Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/323830343a313633383a653035373a383030303a3a2f34392d3439203d3e20323633323736.roa
File:                     323830343a313633383a653035373a383030303a3a2f34392d3439203d3e20323633323736.roa (raw, json)
Hash identifier:          65WTJCVV3cEnvjA/208tu606X8rJ1/sDOnxeIuXFqds=
Subject key identifier:   BB:63:F9:E2:9E:D3:48:FE:A8:2A:0F:57:52:37:98:46:C5:B7:BC:C7
Certificate issuer:       /CN=187B3B176F0808984D1B5075CAF3CA9D636EBBD6
Certificate serial:       22A679E067D01B2ECFEC3BBFE1373F39B5FCA021
Authority key identifier: 18:7B:3B:17:6F:08:08:98:4D:1B:50:75:CA:F3:CA:9D:63:6E:BB:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/187B3B176F0808984D1B5075CAF3CA9D636EBBD6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/323830343a313633383a653035373a383030303a3a2f34392d3439203d3e20323633323736.roa
Signing time:             Wed 01 Nov 2023 12:30:21 +0000
ROA not before:           Wed 01 Nov 2023 12:25:21 +0000
ROA not after:            Wed 30 Oct 2024 12:30:21 +0000
asID:                     263276
IP address blocks:        2804:1638:e057:8000::/49 maxlen: 49
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:a6:79:e0:67:d0:1b:2e:cf:ec:3b:bf:e1:37:3f:39:b5:fc:a0:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=187B3B176F0808984D1B5075CAF3CA9D636EBBD6
        Validity
            Not Before: Nov  1 12:25:21 2023 GMT
            Not After : Oct 30 12:30:21 2024 GMT
        Subject: CN=BB63F9E29ED348FEA82A0F5752379846C5B7BCC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:4b:01:1e:61:6d:62:21:b0:a1:28:83:08:b4:
                    e7:a4:f5:4a:91:83:c8:2b:27:b6:41:8d:db:08:e1:
                    11:11:7c:69:66:55:23:ed:f2:76:1d:64:d4:38:e3:
                    fa:69:84:41:94:40:a6:e9:e2:f3:7d:50:0f:58:a0:
                    f2:d4:28:b8:f3:8f:9f:f2:be:01:4d:90:0e:5f:33:
                    57:70:5e:88:6e:22:33:51:8a:78:b3:90:1e:6a:bc:
                    dc:b8:95:86:e6:57:62:79:d7:38:a3:6a:27:53:5a:
                    05:fe:d8:be:06:ca:fc:34:44:57:d2:84:cf:ba:fb:
                    d6:44:d4:ff:22:78:a4:36:d5:1d:66:e2:99:ed:aa:
                    ca:05:d7:ac:34:62:8a:88:ab:b6:59:ed:27:b7:b5:
                    e7:38:32:6e:63:49:3e:93:d2:94:df:e2:9c:fd:f2:
                    46:11:b9:70:36:70:b5:39:21:20:d5:06:b0:d6:08:
                    32:a9:98:45:3c:ba:2d:5c:50:2c:99:16:20:9e:31:
                    03:00:55:0a:db:26:7b:3e:aa:14:45:e1:45:b8:73:
                    31:b7:78:1d:33:cc:84:ec:4a:16:6e:65:db:c3:c6:
                    c5:eb:be:19:3e:35:29:a8:74:62:86:e2:58:cd:9b:
                    82:cf:31:c2:3a:93:86:47:4f:cf:c2:e8:58:70:5a:
                    53:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:63:F9:E2:9E:D3:48:FE:A8:2A:0F:57:52:37:98:46:C5:B7:BC:C7
            X509v3 Authority Key Identifier:
                keyid:18:7B:3B:17:6F:08:08:98:4D:1B:50:75:CA:F3:CA:9D:63:6E:BB:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/187B3B176F0808984D1B5075CAF3CA9D636EBBD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/187B3B176F0808984D1B5075CAF3CA9D636EBBD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/323830343a313633383a653035373a383030303a3a2f34392d3439203d3e20323633323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1638:e057:8000::/49

    Signature Algorithm: sha256WithRSAEncryption
         1c:65:34:e3:c8:a4:5a:a9:bb:2f:d1:fd:2f:fc:f4:cb:4e:b5:
         74:97:63:f8:aa:3e:4e:02:80:9b:86:48:0a:b6:12:20:e4:53:
         76:03:b6:77:01:28:e0:60:c6:0a:97:1c:79:fb:cb:62:e4:fe:
         2b:1e:18:19:73:67:23:6f:22:e8:36:20:17:d5:19:91:b1:e5:
         06:72:86:84:79:07:44:1f:db:eb:e7:68:bd:b5:cc:9a:01:eb:
         f8:ad:0a:e0:a7:41:03:3e:8f:af:ec:7b:03:ab:30:cf:bb:94:
         1f:40:1f:09:5b:6e:6b:0d:f1:1e:d6:b4:0d:7b:14:00:23:b6:
         df:8a:17:d0:5c:a4:21:e9:9f:cc:cb:ed:22:a1:1a:1c:6f:f4:
         d3:dc:3c:19:34:ef:6c:3c:33:33:a9:b5:8e:17:f7:88:a2:fb:
         b8:2a:a4:b3:6c:8e:f6:c6:2c:82:2a:b3:62:a4:ea:96:55:17:
         9c:29:ee:f7:11:f7:f7:0e:f8:17:f7:93:68:12:38:7b:e8:d5:
         05:a0:dc:8e:af:3f:69:2f:7b:3e:0b:a1:4f:9c:e3:c4:e2:a3:
         a8:84:46:69:9c:47:e8:e1:1e:2e:bf:33:03:72:82:f1:e8:b2:
         ec:41:41:64:ca:56:3b:f1:3f:8b:ae:f0:05:9a:c5:11:a2:f1:
         67:3f:4c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:17:46 2025 by rpki-client