4:a2:20:3b:17:fd:e1:6d:fe:c6:37:db:5c:5b:2d:
                    7f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:4D:42:31:74:76:7D:B3:15:FB:22:C4:FE:09:79:12:5D:C7:A5:65
            X509v3 Authority Key Identifier:
                keyid:4A:C6:34:99:53:5F:09:6F:C0:94:DF:4D:F0:2A:C3:68:15:13:D3:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/4AC63499535F096FC094DF4DF02AC3681513D3B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AC63499535F096FC094DF4DF02AC3681513D3B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/323830343a313765303a3a2f33322d313238203d3e20323633323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:17e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:53:27:ed:a9:68:79:bf:de:5a:af:11:51:92:68:db:e7:e2:
         10:37:c0:8f:8d:cb:1b:b4:a2:15:ad:15:05:ac:a8:e7:f3:8b:
         57:e5:ef:7f:53:03:0b:ee:cf:03:cc:bc:44:b5:91:44:23:02:
         0b:02:3c:46:1b:c0:21:a6:02:b5:76:3f:0e:a3:0a:1e:5e:a4:
         f0:5e:b2:a9:56:59:07:ea:89:28:c9:d0:d1:3f:97:0d:00:cd:
         bc:28:5e:29:c4:1b:df:71:19:e5:e3:cf:d1:53:0e:4a:a4:a0:
         ca:71:7e:74:36:02:9c:e8:35:39:30:f2:8f:0f:6f:f2:c0:5f:
         0a:32:4f:2c:63:b2:29:fd:5c:25:9f:6f:33:b7:e9:23:b9:28:
         06:32:61:46:f1:61:17:8d:3b:c8:4c:d5:6b:b9:7c:3c:6a:18:
         e6:f7:e5:ca:b3:b2:b8:9f:e6:9a:8d:3d:e7:cd:46:82:5e:7b:
         3a:9e:6c:c1:90:04:54:49:c4:e3:00:32:55:ca:73:0e:76:f4:
         78:06:ec:a2:6e:44:e1:2d:e9:57:d7:22:fb:5b:12:c0:bc:4b:
         02:f3:39:5d:b1:f0:2f:13:87:cf:25:a3:9b:e3:00:b5:8f:d0:
         5d:f9:02:8e:25:17:a0:7c:d7:9a:70:ee:3f:eb:86:52:e1:5b:
         ab:81:94:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:05:28 2025 by rpki-client