Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/323830343a38383a3a2f33362d3336203d3e203238313335.roa
File:                     323830343a38383a3a2f33362d3336203d3e203238313335.roa (raw, json)
Hash identifier:          oEZJjsp5i/Vyh5Z0SKPMp9RczC1QhaL8Bb20G+sLsaw=
Subject key identifier:   8D:DD:A9:A7:AA:36:63:4E:DA:B9:6B:65:48:7D:1B:4C:CB:BE:E9:FE
Certificate issuer:       /CN=106C0018EAEC97B226036E9F42E3D4795FCBC714
Certificate serial:       0B40F0A06C2073497C2728DEF3D1E63A1CB68BE0
Authority key identifier: 10:6C:00:18:EA:EC:97:B2:26:03:6E:9F:42:E3:D4:79:5F:CB:C7:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/323830343a38383a3a2f33362d3336203d3e203238313335.roa
Signing time:             Wed 13 Mar 2024 12:03:17 +0000
ROA not before:           Wed 13 Mar 2024 11:58:17 +0000
ROA not after:            Wed 12 Mar 2025 12:03:17 +0000
asID:                     28135
IP address blocks:        2804:88::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:40:f0:a0:6c:20:73:49:7c:27:28:de:f3:d1:e6:3a:1c:b6:8b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=106C0018EAEC97B226036E9F42E3D4795FCBC714
        Validity
            Not Before: Mar 13 11:58:17 2024 GMT
            Not After : Mar 12 12:03:17 2025 GMT
        Subject: CN=8DDDA9A7AA36634EDAB96B65487D1B4CCBBEE9FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:52:23:5f:1a:90:b2:26:75:be:35:e1:d3:f0:
                    e9:18:3f:34:57:d5:ae:7e:30:cd:36:b8:68:02:90:
                    8f:fc:a6:2b:19:c0:b7:f3:a5:b4:d7:41:61:00:bc:
                    c7:20:92:95:2f:56:23:d5:6f:81:3e:08:47:56:38:
                    32:63:8d:02:51:c0:01:7f:0f:84:06:c3:ed:50:3e:
                    e7:c2:31:84:16:1a:06:fc:cc:32:93:71:5e:6d:e6:
                    00:9f:a2:f2:a8:24:d2:f8:49:6d:52:16:b5:a2:c6:
                    b9:7a:50:14:88:36:7f:f2:c0:f8:b4:4d:3c:33:88:
                    3f:b5:c6:48:9d:20:ae:c2:3c:ce:46:5b:47:26:a1:
                    8b:1d:e3:f1:00:88:69:8f:cb:c4:60:1b:95:8c:3b:
                    57:26:29:b9:33:86:96:db:47:c4:39:e9:1a:ef:a7:
                    52:80:97:90:49:2a:81:b7:5e:6e:5c:a1:c0:60:b5:
                    ee:c0:d5:28:ed:d4:e6:3e:72:0b:fd:24:2c:ef:fd:
                    78:e3:8d:d6:b4:7b:ab:2a:08:2c:e7:26:96:36:a3:
                    4c:13:8c:be:58:97:2a:2f:0e:0e:e5:65:b3:a3:fe:
                    8c:67:0d:74:67:94:96:27:14:af:31:59:47:c6:7a:
                    4f:0c:c5:da:80:e3:99:2e:88:17:bf:b2:a7:e4:ce:
                    9b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:DD:A9:A7:AA:36:63:4E:DA:B9:6B:65:48:7D:1B:4C:CB:BE:E9:FE
            X509v3 Authority Key Identifier:
                keyid:10:6C:00:18:EA:EC:97:B2:26:03:6E:9F:42:E3:D4:79:5F:CB:C7:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/323830343a38383a3a2f33362d3336203d3e203238313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:88::/36

    Signature Algorithm: sha256WithRSAEncryption
         78:ce:7a:6b:48:c9:54:78:60:db:5e:80:87:42:e4:49:9e:2e:
         86:ea:3f:79:7d:38:ec:8b:dc:10:4d:4d:2e:c2:2d:c3:46:aa:
         8c:16:ce:d0:ae:79:33:8a:fd:7d:eb:58:47:22:48:54:48:69:
         26:3b:93:d6:67:7c:20:61:c5:91:67:fc:7a:f9:a4:a6:fd:c0:
         f9:ac:39:4e:d2:cc:02:d1:5f:7c:0c:e9:e2:26:d6:0f:64:7c:
         6f:ef:ef:3f:37:49:69:da:8e:8f:ce:82:a7:0b:3f:18:c8:e5:
         84:77:68:a9:4b:49:c7:a1:68:7c:cf:74:bb:fb:bf:90:5a:86:
         64:1f:20:c0:0e:30:5c:5e:9e:0f:62:44:8e:e1:78:3a:62:d9:
         05:f5:96:9d:65:67:aa:18:fe:5d:7b:dc:64:13:c9:9b:6c:f2:
         1f:9b:51:52:95:ff:66:28:11:15:68:c1:dc:86:88:f1:6b:94:
         8d:d7:e3:7d:36:a2:fe:7a:1f:79:36:fe:da:c9:72:f4:99:40:
         56:1c:68:e6:01:2f:d4:38:f7:fb:84:9b:7c:79:f3:17:21:78:
         5f:50:99:3f:32:af:78:06:ea:42:d3:f2:59:0c:3e:80:ac:d2:
         cd:1f:06:d0:04:6f:16:f8:6f:a9:2e:99:ea:1b:8e:62:1c:39:
         a4:ed:82:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:43 2025 by rpki-client