Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/323830343a313139633a666665303a3a2f34332d3433203d3e20323633343237.roa
File:                     323830343a313139633a666665303a3a2f34332d3433203d3e20323633343237.roa (raw, json)
Hash identifier:          fITCmIdq9lcWMDjpy9ODrgRWu1CJ56pGCGLzwSW0gnk=
Subject key identifier:   BC:7D:78:EF:4D:21:B6:F6:B3:F0:AD:A1:41:EA:43:5E:6B:14:5D:43
Certificate issuer:       /CN=BF405C0C9997841C8F9C68801DE0518E5AC4C209
Certificate serial:       3DB38DF6AAD5558A70CC6375A93D7A0CDA0A8B59
Authority key identifier: BF:40:5C:0C:99:97:84:1C:8F:9C:68:80:1D:E0:51:8E:5A:C4:C2:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF405C0C9997841C8F9C68801DE0518E5AC4C209.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/323830343a313139633a666665303a3a2f34332d3433203d3e20323633343237.roa
Signing time:             Fri 09 Jun 2023 22:13:02 +0000
ROA not before:           Fri 09 Jun 2023 22:08:02 +0000
ROA not after:            Fri 07 Jun 2024 22:13:02 +0000
asID:                     263427
IP address blocks:        2804:119c:ffe0::/43 maxlen: 43
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:b3:8d:f6:aa:d5:55:8a:70:cc:63:75:a9:3d:7a:0c:da:0a:8b:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF405C0C9997841C8F9C68801DE0518E5AC4C209
        Validity
            Not Before: Jun  9 22:08:02 2023 GMT
            Not After : Jun  7 22:13:02 2024 GMT
        Subject: CN=BC7D78EF4D21B6F6B3F0ADA141EA435E6B145D43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:79:fc:4a:e6:70:ca:3d:5d:1a:c0:79:a3:a5:
                    86:74:4f:ed:a9:74:45:c5:c5:52:9c:78:ef:fa:1a:
                    53:7b:10:e5:9b:9d:d3:28:29:2f:a0:b2:a7:f3:da:
                    2d:ea:e4:36:fd:ef:43:87:19:3c:44:c2:ab:eb:6c:
                    16:04:50:41:72:b2:fb:c9:15:d3:24:b4:06:b0:04:
                    28:3c:4d:37:18:cd:74:71:0a:79:70:58:42:1b:87:
                    86:53:41:26:03:b3:50:2d:8f:1b:5b:c9:45:50:fc:
                    13:62:54:f4:a2:2d:42:38:55:de:e5:3d:9b:a6:77:
                    18:95:3c:43:be:c6:38:e8:1f:a1:8c:ca:bb:16:e7:
                    f3:23:20:c5:36:3f:82:17:80:bb:94:c0:a5:06:b1:
                    cd:c8:78:3d:09:65:10:8b:62:d1:28:a0:1c:9d:61:
                    45:d2:5f:db:f2:82:35:75:17:8b:73:8e:55:23:5a:
                    31:07:a6:b0:d0:38:c0:96:53:7b:1b:97:ed:6c:4a:
                    9a:40:91:a7:42:47:87:d3:8a:26:d4:ef:f9:fb:46:
                    4d:eb:25:ad:d2:b2:07:df:e4:4a:f7:30:3a:fe:27:
                    c0:15:d7:3b:54:ed:34:95:35:e3:62:e3:0d:4e:4c:
                    4e:99:6c:ef:7a:d4:e1:55:f4:a5:2d:43:f7:56:fd:
                    0f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:7D:78:EF:4D:21:B6:F6:B3:F0:AD:A1:41:EA:43:5E:6B:14:5D:43
            X509v3 Authority Key Identifier:
                keyid:BF:40:5C:0C:99:97:84:1C:8F:9C:68:80:1D:E0:51:8E:5A:C4:C2:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/BF405C0C9997841C8F9C68801DE0518E5AC4C209.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF405C0C9997841C8F9C68801DE0518E5AC4C209.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/323830343a313139633a666665303a3a2f34332d3433203d3e20323633343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:119c:ffe0::/43

    Signature Algorithm: sha256WithRSAEncryption
         aa:a1:d6:88:1f:6e:2a:24:08:0f:34:65:15:f3:0b:f6:7f:b7:
         ae:c0:b6:b9:bc:26:53:05:bf:5c:83:2f:b0:04:28:84:d1:17:
         19:eb:25:cd:26:3f:ac:81:44:81:7b:76:53:ea:ea:ea:a0:c6:
         66:a5:d2:25:9c:47:fc:56:26:6e:89:e0:73:8b:cc:ec:b7:e6:
         c1:d5:29:6a:d2:ac:40:99:41:46:6a:74:3c:47:59:17:b9:fc:
         62:51:f5:4a:7a:60:0f:4f:83:43:f0:62:ec:f3:53:ff:4e:d1:
         31:80:ef:ad:05:8b:35:e6:97:5b:88:e0:5d:e4:67:27:f2:45:
         b0:bd:7a:74:48:43:3c:8e:9b:28:90:95:1e:66:8d:a9:19:d1:
         ac:70:6f:68:43:34:9d:26:be:88:f9:fb:fd:e8:6c:d8:3b:65:
         fc:6d:ce:d6:69:9b:5b:a0:05:d7:c9:b1:53:19:b2:7d:34:eb:
         4d:37:04:a8:62:37:f3:bf:89:29:5b:cd:c0:19:4f:fd:bc:84:
         c1:53:1c:c2:30:0b:29:fd:19:e7:fc:71:23:5d:04:e3:59:6b:
         29:95:59:1c:f3:41:32:22:f5:81:92:b7:1f:33:91:13:85:4a:
         88:33:35:31:dd:09:0d:75:20:8f:bc:cc:99:2f:22:2b:a6:36:
         9f:f2:d9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:16:50 2025 by rpki-client