Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/323830343a373466343a343030303a3a2f33362d3336203d3e20323731303134.roa
File:                     323830343a373466343a343030303a3a2f33362d3336203d3e20323731303134.roa (raw, json)
Hash identifier:          +bMiRj9jPmrEIE5tpPZzYNL81uqH6fddoHDbsx6e1a4=
Subject key identifier:   C2:74:69:6A:20:90:67:2B:74:C0:2D:AB:F0:1F:00:F6:92:EF:F9:8F
Certificate issuer:       /CN=24CAF4C14D797EE171E6A6C5C11988AEA84BC352
Certificate serial:       2441917D8047449653CB7BD3890A45F2E3108B93
Authority key identifier: 24:CA:F4:C1:4D:79:7E:E1:71:E6:A6:C5:C1:19:88:AE:A8:4B:C3:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/323830343a373466343a343030303a3a2f33362d3336203d3e20323731303134.roa
Signing time:             Thu 08 Feb 2024 14:05:57 +0000
ROA not before:           Thu 08 Feb 2024 14:00:57 +0000
ROA not after:            Thu 06 Feb 2025 14:05:57 +0000
asID:                     271014
IP address blocks:        2804:74f4:4000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:41:91:7d:80:47:44:96:53:cb:7b:d3:89:0a:45:f2:e3:10:8b:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24CAF4C14D797EE171E6A6C5C11988AEA84BC352
        Validity
            Not Before: Feb  8 14:00:57 2024 GMT
            Not After : Feb  6 14:05:57 2025 GMT
        Subject: CN=C274696A2090672B74C02DABF01F00F692EFF98F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b4:77:1f:f8:ae:a0:a6:02:d4:6f:7b:78:00:
                    bb:dd:a8:18:16:71:1a:a8:be:e3:70:7a:60:f4:f1:
                    11:70:ae:c8:b4:0b:73:02:0a:4c:ad:b9:5b:69:b4:
                    22:ff:d9:58:c7:ba:cd:5a:c8:86:80:69:4f:ca:96:
                    06:65:75:e1:a8:42:39:49:d1:cd:ae:9c:e7:03:e6:
                    be:b6:cd:02:d5:11:5a:c4:de:f8:66:90:14:01:22:
                    06:9d:56:09:fd:61:31:9d:60:83:a7:ac:60:e1:a7:
                    aa:1a:21:38:3d:75:95:ea:b0:79:49:e9:bd:c5:56:
                    76:1c:7d:85:7e:d9:17:7d:2f:42:92:f1:15:76:93:
                    01:c4:39:e9:a6:94:7c:c7:f6:02:7a:73:a2:ad:65:
                    b4:1a:91:9f:e8:a7:d9:15:b4:92:b3:9d:9f:96:25:
                    0e:dc:a5:a1:6d:b7:b6:3f:8b:c6:a7:61:52:d5:be:
                    05:33:cc:61:b8:f1:d3:d0:33:5f:70:d0:ca:76:da:
                    bc:42:8c:13:29:f6:e1:e0:29:ca:6c:bc:31:57:d7:
                    5f:c4:be:cd:dc:42:66:9a:b7:b4:32:fd:84:7b:a6:
                    3b:46:6b:9e:28:b0:14:eb:be:06:5e:9f:3c:36:22:
                    92:62:24:f8:a8:78:a2:17:2b:b2:2c:6e:48:73:1b:
                    a8:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:74:69:6A:20:90:67:2B:74:C0:2D:AB:F0:1F:00:F6:92:EF:F9:8F
            X509v3 Authority Key Identifier:
                keyid:24:CA:F4:C1:4D:79:7E:E1:71:E6:A6:C5:C1:19:88:AE:A8:4B:C3:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/323830343a373466343a343030303a3a2f33362d3336203d3e20323731303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74f4:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         54:c9:fc:4a:cb:e8:79:3a:1a:38:61:05:80:12:36:0a:8f:9d:
         d5:8c:bf:02:95:a0:31:99:47:d2:ee:26:5d:a5:60:ac:16:25:
         62:f5:07:de:25:a2:d6:46:33:98:51:8f:e5:8e:b0:a0:89:09:
         38:76:69:3e:a3:ba:f1:cf:42:ab:85:fa:ad:59:00:da:72:e2:
         8e:f4:08:f9:52:46:5e:f8:60:7d:50:3a:36:43:ec:53:ae:4e:
         ae:8e:b4:ce:bd:d7:5e:77:a9:6a:57:a9:5f:bb:55:1f:07:39:
         f7:3a:b6:e5:fd:d0:a0:91:3f:e0:81:43:f5:ec:4b:35:8e:74:
         e4:30:7e:17:54:db:32:21:1b:5a:1b:f1:81:51:99:85:21:3d:
         92:5d:82:e6:54:bf:ca:2f:aa:ed:81:5e:fb:85:41:10:68:6c:
         31:ff:8c:a8:b8:c0:47:76:2a:43:5a:e0:68:0a:ef:12:cd:fa:
         c0:b0:52:ee:07:9e:ff:26:39:fc:18:b7:15:81:2d:4e:63:61:
         d6:c7:00:5d:81:74:31:12:9f:17:9a:26:6d:7b:17:48:5b:4a:
         28:d6:b5:55:ca:ef:b1:f7:3e:c2:32:50:d4:da:b0:48:9f:27:
         6b:08:d4:cb:c0:a2:94:06:af:98:47:c6:79:16:9a:db:a3:8e:
         eb:a0:d9:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 14:24:42 2025 by rpki-client