Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/323830343a363936303a353030303a3a2f33362d3336203d3e20323730323636.roa
File:                     323830343a363936303a353030303a3a2f33362d3336203d3e20323730323636.roa (raw, json)
Hash identifier:          cVu6M2DkLk0im4xq5hoLxbppXbnf/VUPFx8EbLdFThA=
Subject key identifier:   79:07:FA:7C:07:43:F7:5D:A1:06:5D:78:48:06:B8:D8:CD:DC:69:AF
Certificate issuer:       /CN=B2BE0210DA61E2A77EB0445E58A50E7DB64F06C4
Certificate serial:       33459B915EFD7A7778492DE7F2051A82271AF676
Authority key identifier: B2:BE:02:10:DA:61:E2:A7:7E:B0:44:5E:58:A5:0E:7D:B6:4F:06:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2BE0210DA61E2A77EB0445E58A50E7DB64F06C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/323830343a363936303a353030303a3a2f33362d3336203d3e20323730323636.roa
Signing time:             Tue 06 Aug 2024 13:39:53 +0000
ROA not before:           Tue 06 Aug 2024 13:34:53 +0000
ROA not after:            Tue 05 Aug 2025 13:39:53 +0000
asID:                     270266
IP address blocks:        2804:6960:5000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:45:9b:91:5e:fd:7a:77:78:49:2d:e7:f2:05:1a:82:27:1a:f6:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2BE0210DA61E2A77EB0445E58A50E7DB64F06C4
        Validity
            Not Before: Aug  6 13:34:53 2024 GMT
            Not After : Aug  5 13:39:53 2025 GMT
        Subject: CN=7907FA7C0743F75DA1065D784806B8D8CDDC69AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:73:aa:39:ab:b9:d3:19:dc:7a:98:cf:c4:cc:
                    d0:92:0e:0a:dc:c5:0d:8f:3a:94:d7:b0:ef:93:13:
                    c4:55:62:03:88:70:d5:0e:99:ac:db:b9:58:2f:c3:
                    c8:b2:da:3e:1f:ed:07:5e:09:da:20:80:e4:9b:8b:
                    4a:2f:0f:ea:31:09:da:8f:fd:3c:31:b7:f3:ed:19:
                    9d:7c:8f:66:aa:94:6a:60:38:09:c0:75:1f:0f:d5:
                    23:6d:78:a3:0e:0b:86:dd:d5:50:2f:90:d6:92:84:
                    7b:96:27:04:19:17:92:d5:66:f2:5f:20:62:71:ee:
                    1e:da:1e:d7:80:45:81:f2:a5:b4:0f:ba:90:c4:9f:
                    2b:eb:04:ac:2d:5d:66:bf:0a:a8:0f:53:1b:f6:bf:
                    84:1a:a5:03:92:c3:e2:ff:5e:90:47:0d:6a:eb:37:
                    ee:08:7e:e8:b1:8f:e5:ab:7e:11:1f:03:60:63:fb:
                    11:cd:17:26:41:d4:c8:e1:99:75:31:49:ec:c4:8d:
                    75:85:bd:49:d1:73:24:23:8a:cd:44:9c:98:b5:7e:
                    3f:56:84:01:6e:46:2f:49:93:16:e3:39:6b:73:ea:
                    3e:e5:36:11:b9:17:53:82:98:12:b2:c9:7f:ed:30:
                    02:02:0b:e6:58:a8:95:f9:8e:6c:6d:f9:1b:d3:61:
                    11:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:07:FA:7C:07:43:F7:5D:A1:06:5D:78:48:06:B8:D8:CD:DC:69:AF
            X509v3 Authority Key Identifier:
                keyid:B2:BE:02:10:DA:61:E2:A7:7E:B0:44:5E:58:A5:0E:7D:B6:4F:06:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/B2BE0210DA61E2A77EB0445E58A50E7DB64F06C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2BE0210DA61E2A77EB0445E58A50E7DB64F06C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/323830343a363936303a353030303a3a2f33362d3336203d3e20323730323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6960:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         24:7b:42:6c:9c:dd:a2:7e:ce:0b:03:74:cc:93:c1:6f:78:f7:
         72:7c:aa:47:31:1c:37:6f:81:bd:3f:0f:a9:08:2c:3e:a8:9b:
         7b:cb:47:ad:ad:75:ca:9e:39:3c:a8:00:67:9a:fd:25:22:97:
         ca:ce:5f:09:74:b1:c0:67:2a:b0:f8:5c:6b:58:6d:70:f4:88:
         04:a9:3f:82:e3:38:03:67:f3:70:ed:a8:e6:70:e6:b9:02:c2:
         f2:44:ee:a5:ea:75:fe:b4:b6:a2:30:cb:26:94:32:67:fc:e1:
         05:71:d3:70:a0:58:ef:9e:ac:d1:12:4c:74:ee:2f:3e:2e:2d:
         17:a2:7c:c5:a4:18:7a:20:f0:7e:73:15:aa:e6:77:be:1c:f9:
         e9:aa:7e:6d:ff:9e:e6:ed:14:db:44:65:c5:c5:c6:36:ea:6e:
         51:74:95:a6:18:44:79:4d:8a:9c:f5:12:da:6e:3d:e1:9e:2b:
         c8:02:3a:16:f8:6e:05:6a:72:bc:37:57:32:74:47:79:b2:75:
         04:34:96:0e:e7:7f:1e:cc:19:1e:ce:da:7f:4f:f3:7c:16:c4:
         e7:3d:d3:ba:22:db:f7:85:1c:49:d2:0a:70:62:b2:35:42:77:
         b2:ca:a4:23:12:0e:d5:72:b7:94:88:9b:a2:4c:1b:63:49:b1:
         a6:86:bd:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:09 2025 by rpki-client