Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/323830343a3163383a3a2f33322d3438203d3e203533313834.roa
File:                     323830343a3163383a3a2f33322d3438203d3e203533313834.roa (raw, json)
Hash identifier:          9ksjox+uqDAT8STUZKb+WEHpGu6I+0FuOt+r+vlMssE=
Subject key identifier:   52:52:C2:B7:5F:AB:45:C8:2C:58:BE:6D:AE:86:21:89:A4:C9:54:F4
Certificate issuer:       /CN=416296490F899DB0183C491C69520DEECF540394
Certificate serial:       209D6449C013557D80C6C8DF0B8EF2CFF5773239
Authority key identifier: 41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/323830343a3163383a3a2f33322d3438203d3e203533313834.roa
Signing time:             Fri 03 May 2024 21:27:17 +0000
ROA not before:           Fri 03 May 2024 21:22:17 +0000
ROA not after:            Fri 02 May 2025 21:27:17 +0000
asID:                     53184
IP address blocks:        2804:1c8::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:9d:64:49:c0:13:55:7d:80:c6:c8:df:0b:8e:f2:cf:f5:77:32:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=416296490F899DB0183C491C69520DEECF540394
        Validity
            Not Before: May  3 21:22:17 2024 GMT
            Not After : May  2 21:27:17 2025 GMT
        Subject: CN=5252C2B75FAB45C82C58BE6DAE862189A4C954F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f5:30:92:f9:a6:bb:50:ce:de:e0:78:a2:ef:
                    db:37:61:91:76:e6:ed:73:bd:3f:d8:cb:98:0b:41:
                    66:49:1f:28:ce:db:38:de:25:06:35:72:57:2c:28:
                    2b:ef:0b:d4:22:9b:04:ad:56:58:8c:26:3a:83:33:
                    e0:ae:b9:35:cd:cb:d1:14:ce:ec:8f:c3:c7:11:83:
                    76:55:a5:b4:41:95:2e:e1:97:39:8d:29:2b:91:51:
                    c8:13:7b:90:11:91:42:76:b0:09:23:16:0e:5b:72:
                    2e:db:79:96:73:63:43:e5:b8:a9:66:f0:26:6d:31:
                    6f:40:c9:de:bf:3e:14:1b:28:53:99:29:3c:38:09:
                    2c:9e:18:4d:ba:92:89:ea:de:b5:95:92:ba:c4:62:
                    b2:c9:c0:4b:89:37:74:15:3e:d0:22:a4:45:7a:39:
                    fc:b5:43:76:a2:13:16:fe:1b:ab:cf:5a:b0:e6:78:
                    30:8b:81:d1:4a:c2:b8:6a:77:6f:0f:08:29:47:9c:
                    6a:e9:ee:18:43:12:b3:84:fe:af:5b:75:ec:60:70:
                    e0:60:5f:77:6f:41:3d:2e:d2:a8:48:22:c1:26:ae:
                    6d:31:c8:1e:f0:80:49:86:a7:28:e0:80:1e:dc:c4:
                    44:ce:45:cb:69:a2:97:3a:36:fc:89:bc:09:e1:15:
                    e8:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:52:C2:B7:5F:AB:45:C8:2C:58:BE:6D:AE:86:21:89:A4:C9:54:F4
            X509v3 Authority Key Identifier:
                keyid:41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/416296490F899DB0183C491C69520DEECF540394.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/323830343a3163383a3a2f33322d3438203d3e203533313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:26:4a:2a:85:25:d6:6d:5e:13:59:26:44:f8:10:12:a8:4d:
         a8:e0:3b:e1:15:8b:03:a2:ca:17:7e:ea:c4:91:74:3a:8a:14:
         b2:9a:f6:a0:21:af:65:3b:62:ba:af:c2:4c:b5:39:2b:6e:7d:
         84:20:1a:c7:7e:35:4c:44:48:49:68:55:a6:b6:3f:fd:91:11:
         27:3d:52:16:7c:2b:36:4c:0b:75:59:53:f6:55:bc:9d:0f:ab:
         58:19:8c:16:12:f5:ba:df:57:b7:de:09:6e:42:4f:73:d7:9d:
         11:6e:e1:70:43:80:a9:12:5a:4f:64:b2:31:6e:15:e6:ba:ff:
         58:f8:3c:f4:33:66:d8:55:3f:a4:12:0e:36:30:6f:21:e8:77:
         11:32:bc:6e:95:4a:29:40:40:03:1b:cb:c0:23:dc:d9:7e:af:
         3b:6c:a1:64:c3:03:4b:17:20:35:54:97:60:57:36:1c:fa:3e:
         8d:ff:c6:f7:1c:26:a2:a8:91:d0:a2:af:f1:e9:c4:38:5f:3a:
         84:44:bb:7a:98:c5:d4:09:18:55:f6:23:9e:6e:52:17:51:c1:
         5a:bc:b1:f0:c0:d1:d8:b3:44:fb:02:35:04:62:8e:6a:43:04:
         51:1d:48:3b:9d:50:41:9f:b3:8c:46:51:cb:99:72:8b:18:57:
         2e:e2:ce:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 03:33:11 2025 by rpki-client