Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/51MZFJMs7St8CZj3bJkW66gYqftxRJ3VkFGs1c7eS76C/0/323830343a383434633a343030383a3a2f34382d3438203d3e20323732323532.roa
File:                     323830343a383434633a343030383a3a2f34382d3438203d3e20323732323532.roa (raw, json)
Hash identifier:          lL/ymf9NVyTTYYLIGQdgGrVa9GT4xx5ohSWOlz3lnYk=
Subject key identifier:   BF:40:16:25:6D:EB:F4:47:C9:11:C3:EA:50:32:A0:A1:4F:04:77:78
Certificate issuer:       /CN=1D5955A8F874129F0C236C5E0F4A977609D094F7
Certificate serial:       722EABBECA6FE833D33935D6B22165BC562AB358
Authority key identifier: 1D:59:55:A8:F8:74:12:9F:0C:23:6C:5E:0F:4A:97:76:09:D0:94:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D5955A8F874129F0C236C5E0F4A977609D094F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/51MZFJMs7St8CZj3bJkW66gYqftxRJ3VkFGs1c7eS76C/0/323830343a383434633a343030383a3a2f34382d3438203d3e20323732323532.roa
Signing time:             Fri 31 Jan 2025 12:34:48 +0000
ROA not before:           Fri 31 Jan 2025 12:29:48 +0000
ROA not after:            Fri 30 Jan 2026 12:34:48 +0000
asID:                     272252
IP address blocks:        2804:844c:4008::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:2e:ab:be:ca:6f:e8:33:d3:39:35:d6:b2:21:65:bc:56:2a:b3:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D5955A8F874129F0C236C5E0F4A977609D094F7
        Validity
            Not Before: Jan 31 12:29:48 2025 GMT
            Not After : Jan 30 12:34:48 2026 GMT
        Subject: CN=BF4016256DEBF447C911C3EA5032A0A14F047778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2a:13:f5:3c:38:42:fd:77:41:cf:09:39:88:
                    36:85:62:9c:1a:54:7d:00:06:ce:43:86:b2:39:86:
                    07:ae:25:51:c9:ac:cb:ba:5c:cb:0d:65:f0:68:55:
                    be:3a:8b:80:ab:a4:26:49:6c:f9:9a:fd:5e:0e:25:
                    be:c6:05:34:06:49:cc:d0:22:70:d2:74:98:b3:1b:
                    0d:62:2c:96:d3:8d:0b:6d:87:7e:65:d3:0c:a3:79:
                    2e:a3:ba:a5:7e:0a:5c:92:e1:c3:72:ac:47:b8:2d:
                    2f:db:5d:26:b4:c5:57:90:7c:00:99:18:67:90:d5:
                    1c:d3:66:48:a0:59:b1:f8:fb:73:6d:3a:00:cf:92:
                    32:eb:a8:6e:49:62:af:3a:0e:1e:b6:08:4e:58:f1:
                    8d:79:60:6a:1c:12:cd:30:86:8f:48:46:cd:2a:d9:
                    84:74:90:32:c6:e3:08:16:0e:9a:68:f9:89:6a:7c:
                    af:9e:58:2c:58:02:91:14:e6:f4:a9:04:92:5e:6c:
                    06:09:6c:a1:28:d2:27:34:c6:89:a4:72:3d:83:d7:
                    49:a0:73:ac:7e:17:7d:3b:dc:65:0a:8f:18:ce:8a:
                    ed:cf:a0:36:aa:f3:98:5c:74:27:6e:90:70:6a:09:
                    fc:20:44:63:2f:8a:23:4c:25:22:7f:87:3f:e2:94:
                    16:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:40:16:25:6D:EB:F4:47:C9:11:C3:EA:50:32:A0:A1:4F:04:77:78
            X509v3 Authority Key Identifier:
                keyid:1D:59:55:A8:F8:74:12:9F:0C:23:6C:5E:0F:4A:97:76:09:D0:94:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/51MZFJMs7St8CZj3bJkW66gYqftxRJ3VkFGs1c7eS76C/0/1D5955A8F874129F0C236C5E0F4A977609D094F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D5955A8F874129F0C236C5E0F4A977609D094F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/51MZFJMs7St8CZj3bJkW66gYqftxRJ3VkFGs1c7eS76C/0/323830343a383434633a343030383a3a2f34382d3438203d3e20323732323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:844c:4008::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:f8:7e:46:e7:d2:19:d7:ea:27:7c:07:cd:47:37:92:02:a0:
         bd:38:41:85:07:92:09:08:e8:37:6d:f6:b7:40:da:58:a0:5f:
         6d:27:68:b9:4b:78:e5:1c:ff:f8:85:8b:af:27:a1:d0:ca:21:
         a0:65:d7:b3:e8:ff:32:ef:84:ed:46:dd:16:ac:67:1f:dd:74:
         7c:cb:d8:9a:09:ae:a2:a9:d6:27:65:f5:68:f3:75:4d:1e:64:
         46:95:c6:b9:7c:46:07:80:bc:12:ca:7c:57:ef:b5:ea:1e:b7:
         45:30:99:65:74:23:64:87:ad:36:15:e9:0d:ce:14:4f:f9:31:
         91:b3:c3:38:58:07:6e:2a:05:0b:e4:12:74:36:d4:32:a6:85:
         e0:b1:6e:7e:a3:f4:24:63:04:49:23:28:17:d3:cc:ea:4c:f9:
         0f:e4:f6:82:ef:e2:79:12:fb:d8:21:a2:4f:97:e6:98:3a:40:
         fd:1f:a9:2a:4e:da:de:a7:f1:95:07:3a:6f:9e:9a:97:7e:92:
         99:ac:e6:46:e7:1c:ea:44:84:fc:4e:c6:1b:65:ee:fc:b3:5c:
         b7:1f:51:fb:77:c2:99:c6:2c:2d:95:93:bd:09:2e:3b:ae:e3:
         da:7f:52:70:92:cb:f2:e8:7f:eb:82:81:bd:05:0a:ff:5b:1a:
         50:f3:13:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:47:56 2025 by rpki-client