Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/323830343a333833633a3a2f33322d3332203d3e203532363031.roa
File:                     323830343a333833633a3a2f33322d3332203d3e203532363031.roa (raw, json)
Hash identifier:          xl+GyFIowS9YLo5tmwa7g62ealsC8YKNaYf9oPSEhAg=
Subject key identifier:   63:2E:6B:51:A2:9C:97:1F:B0:D0:53:1C:2B:A0:06:8E:C2:1A:87:B2
Certificate issuer:       /CN=96F3E99149446CE908CDA1678FD9180CD4020D16
Certificate serial:       51A9B2492FB59447CCB7A31C314F5425570DFAAD
Authority key identifier: 96:F3:E9:91:49:44:6C:E9:08:CD:A1:67:8F:D9:18:0C:D4:02:0D:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96F3E99149446CE908CDA1678FD9180CD4020D16.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/323830343a333833633a3a2f33322d3332203d3e203532363031.roa
Signing time:             Tue 03 Dec 2024 18:42:37 +0000
ROA not before:           Tue 03 Dec 2024 18:37:37 +0000
ROA not after:            Tue 02 Dec 2025 18:42:37 +0000
asID:                     52601
IP address blocks:        2804:383c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:a9:b2:49:2f:b5:94:47:cc:b7:a3:1c:31:4f:54:25:57:0d:fa:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F3E99149446CE908CDA1678FD9180CD4020D16
        Validity
            Not Before: Dec  3 18:37:37 2024 GMT
            Not After : Dec  2 18:42:37 2025 GMT
        Subject: CN=632E6B51A29C971FB0D0531C2BA0068EC21A87B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:29:a4:cf:5d:df:6b:9f:57:b5:50:6a:c7:93:
                    21:b1:c2:fa:76:27:6f:85:0f:46:76:17:10:89:a1:
                    53:89:f2:58:0b:00:d5:58:6f:d7:6f:03:17:a6:9a:
                    13:3c:71:27:12:eb:e7:9f:8d:33:a7:2a:bc:9f:f5:
                    15:92:52:0f:50:87:f7:98:86:e5:14:ea:08:c8:d2:
                    16:78:d6:67:a2:43:09:64:91:f6:19:da:e8:8a:bb:
                    2c:cb:56:68:9e:ee:7e:83:f1:d9:16:77:fb:5b:92:
                    71:7f:ff:64:b5:e1:31:d9:40:10:ac:3a:c9:81:ab:
                    67:b0:3c:eb:02:1f:31:ea:18:f9:40:f8:03:ad:f4:
                    98:4a:84:20:60:a3:ab:99:2f:fa:a1:c3:c4:db:9e:
                    8d:89:74:56:e1:ad:be:49:89:0e:92:45:e1:8a:88:
                    45:d6:20:0a:ae:6c:41:01:4d:ba:43:57:67:da:58:
                    2d:df:3b:92:5f:47:a3:b2:00:93:4f:f9:f9:4e:79:
                    e2:1b:81:b8:1d:3b:08:04:a3:97:51:cf:72:2e:ba:
                    a1:0b:04:52:97:b9:95:7b:00:13:84:94:86:b7:d9:
                    71:4d:86:10:bb:01:f6:24:5c:59:fe:b7:a2:68:c8:
                    bd:bd:f3:2e:53:c3:57:66:0e:6e:42:e8:bf:06:a9:
                    4c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:2E:6B:51:A2:9C:97:1F:B0:D0:53:1C:2B:A0:06:8E:C2:1A:87:B2
            X509v3 Authority Key Identifier:
                keyid:96:F3:E9:91:49:44:6C:E9:08:CD:A1:67:8F:D9:18:0C:D4:02:0D:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/96F3E99149446CE908CDA1678FD9180CD4020D16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96F3E99149446CE908CDA1678FD9180CD4020D16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/323830343a333833633a3a2f33322d3332203d3e203532363031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:383c::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:54:7e:bd:2f:1d:93:7c:f8:27:40:43:94:3a:34:58:31:4f:
         8d:92:c7:c2:90:16:d2:68:66:f3:e3:ba:dd:7e:e6:7e:d7:09:
         fa:c7:60:9b:a2:6e:42:14:0f:3c:a5:43:c7:ac:44:f1:17:14:
         f7:86:bc:eb:86:cf:4c:a9:8b:8c:de:4b:2c:c6:1f:01:f6:24:
         8e:d5:04:13:a6:7b:63:45:0e:a0:ac:a1:49:7e:89:5d:d7:36:
         3b:d3:81:20:0b:11:1f:33:bd:36:54:d7:23:97:1b:0b:7b:c7:
         44:77:56:a0:33:e7:3a:f0:5b:2b:91:ce:7e:62:ea:70:28:49:
         4b:fe:bc:31:66:54:5e:ae:28:4f:83:ea:35:23:0e:bd:74:0d:
         b1:1b:ec:86:32:7d:03:7f:5e:c9:66:ba:7e:cd:10:58:70:6f:
         20:67:51:46:44:7a:6e:68:47:31:0f:58:a2:4f:d3:fa:22:76:
         d0:15:0b:73:e2:70:0d:37:aa:d8:42:f7:74:cc:4d:d8:4e:4a:
         ca:f7:71:d6:08:a3:f5:be:b2:08:75:1a:f6:34:c3:df:db:b0:
         e5:b9:02:c6:1d:04:22:bc:7c:58:81:88:c6:7d:6c:c0:e7:30:
         03:0a:98:38:be:7a:c4:e5:85:b8:e7:2e:ab:e4:d0:8f:6b:ad:
         5b:a3:0e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 15:06:22 2025 by rpki-client