Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4epocpKUp1Q9fFFL4QGa9CnsLFZyrJ4Xn4uFGj8qxT7E/0/323830343a346232343a3a2f33322d3438203d3e20323637323836.roa
File:                     323830343a346232343a3a2f33322d3438203d3e20323637323836.roa (raw, json)
Hash identifier:          Y6vu/NxBu6Z0DcjiePuR34PzJM1YuQdvKi5rxw0jTVY=
Subject key identifier:   B4:A2:64:FF:6B:94:52:0D:2A:36:6C:D1:8B:B2:43:B9:C7:CD:27:C6
Certificate issuer:       /CN=BBAC19E92B4587A3AD58AD449516DFD76BB3CD73
Certificate serial:       2399C12A4E44C310B1A56D035D6284FCFAB9C564
Authority key identifier: BB:AC:19:E9:2B:45:87:A3:AD:58:AD:44:95:16:DF:D7:6B:B3:CD:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BBAC19E92B4587A3AD58AD449516DFD76BB3CD73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4epocpKUp1Q9fFFL4QGa9CnsLFZyrJ4Xn4uFGj8qxT7E/0/323830343a346232343a3a2f33322d3438203d3e20323637323836.roa
Signing time:             Wed 05 Jun 2024 19:05:19 +0000
ROA not before:           Wed 05 Jun 2024 19:00:19 +0000
ROA not after:            Wed 04 Jun 2025 19:05:19 +0000
asID:                     267286
IP address blocks:        2804:4b24::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:99:c1:2a:4e:44:c3:10:b1:a5:6d:03:5d:62:84:fc:fa:b9:c5:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBAC19E92B4587A3AD58AD449516DFD76BB3CD73
        Validity
            Not Before: Jun  5 19:00:19 2024 GMT
            Not After : Jun  4 19:05:19 2025 GMT
        Subject: CN=B4A264FF6B94520D2A366CD18BB243B9C7CD27C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:53:57:58:d9:c5:6e:6e:92:51:26:ce:62:ca:
                    ed:9b:0d:2c:cc:8a:66:0d:a3:1e:e6:d5:94:4d:29:
                    a8:a2:60:65:fe:05:b8:56:85:a0:66:16:94:b3:56:
                    61:1a:a1:7d:f3:45:77:dc:e1:2c:a1:cd:f3:21:4b:
                    ff:cb:42:8c:cb:28:e4:c3:80:05:62:40:f0:6a:7e:
                    14:d4:62:62:73:59:7f:06:4a:36:c6:fb:88:f8:c9:
                    01:aa:d8:f9:9e:30:27:2e:51:92:86:4c:82:30:bb:
                    6f:44:f2:95:84:84:d0:89:6f:69:6d:60:81:36:1d:
                    63:e6:98:59:e4:27:bd:65:5e:38:44:d8:8d:fd:51:
                    38:69:dd:62:45:62:35:66:58:ff:a8:18:98:5e:72:
                    78:b9:88:7b:37:f8:b4:91:a5:17:7c:12:72:e6:68:
                    1b:00:18:9c:3f:cd:96:01:0b:dc:c5:a4:3a:47:4a:
                    bc:5a:5a:04:7a:14:16:12:d7:a7:66:5a:f2:96:10:
                    2c:e5:5f:42:8d:55:21:1c:ec:8e:51:0a:10:02:61:
                    20:75:d7:f4:1c:45:71:56:5d:f4:b8:fa:8b:8b:83:
                    6c:54:98:ad:08:e1:cb:06:16:1a:91:1e:ef:b4:91:
                    2c:c7:33:30:9c:75:80:07:35:6c:88:06:bd:fd:67:
                    bc:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:A2:64:FF:6B:94:52:0D:2A:36:6C:D1:8B:B2:43:B9:C7:CD:27:C6
            X509v3 Authority Key Identifier:
                keyid:BB:AC:19:E9:2B:45:87:A3:AD:58:AD:44:95:16:DF:D7:6B:B3:CD:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4epocpKUp1Q9fFFL4QGa9CnsLFZyrJ4Xn4uFGj8qxT7E/0/BBAC19E92B4587A3AD58AD449516DFD76BB3CD73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BBAC19E92B4587A3AD58AD449516DFD76BB3CD73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4epocpKUp1Q9fFFL4QGa9CnsLFZyrJ4Xn4uFGj8qxT7E/0/323830343a346232343a3a2f33322d3438203d3e20323637323836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b24::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:b2:4c:fd:e0:c0:52:2e:58:bc:dd:18:f9:1b:dc:7c:19:da:
         49:8d:67:a8:79:ca:37:83:64:17:e1:cb:b6:27:d5:05:86:fc:
         c3:d0:9d:78:12:36:42:eb:ff:bb:48:f8:5c:3c:ef:d7:3e:6f:
         2d:2d:fb:53:3e:a1:9d:93:c5:e5:8c:ee:9b:34:7a:f2:41:da:
         42:a6:ba:85:20:9c:9a:53:cc:51:10:fb:ec:a0:de:13:b1:a4:
         3f:f3:10:26:ed:58:59:4a:c2:0d:45:50:28:d7:1d:88:a9:71:
         9b:8e:ac:19:09:55:bb:b6:db:4a:30:c5:20:38:ed:bb:c4:4d:
         0c:1e:0b:c2:4f:97:47:08:6d:7e:b4:5a:84:8a:f0:b4:f5:e3:
         1e:96:ce:40:6f:e4:a5:03:e4:a3:da:22:a4:30:30:7d:22:13:
         05:0a:74:db:a9:4e:42:84:4b:ff:f6:ca:8f:d6:f9:50:6c:a9:
         73:33:e1:f4:5d:93:d3:d4:2f:b1:bd:b8:93:95:4d:31:eb:92:
         50:46:c8:73:18:17:96:ec:e2:ff:09:8d:75:f9:21:4d:6d:77:
         e1:dc:5e:a7:fd:77:01:75:32:6d:5b:3e:f0:7e:18:df:00:f4:
         ad:16:b6:e6:f9:f0:d1:a4:5f:c3:94:49:2f:4d:5c:d9:a0:c1:
         08:fa:31:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:30:44 2025 by rpki-client