Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4P1h6uGnHnXCCM6S3DLyZPMRqbfjcpSGq6DGWAj9ZzqK/0/323830343a336433343a3a2f33322d3430203d3e20323636323630.roa
File:                     323830343a336433343a3a2f33322d3430203d3e20323636323630.roa (raw, json)
Hash identifier:          6BD4IAHNyLMSGhjz8v9yzN/KOGPZV9wr3Hj5fvjT2iY=
Subject key identifier:   B5:DD:7B:DE:06:55:13:F6:DB:5E:0A:D4:1B:AF:D4:D2:FF:7E:E9:FC
Certificate issuer:       /CN=BEED82E271E59A3284851FDC2DD7DDE90749BC67
Certificate serial:       60B6499B54B57A6A199ED103B4E2AD3F3D0B4124
Authority key identifier: BE:ED:82:E2:71:E5:9A:32:84:85:1F:DC:2D:D7:DD:E9:07:49:BC:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BEED82E271E59A3284851FDC2DD7DDE90749BC67.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4P1h6uGnHnXCCM6S3DLyZPMRqbfjcpSGq6DGWAj9ZzqK/0/323830343a336433343a3a2f33322d3430203d3e20323636323630.roa
Signing time:             Wed 18 Oct 2023 17:42:43 +0000
ROA not before:           Wed 18 Oct 2023 17:37:43 +0000
ROA not after:            Wed 16 Oct 2024 17:42:43 +0000
asID:                     266260
IP address blocks:        2804:3d34::/32 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:b6:49:9b:54:b5:7a:6a:19:9e:d1:03:b4:e2:ad:3f:3d:0b:41:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BEED82E271E59A3284851FDC2DD7DDE90749BC67
        Validity
            Not Before: Oct 18 17:37:43 2023 GMT
            Not After : Oct 16 17:42:43 2024 GMT
        Subject: CN=B5DD7BDE065513F6DB5E0AD41BAFD4D2FF7EE9FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:08:da:80:71:0b:9b:f7:91:39:ad:ad:b3:9c:
                    a2:5e:f0:60:62:ea:8e:c4:5d:9a:51:04:d7:14:ec:
                    3e:19:a6:84:6e:f9:66:2f:16:65:18:e9:33:f7:65:
                    ba:90:37:d3:6e:4d:8d:c4:28:af:f4:30:5c:e0:6d:
                    31:57:25:65:8a:f2:7f:57:04:98:30:77:30:b7:10:
                    6a:ce:2d:13:49:36:0b:aa:4e:ee:30:1a:ee:3b:a6:
                    c2:f3:5a:b6:36:f2:1b:52:b8:7a:b3:50:57:98:e3:
                    41:05:bb:1b:ec:4f:2c:e9:93:c0:30:28:63:0f:c7:
                    19:66:b5:d4:e6:00:3d:fc:b8:38:07:2f:22:89:07:
                    bb:ad:94:ee:f2:d0:7b:a9:12:84:37:5b:62:8c:c4:
                    dc:08:aa:d8:08:d5:58:48:c6:a9:ed:70:dc:0a:ae:
                    db:6f:e2:58:3e:54:d3:2f:5b:08:f2:34:4d:3d:15:
                    b5:e6:37:bf:89:f5:bd:5a:01:51:25:49:5c:0f:6a:
                    eb:12:ea:32:59:dc:83:7a:70:15:af:04:ef:6e:17:
                    33:bc:41:df:ca:8b:94:ae:08:98:6a:ff:42:8e:6f:
                    c9:cd:9c:a0:ca:c7:fa:50:9f:b1:72:de:7d:18:a8:
                    d4:8a:f1:70:86:30:d9:e9:39:a9:06:e6:4b:61:0b:
                    72:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:DD:7B:DE:06:55:13:F6:DB:5E:0A:D4:1B:AF:D4:D2:FF:7E:E9:FC
            X509v3 Authority Key Identifier:
                keyid:BE:ED:82:E2:71:E5:9A:32:84:85:1F:DC:2D:D7:DD:E9:07:49:BC:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4P1h6uGnHnXCCM6S3DLyZPMRqbfjcpSGq6DGWAj9ZzqK/0/BEED82E271E59A3284851FDC2DD7DDE90749BC67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BEED82E271E59A3284851FDC2DD7DDE90749BC67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4P1h6uGnHnXCCM6S3DLyZPMRqbfjcpSGq6DGWAj9ZzqK/0/323830343a336433343a3a2f33322d3430203d3e20323636323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d34::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:e3:f6:ed:75:ad:e4:b3:47:18:ea:8a:85:39:03:cd:0b:32:
         be:de:d9:0a:7f:d6:77:0e:35:d7:9d:97:9f:9b:4c:d2:0f:82:
         2d:60:e2:ea:72:dd:d8:b1:53:27:d6:81:9e:17:34:ff:c3:d7:
         07:dd:e5:79:74:7e:6f:f6:62:19:be:b7:da:f3:ea:0d:5b:9a:
         49:78:b4:5b:ef:4e:83:88:e4:fc:5c:15:eb:65:7d:01:36:87:
         3f:1d:1b:32:20:f3:b0:bc:2e:20:13:33:a3:f1:d6:b4:68:97:
         12:9d:9a:be:a4:77:79:92:cb:bf:b2:6a:7d:96:59:e2:da:a5:
         f9:fc:8b:7e:f9:b9:6f:af:d8:19:ce:83:a5:37:36:ca:ef:d4:
         ad:2c:1c:11:74:36:1e:da:a5:d1:4c:f8:5f:f9:e4:81:e2:a4:
         d1:83:53:3b:94:29:f2:a5:7d:d9:d3:95:26:08:16:12:30:ab:
         9d:28:1f:74:16:45:23:78:5c:4f:91:fb:5d:2e:ff:8a:80:33:
         f9:60:fd:43:01:f1:55:1d:ec:a2:98:c5:b5:b5:3f:92:6e:1a:
         6b:12:de:f7:51:77:d2:b9:e5:b4:76:c2:d4:f5:36:f9:6d:f1:
         1e:68:d7:b8:5a:2f:af:bb:74:30:9b:77:b8:52:19:7d:f9:5c:
         f1:d5:1c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:14:16 2025 by rpki-client