Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/323830343a326664383a383030303a3a2f33342d3334203d3e20323634393135.roa
File:                     323830343a326664383a383030303a3a2f33342d3334203d3e20323634393135.roa (raw, json)
Hash identifier:          LIpJZ43AxsjagLRlVUwaZo+F/b/gj3th7NPezNYBDhk=
Subject key identifier:   F1:50:9F:30:F8:77:CE:14:ED:57:3E:79:3A:2A:3E:DE:AB:F4:82:5E
Certificate issuer:       /CN=51C402AA1A86FAF6C7B0D166E7AF0FA70EC4FEAD
Certificate serial:       3F65CE5106A299A28ED9DC1CDFE36F12D1E67D01
Authority key identifier: 51:C4:02:AA:1A:86:FA:F6:C7:B0:D1:66:E7:AF:0F:A7:0E:C4:FE:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51C402AA1A86FAF6C7B0D166E7AF0FA70EC4FEAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/323830343a326664383a383030303a3a2f33342d3334203d3e20323634393135.roa
Signing time:             Sun 17 Mar 2024 15:20:10 +0000
ROA not before:           Sun 17 Mar 2024 15:15:10 +0000
ROA not after:            Sun 16 Mar 2025 15:20:10 +0000
asID:                     264915
IP address blocks:        2804:2fd8:8000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:65:ce:51:06:a2:99:a2:8e:d9:dc:1c:df:e3:6f:12:d1:e6:7d:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51C402AA1A86FAF6C7B0D166E7AF0FA70EC4FEAD
        Validity
            Not Before: Mar 17 15:15:10 2024 GMT
            Not After : Mar 16 15:20:10 2025 GMT
        Subject: CN=F1509F30F877CE14ED573E793A2A3EDEABF4825E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c9:7b:cd:a4:a0:77:2c:bb:e0:9c:68:98:9e:
                    be:81:6f:41:19:d5:72:8b:44:da:f3:f3:8c:bd:b3:
                    85:d8:b9:d3:c0:d9:78:f2:ee:c9:62:6d:46:36:25:
                    7f:5a:db:f5:af:ec:d4:66:1c:50:94:ae:bc:53:33:
                    cb:71:f0:c3:56:4b:1a:dc:f9:b8:19:ed:2e:9e:f4:
                    81:39:e5:7c:7d:9b:09:d8:7d:1b:2e:67:ba:b0:32:
                    e9:76:59:87:dd:d0:cb:6a:5e:b1:c7:3c:e0:d1:22:
                    2a:f1:c0:ca:56:d0:23:61:ad:d2:ef:ad:5b:37:ab:
                    2b:b7:d1:98:ae:b5:30:92:e4:1d:7e:10:6e:ec:83:
                    48:df:41:7c:45:ec:18:ba:95:a4:de:ee:25:2e:91:
                    82:34:f3:a2:64:94:0a:f3:3b:91:6f:17:a5:3c:54:
                    2b:79:91:3d:59:7a:16:cf:a4:2b:01:03:d9:d8:00:
                    9e:79:3a:2a:99:bf:5a:7f:3d:20:66:86:b0:04:85:
                    bd:ea:90:a7:22:75:90:91:2c:74:b0:f0:e2:18:d7:
                    e7:db:6f:75:0c:d2:a4:21:4a:27:3d:47:5d:24:58:
                    49:4d:d7:04:ac:52:6d:9d:2f:07:e9:10:a1:6b:00:
                    e2:3e:1a:87:11:a9:b5:47:84:49:4a:f4:65:a6:92:
                    87:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:50:9F:30:F8:77:CE:14:ED:57:3E:79:3A:2A:3E:DE:AB:F4:82:5E
            X509v3 Authority Key Identifier:
                keyid:51:C4:02:AA:1A:86:FA:F6:C7:B0:D1:66:E7:AF:0F:A7:0E:C4:FE:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/51C402AA1A86FAF6C7B0D166E7AF0FA70EC4FEAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51C402AA1A86FAF6C7B0D166E7AF0FA70EC4FEAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/323830343a326664383a383030303a3a2f33342d3334203d3e20323634393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2fd8:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         94:3f:d8:d1:64:f0:6b:00:6e:88:cf:b7:43:69:e2:1c:c2:0f:
         5c:b0:32:96:52:f7:ff:cd:05:bf:20:31:8a:1a:cb:42:7d:b1:
         0b:b3:b4:d3:de:65:ce:ff:f0:44:fd:7d:2d:fb:b6:18:2f:c5:
         7a:90:00:44:d6:4d:b8:7c:26:0d:13:ca:06:d8:00:53:bb:b0:
         eb:b4:20:52:db:3d:c5:03:3a:78:27:3c:0b:5b:8a:cf:02:d7:
         78:b5:c5:c6:05:08:de:e3:db:f5:cc:92:c4:f6:d4:29:aa:84:
         1c:e3:25:5c:a4:89:4f:19:92:3b:0e:b2:64:3a:21:cf:00:07:
         82:c4:52:ba:c0:b5:d4:7b:64:91:6e:b0:4d:d5:b7:b2:9d:d9:
         d0:72:23:b7:d4:59:bd:69:ec:bf:a4:af:25:18:7c:8f:8b:f0:
         97:83:ab:ab:69:3e:00:dc:52:86:04:cf:28:83:a1:87:69:3f:
         f0:8f:55:b4:26:08:df:24:23:57:0c:da:2f:a0:83:76:3b:af:
         bb:57:cc:d3:c8:b5:13:62:e9:6d:65:fc:ae:34:94:ea:19:98:
         32:cd:60:59:a7:50:52:55:1f:4a:40:c4:06:22:f2:f8:3f:07:
         16:d1:b8:75:6a:61:48:65:33:37:91:dd:67:8b:bb:34:ac:e4:
         56:38:43:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:34:40 2025 by rpki-client