Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/34LKUVp6i31q4FRGhAxf7jac9c1dr8HmdGWNewJYUn8n/1/323830343a343166633a3a2f33322d3334203d3e20323637343730.roa
File:                     323830343a343166633a3a2f33322d3334203d3e20323637343730.roa (raw, json)
Hash identifier:          H0ZCtmP1Dp+RgpfdGUFTerRGJ+rvMdxQz9SLs6s599s=
Subject key identifier:   AA:39:8E:E9:3D:61:40:0D:EA:32:72:ED:72:2E:C1:C5:AD:58:26:E5
Certificate issuer:       /CN=BFD56512C8580D0E6D2FD05F5D13C3714B45AAEA
Certificate serial:       2BB1937DE9EC8DB95A0BB24498AB6B10EC028B60
Authority key identifier: BF:D5:65:12:C8:58:0D:0E:6D:2F:D0:5F:5D:13:C3:71:4B:45:AA:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFD56512C8580D0E6D2FD05F5D13C3714B45AAEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/34LKUVp6i31q4FRGhAxf7jac9c1dr8HmdGWNewJYUn8n/1/323830343a343166633a3a2f33322d3334203d3e20323637343730.roa
Signing time:             Wed 05 Mar 2025 19:00:07 +0000
ROA not before:           Wed 05 Mar 2025 18:55:07 +0000
ROA not after:            Wed 04 Mar 2026 19:00:07 +0000
asID:                     267470
IP address blocks:        2804:41fc::/32 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:b1:93:7d:e9:ec:8d:b9:5a:0b:b2:44:98:ab:6b:10:ec:02:8b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BFD56512C8580D0E6D2FD05F5D13C3714B45AAEA
        Validity
            Not Before: Mar  5 18:55:07 2025 GMT
            Not After : Mar  4 19:00:07 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:36:e5:e0:4d:79:5e:00:76:f5:d6:e9:65:71:
                    d9:22:0a:1d:de:1d:ec:ba:a9:17:02:43:59:a7:ee:
                    31:76:aa:c9:b7:a8:70:e2:f2:2b:2d:82:89:cd:0e:
                    28:ed:98:66:cf:8a:ea:fc:da:73:bc:e2:08:59:91:
                    cc:0e:b0:3a:00:57:85:30:a3:30:95:12:30:6d:22:
                    37:58:64:af:4e:42:d6:bf:86:b8:d5:a4:70:6d:15:
                    e8:70:90:ce:90:d1:a2:18:2d:ac:af:30:8f:c6:f9:
                    06:fc:86:90:1e:35:67:cc:34:ae:b5:64:ca:b2:4d:
                    fb:99:b8:bd:4c:48:8e:cc:79:b2:ac:4e:9a:f6:e2:
                    12:85:82:86:a8:59:32:d2:be:1a:1f:62:a7:7a:5f:
                    0e:2c:d2:b3:39:63:d5:5c:ab:eb:51:1b:e1:6c:52:
                    fd:6d:e4:49:99:fa:09:af:66:10:49:2c:33:97:de:
                    ea:bc:99:3a:d8:ab:62:fc:0c:38:e8:5b:d4:bd:62:
                    c8:43:3a:98:fa:96:87:b2:46:19:27:e9:e5:c0:a4:
                    32:61:41:47:fb:aa:2c:8e:06:4b:88:c4:0e:9f:8b:
                    ce:97:08:2f:7a:b5:68:92:34:7a:89:fb:fd:c6:54:
                    5d:df:7f:77:b1:27:fa:8a:c6:71:6a:19:c5:25:45:
                    0d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:39:8E:E9:3D:61:40:0D:EA:32:72:ED:72:2E:C1:C5:AD:58:26:E5
            X509v3 Authority Key Identifier:
                keyid:BF:D5:65:12:C8:58:0D:0E:6D:2F:D0:5F:5D:13:C3:71:4B:45:AA:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/34LKUVp6i31q4FRGhAxf7jac9c1dr8HmdGWNewJYUn8n/1/BFD56512C8580D0E6D2FD05F5D13C3714B45AAEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFD56512C8580D0E6D2FD05F5D13C3714B45AAEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/34LKUVp6i31q4FRGhAxf7jac9c1dr8HmdGWNewJYUn8n/1/323830343a343166633a3a2f33322d3334203d3e20323637343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         a9:10:96:0a:6b:0c:a7:1f:9e:5e:5a:b8:0f:3a:56:02:b1:03:
         49:e7:5e:3f:01:67:9e:3b:59:73:aa:ba:b2:b0:22:89:11:eb:
         e0:d2:78:c6:0e:00:ec:a6:ed:07:a0:3c:72:02:ab:63:b0:b0:
         2b:15:5c:46:59:6c:04:f9:2c:63:25:ee:59:cb:d6:00:71:25:
         49:98:52:36:53:74:e1:5b:ec:33:0a:67:cf:47:6d:15:c1:86:
         9e:c4:08:fb:40:2f:0e:6b:d4:e2:75:52:5b:c5:e6:c3:49:03:
         47:39:8d:b0:c8:94:eb:77:17:e3:ce:22:92:23:08:d3:9b:3a:
         26:85:eb:e1:fe:d8:b5:46:2e:d0:40:25:81:d0:36:8a:92:86:
         10:0a:83:6b:bd:d2:42:72:51:61:b6:09:3a:87:94:6b:8f:fc:
         e8:39:da:1b:dd:6d:51:ad:d6:39:a3:a4:c3:9d:68:ac:d2:4a:
         86:12:dc:e3:ac:3e:64:cb:6d:c2:57:91:c1:a5:7b:0f:51:96:
         46:c0:bc:45:cb:51:c0:04:7f:8f:84:95:55:48:b3:52:78:ba:
         09:4d:99:c0:9e:dd:78:96:19:5b:fd:37:4a:a9:02:c8:8f:11:
         66:86:da:ea:ea:c4:f6:14:11:57:8f:f0:35:29:03:bb:f1:cc:
         31:d9:37:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:08:46 2025 by rpki-client