Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/323830343a373466343a643030363a3a2f34382d3438203d3e20323731303134.roa
File:                     323830343a373466343a643030363a3a2f34382d3438203d3e20323731303134.roa (raw, json)
Hash identifier:          MOVgXavdgmNO7DJEwRMle51Phgq5tJo0GihWmkSHCEs=
Subject key identifier:   1E:35:2F:3C:7E:92:FC:5F:67:93:23:2D:8F:4F:B2:30:D2:69:78:E0
Certificate issuer:       /CN=24CAF4C14D797EE171E6A6C5C11988AEA84BC352
Certificate serial:       4F0428ABC2EB92ACB6429B354FE34B59FC8482F4
Authority key identifier: 24:CA:F4:C1:4D:79:7E:E1:71:E6:A6:C5:C1:19:88:AE:A8:4B:C3:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/323830343a373466343a643030363a3a2f34382d3438203d3e20323731303134.roa
Signing time:             Thu 08 Feb 2024 14:05:56 +0000
ROA not before:           Thu 08 Feb 2024 14:00:56 +0000
ROA not after:            Thu 06 Feb 2025 14:05:56 +0000
asID:                     271014
IP address blocks:        2804:74f4:d006::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:04:28:ab:c2:eb:92:ac:b6:42:9b:35:4f:e3:4b:59:fc:84:82:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24CAF4C14D797EE171E6A6C5C11988AEA84BC352
        Validity
            Not Before: Feb  8 14:00:56 2024 GMT
            Not After : Feb  6 14:05:56 2025 GMT
        Subject: CN=1E352F3C7E92FC5F6793232D8F4FB230D26978E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:33:f0:04:7f:43:55:55:66:b1:a5:1a:71:c8:
                    dc:66:69:94:04:27:f1:1e:7f:76:82:a9:b7:60:4c:
                    63:70:75:91:bb:e4:aa:df:63:84:5c:73:ff:a6:f2:
                    44:e5:ae:fe:5c:10:ee:db:4c:7d:9f:f6:df:0d:59:
                    8f:bd:c8:55:50:c3:3b:67:6e:00:4a:cb:c0:98:85:
                    1a:f0:19:dd:85:7b:52:ff:5e:b8:6d:69:86:d2:1d:
                    97:05:58:1e:54:84:6c:2f:f3:42:cd:79:ec:d1:2b:
                    68:f8:e4:53:d6:b1:de:6c:96:f9:9a:0d:25:49:f8:
                    b0:bb:05:20:32:bd:5e:38:7a:df:5f:ef:56:9b:10:
                    d6:d7:84:dc:33:8a:ff:52:ea:e9:ee:44:c4:10:7f:
                    f1:be:53:20:a6:74:5c:71:33:18:30:06:6a:1c:b9:
                    ed:92:13:84:72:1e:46:92:a3:29:7c:44:b6:9a:5e:
                    b0:31:3e:b9:e0:d1:8f:f5:ec:55:cd:31:0d:98:bf:
                    3e:7f:97:dc:09:61:48:b3:ba:f7:39:51:9e:74:b5:
                    81:8c:23:87:83:04:8e:19:9d:d7:a2:43:77:db:4a:
                    37:26:40:29:79:89:6c:c8:b6:36:87:ea:1e:a8:2b:
                    16:9a:3d:72:91:da:5e:b5:59:76:50:d8:1c:a8:09:
                    74:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:35:2F:3C:7E:92:FC:5F:67:93:23:2D:8F:4F:B2:30:D2:69:78:E0
            X509v3 Authority Key Identifier:
                keyid:24:CA:F4:C1:4D:79:7E:E1:71:E6:A6:C5:C1:19:88:AE:A8:4B:C3:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/323830343a373466343a643030363a3a2f34382d3438203d3e20323731303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74f4:d006::/48

    Signature Algorithm: sha256WithRSAEncryption
         ac:e7:b2:49:7e:a6:62:35:03:fd:fc:c1:93:51:ad:05:b2:49:
         0b:f3:82:55:09:ab:2e:a9:83:bd:90:5a:e1:0a:f4:42:19:47:
         68:3f:a1:49:06:e7:e7:ac:ec:b3:aa:09:7e:20:53:73:3d:fa:
         43:f7:30:5e:0a:a5:ad:57:05:1b:cb:63:f7:90:5a:ed:bc:6c:
         c1:d8:4c:68:e3:4c:72:6b:2b:84:bd:a0:f5:90:8b:0c:1a:47:
         c1:b1:cc:1d:43:18:ce:f2:92:ab:f6:fe:77:40:d2:14:37:80:
         6a:f4:10:40:b5:33:33:36:f1:25:4e:61:ee:5f:7f:bf:82:5f:
         34:c1:17:be:49:6a:86:e9:2a:32:22:3f:19:d4:05:a8:b5:86:
         f2:d9:87:c7:ae:2e:6a:87:0f:06:e5:eb:40:32:20:8d:21:45:
         f2:e3:93:70:24:68:9c:11:83:d8:1f:1d:03:65:a4:e6:f6:38:
         12:ea:b1:c2:17:8e:d9:6f:5a:d6:b8:1b:9d:8a:53:bb:1a:c3:
         01:50:fd:cc:19:95:7c:dd:fc:a3:d0:3d:4f:76:d6:0e:fc:da:
         72:5a:f8:79:08:1b:05:9b:70:d4:76:54:76:32:80:cc:aa:cc:
         5a:3e:c6:15:99:9c:4e:ba:a9:61:00:5d:cd:07:4e:85:74:44:
         cf:79:d7:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 14:25:19 2025 by rpki-client