Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/QjsjPgEf3CCSRqtyRSYaAwhGnJd2ujc2jcUAhYViaug/0/323830343a326539303a3a2f33322d3438203d3e203532353238.roa
File:                     323830343a326539303a3a2f33322d3438203d3e203532353238.roa (raw, json)
Hash identifier:          mXhOLX0yhogXGuM8uH3s2jFEmJK2lIuQBszQklZ/s4s=
Subject key identifier:   7D:A4:C4:1A:BE:DE:BE:76:4D:66:AB:A5:52:3B:61:B0:69:2F:54:C3
Certificate issuer:       /CN=F2D029F4191C8EF817C89954B6B967C60EAE2451
Certificate serial:       32A18C351F72DBBAA9121A2D5602527FCFDE0037
Authority key identifier: F2:D0:29:F4:19:1C:8E:F8:17:C8:99:54:B6:B9:67:C6:0E:AE:24:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2D029F4191C8EF817C89954B6B967C60EAE2451.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/QjsjPgEf3CCSRqtyRSYaAwhGnJd2ujc2jcUAhYViaug/0/323830343a326539303a3a2f33322d3438203d3e203532353238.roa
Signing time:             Wed 19 Feb 2025 11:34:11 +0000
ROA not before:           Wed 19 Feb 2025 11:29:11 +0000
ROA not after:            Wed 18 Feb 2026 11:34:11 +0000
asID:                     52528
IP address blocks:        2804:2e90::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:a1:8c:35:1f:72:db:ba:a9:12:1a:2d:56:02:52:7f:cf:de:00:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2D029F4191C8EF817C89954B6B967C60EAE2451
        Validity
            Not Before: Feb 19 11:29:11 2025 GMT
            Not After : Feb 18 11:34:11 2026 GMT
        Subject: CN=7DA4C41ABEDEBE764D66ABA5523B61B0692F54C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9b:3a:a5:07:a1:6d:8f:65:cb:e9:84:52:15:
                    1a:c0:13:96:f2:aa:76:4b:6c:2e:0e:63:3a:14:af:
                    ec:7f:94:44:b3:5d:35:e6:21:e8:ee:be:49:c4:2d:
                    41:fe:61:f8:d2:fd:ba:65:aa:45:08:13:ff:c1:85:
                    35:3d:79:69:23:33:c4:a9:7f:f5:bb:51:03:13:15:
                    88:51:35:a0:1e:15:05:e7:7c:43:35:ad:e2:83:52:
                    8e:44:3d:a6:20:ca:41:77:c9:32:7c:b2:7b:bb:cb:
                    8f:3f:0c:90:25:13:12:a6:60:4d:ea:48:47:6e:7a:
                    c4:66:1d:fa:61:a3:be:b2:55:5a:94:ce:d3:d4:cd:
                    57:d0:24:30:9f:6f:6e:5f:2e:4b:e8:b5:e1:6b:2a:
                    34:4a:88:c8:23:db:2c:ff:9f:d4:94:f6:1c:95:0d:
                    71:74:80:4b:47:83:3b:9d:cf:38:db:05:df:10:08:
                    4a:ba:d1:3c:9a:c6:e8:31:2f:cf:c3:32:05:2e:c9:
                    03:93:08:e8:f5:08:2b:f9:8e:3a:e9:35:6d:45:1a:
                    78:8f:e5:2f:e3:89:a6:ba:d6:a1:9d:32:9d:81:16:
                    be:8f:b3:ab:aa:17:b6:74:ec:3f:ce:9c:e1:1e:b3:
                    7f:ef:26:ab:a2:4b:1a:f6:ed:43:ef:72:89:a7:21:
                    b8:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:A4:C4:1A:BE:DE:BE:76:4D:66:AB:A5:52:3B:61:B0:69:2F:54:C3
            X509v3 Authority Key Identifier:
                keyid:F2:D0:29:F4:19:1C:8E:F8:17:C8:99:54:B6:B9:67:C6:0E:AE:24:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/QjsjPgEf3CCSRqtyRSYaAwhGnJd2ujc2jcUAhYViaug/0/F2D029F4191C8EF817C89954B6B967C60EAE2451.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2D029F4191C8EF817C89954B6B967C60EAE2451.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/QjsjPgEf3CCSRqtyRSYaAwhGnJd2ujc2jcUAhYViaug/0/323830343a326539303a3a2f33322d3438203d3e203532353238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e90::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:b8:a8:2b:e1:06:a5:82:45:a2:f7:1f:9b:73:6d:fc:fe:db:
         6c:1c:53:1d:1d:26:bc:d4:f1:3f:cc:31:ae:9c:13:2e:dc:99:
         b0:82:22:c6:ab:ea:ff:91:ff:02:77:e8:6d:8b:cb:a0:f2:5f:
         1a:d9:7e:82:4d:d3:1e:9c:13:84:0b:5b:d9:02:0c:e2:17:37:
         f0:c7:d5:5e:7b:aa:67:e4:06:d6:39:c4:25:88:80:fe:f2:ad:
         9b:99:ac:a4:50:84:9e:51:5f:d2:a2:2c:cb:15:4c:35:3d:76:
         fb:69:1a:ad:29:fc:cd:1a:4a:31:76:2b:d0:9d:8f:44:2f:2d:
         4b:e0:14:8b:08:00:6a:f2:0f:32:dd:e4:7d:37:9a:c4:21:fd:
         1e:94:f6:12:60:fc:18:6a:1c:88:b6:e5:51:11:78:ab:cf:a5:
         dd:86:1d:aa:ab:64:47:25:e6:b6:49:e9:98:fb:a3:26:a9:dd:
         0f:b3:83:64:17:11:c8:a2:64:ce:ba:97:d3:3e:54:9c:4c:b7:
         96:b2:48:6f:93:31:f5:45:77:37:a9:bf:63:f3:4b:85:87:81:
         3d:a8:cd:bc:4c:23:88:40:43:6f:e3:21:01:0c:3f:ff:7b:84:
         26:99:23:4f:92:f7:8e:7f:ba:92:dc:72:e2:68:c1:3e:6f:d1:
         76:13:9e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:42:53 2025 by rpki-client