Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/323830343a313139633a3a2f33322d3634203d3e20323633343237.roa
File:                     323830343a313139633a3a2f33322d3634203d3e20323633343237.roa (raw, json)
Hash identifier:          VIz3Y11mmGSHfCRovTTJBi2CULSYvJ4dGRqjZA8SYVw=
Subject key identifier:   04:43:00:0E:17:20:D5:7E:F4:C3:90:50:DD:23:38:3B:81:D3:AD:32
Certificate issuer:       /CN=BF405C0C9997841C8F9C68801DE0518E5AC4C209
Certificate serial:       635015F3EDDB4D01A0B49D7EA4B328CBA8E8E509
Authority key identifier: BF:40:5C:0C:99:97:84:1C:8F:9C:68:80:1D:E0:51:8E:5A:C4:C2:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF405C0C9997841C8F9C68801DE0518E5AC4C209.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/323830343a313139633a3a2f33322d3634203d3e20323633343237.roa
Signing time:             Sat 13 May 2023 14:29:56 +0000
ROA not before:           Sat 13 May 2023 14:24:56 +0000
ROA not after:            Sat 11 May 2024 14:29:56 +0000
asID:                     263427
IP address blocks:        2804:119c::/32 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:50:15:f3:ed:db:4d:01:a0:b4:9d:7e:a4:b3:28:cb:a8:e8:e5:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF405C0C9997841C8F9C68801DE0518E5AC4C209
        Validity
            Not Before: May 13 14:24:56 2023 GMT
            Not After : May 11 14:29:56 2024 GMT
        Subject: CN=0443000E1720D57EF4C39050DD23383B81D3AD32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:41:fd:fd:34:f5:6e:60:17:4a:88:c9:f9:a8:
                    38:f9:93:15:42:0b:20:dd:76:01:a0:7c:d5:b9:42:
                    b0:76:c9:d1:39:c5:28:d5:fb:9f:6d:ba:a2:2c:4b:
                    e1:fb:24:8b:b1:c6:35:eb:2b:fd:d8:0e:25:ae:1f:
                    d6:11:f5:45:4d:fc:2d:3b:f7:0c:d5:32:76:b3:bd:
                    79:ae:d5:eb:21:3b:04:6c:ef:11:20:82:37:6b:2a:
                    72:05:a1:1b:0b:52:87:39:2b:5b:3e:72:2b:8a:56:
                    bd:18:e2:0d:2c:27:49:08:f7:1d:7c:f2:ed:44:18:
                    a5:e4:97:4a:4d:ce:b6:7b:10:58:37:e4:ee:5d:a0:
                    e2:99:5a:79:21:ad:35:b7:fa:58:a0:0d:ec:ac:56:
                    df:69:d4:49:6c:cf:dc:24:2d:a6:fd:cd:6c:f7:5a:
                    1e:ad:3c:64:d6:2c:72:dc:01:13:f0:df:ea:5d:34:
                    c2:3a:72:43:b8:85:33:af:a8:1b:22:33:a4:97:11:
                    2d:e2:fc:7d:63:46:85:70:9c:35:3d:0b:65:b9:12:
                    18:53:6b:e5:07:66:ba:e2:25:ea:ca:04:18:ad:4b:
                    99:32:4a:c3:b3:12:50:ff:88:28:54:a3:0a:1a:b8:
                    91:3a:e6:5c:09:48:e2:62:d1:1d:f5:ad:0b:7f:b1:
                    ba:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:43:00:0E:17:20:D5:7E:F4:C3:90:50:DD:23:38:3B:81:D3:AD:32
            X509v3 Authority Key Identifier:
                keyid:BF:40:5C:0C:99:97:84:1C:8F:9C:68:80:1D:E0:51:8E:5A:C4:C2:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/BF405C0C9997841C8F9C68801DE0518E5AC4C209.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF405C0C9997841C8F9C68801DE0518E5AC4C209.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/323830343a313139633a3a2f33322d3634203d3e20323633343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:119c::/32

    Signature Algorithm: sha256WithRSAEncryption
         d7:46:fc:4f:24:30:c9:bc:f3:23:98:dc:61:82:8b:ec:14:ea:
         5e:18:f2:42:b4:58:c5:51:c8:25:6c:b5:55:ec:73:e7:de:14:
         8e:b2:e5:02:cf:ca:3a:99:a4:d9:c2:fe:fc:4f:7c:cd:4c:e3:
         1c:40:e3:cf:b5:92:8d:b9:17:6d:7c:d5:ac:fa:83:0a:64:1d:
         a8:eb:be:59:47:cd:36:7e:6c:19:d7:c3:fc:73:7d:6c:d6:bd:
         d7:b1:cf:d5:f8:09:0e:3a:13:45:15:5c:b7:8b:25:40:74:31:
         bf:3d:a6:ec:49:5a:75:cb:5c:20:ef:f3:23:11:49:a3:dd:1e:
         bd:ad:93:54:e7:3b:87:7f:0c:c2:b4:b0:a6:72:e4:31:e6:83:
         1d:c3:a2:7f:c8:c4:11:56:7c:d7:70:87:1c:b0:df:62:8d:76:
         d8:fc:68:e4:c8:aa:b1:13:f7:4b:5a:75:3a:be:29:fc:62:a5:
         3b:ec:f4:f7:88:63:c1:74:b8:74:85:90:34:39:a1:d9:71:a3:
         66:b5:29:c2:f7:62:35:fe:1d:9f:a1:f2:ff:b4:1a:ea:21:d6:
         85:ca:de:56:c8:1a:8c:4d:47:d1:ee:fb:36:db:65:31:fa:3e:
         89:dc:66:00:f2:a4:39:6d:f1:5d:c7:aa:89:3c:21:85:43:b0:
         81:51:9c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:16:20 2025 by rpki-client