Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/1/323830343a313139343a663030303a3a2f34362d313238203d3e20323633343234.roa
File:                     323830343a313139343a663030303a3a2f34362d313238203d3e20323633343234.roa (raw, json)
Hash identifier:          bPpI++Vc0sQDpJf1FDttNmvyT1RMMOqfQDvK0IEiwTE=
Subject key identifier:   BB:17:CD:63:1B:CC:9F:0D:25:21:94:B2:7A:E4:64:C7:C9:09:DD:26
Certificate issuer:       /CN=7CA1E2D818532F6321B3C9E6EE790B2AFE560E21
Certificate serial:       59D3549C349BC4D7AFCD08A27E817D0705B5C984
Authority key identifier: 7C:A1:E2:D8:18:53:2F:63:21:B3:C9:E6:EE:79:0B:2A:FE:56:0E:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CA1E2D818532F6321B3C9E6EE790B2AFE560E21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/1/323830343a313139343a663030303a3a2f34362d313238203d3e20323633343234.roa
Signing time:             Sat 15 Feb 2025 22:36:47 +0000
ROA not before:           Sat 15 Feb 2025 22:31:47 +0000
ROA not after:            Sat 14 Feb 2026 22:36:47 +0000
asID:                     263424
IP address blocks:        2804:1194:f000::/46 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:d3:54:9c:34:9b:c4:d7:af:cd:08:a2:7e:81:7d:07:05:b5:c9:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CA1E2D818532F6321B3C9E6EE790B2AFE560E21
        Validity
            Not Before: Feb 15 22:31:47 2025 GMT
            Not After : Feb 14 22:36:47 2026 GMT
        Subject: CN=BB17CD631BCC9F0D252194B27AE464C7C909DD26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9d:a8:3f:b9:95:ce:37:8a:a9:57:52:4a:2d:
                    01:18:67:e3:64:3d:29:2a:b2:14:f7:ef:49:d4:b8:
                    cf:ca:e1:2d:af:73:07:93:96:74:f5:a2:03:1d:d1:
                    c6:bc:d9:b4:8c:f7:b3:10:bb:c6:e4:81:d7:bb:48:
                    d5:eb:e1:b9:da:b9:0a:ad:b6:8c:92:ab:50:b7:48:
                    e5:9d:47:2f:dc:a8:9c:e6:f0:0c:e8:d8:e3:c4:69:
                    81:f4:d9:52:94:d9:e1:df:86:d9:fb:e8:3c:20:f6:
                    e6:38:f0:70:74:1c:23:31:31:df:89:1a:11:33:81:
                    a9:6e:53:49:a7:eb:b5:60:94:9f:55:82:0a:33:39:
                    33:4c:bb:9f:83:dc:6c:24:21:47:97:18:54:5a:bc:
                    11:35:cb:a6:7d:40:6b:06:e4:c9:7f:0e:d4:0f:c9:
                    0b:2a:87:77:9f:3c:4d:9b:00:fd:fb:54:73:56:96:
                    95:df:8c:7f:5c:2c:4b:d0:57:62:73:0a:44:33:19:
                    1e:16:0b:9b:87:9d:b0:f7:d9:48:58:c8:05:82:b0:
                    b3:bc:89:32:71:b3:1f:71:5f:e4:6b:f1:58:4f:ef:
                    3b:d2:28:db:ef:05:e7:a5:b2:71:dd:eb:33:16:ca:
                    78:38:89:7c:02:a3:23:4d:d3:44:b6:fc:7c:5a:83:
                    85:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:17:CD:63:1B:CC:9F:0D:25:21:94:B2:7A:E4:64:C7:C9:09:DD:26
            X509v3 Authority Key Identifier:
                keyid:7C:A1:E2:D8:18:53:2F:63:21:B3:C9:E6:EE:79:0B:2A:FE:56:0E:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/1/7CA1E2D818532F6321B3C9E6EE790B2AFE560E21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CA1E2D818532F6321B3C9E6EE790B2AFE560E21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/1/323830343a313139343a663030303a3a2f34362d313238203d3e20323633343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1194:f000::/46

    Signature Algorithm: sha256WithRSAEncryption
         06:92:30:41:9d:ff:74:0e:7b:24:0d:70:97:bf:82:ac:b7:da:
         53:38:27:12:e5:c1:b0:0e:2f:f0:e6:92:61:ce:76:0e:82:7c:
         80:21:7a:49:86:18:a7:8e:5a:7f:3d:a1:df:47:95:62:61:4a:
         5f:94:7d:0f:1f:54:d6:bd:28:43:6d:cc:bf:49:dc:98:9a:43:
         0f:e6:0a:35:9b:19:8d:d6:d0:7e:a6:8c:c5:12:77:7f:79:30:
         c0:77:11:f4:8d:88:4e:8e:20:4f:6d:3c:2f:d8:70:14:0b:20:
         fc:61:41:88:79:34:c9:60:ae:0c:c4:3e:ae:28:38:b1:27:6d:
         2c:91:d4:94:ba:5e:6a:e4:e6:71:90:30:a8:09:75:c9:bb:20:
         09:9f:b9:6b:fc:b1:b7:b7:92:5f:aa:fc:c7:c3:be:c2:91:36:
         ba:a3:09:30:55:36:56:d2:28:f5:ef:50:89:5d:2b:24:b1:73:
         55:d5:05:b2:fe:14:dd:18:51:06:eb:b8:69:e3:d2:6e:fa:03:
         71:73:22:d8:c0:d9:16:bb:d0:3b:ca:71:71:62:37:b8:b8:66:
         6f:77:b9:35:cf:8d:18:a8:0f:4a:c7:f6:11:d9:29:f9:ac:43:
         91:fb:d9:09:aa:25:8c:f1:eb:5e:a0:ce:53:4b:da:f4:4c:ea:
         89:11:6b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:43:03 2025 by rpki-client