Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/323830343a363936303a363830303a3a2f33372d3337203d3e20323730323636.roa
File:                     323830343a363936303a363830303a3a2f33372d3337203d3e20323730323636.roa (raw, json)
Hash identifier:          iMMO1wQEh+x7WcBxETjduYFfQdy/A+xke1rYKU5cMd0=
Subject key identifier:   42:17:F0:F7:3E:0D:B1:17:44:D3:AE:42:97:E1:98:CC:B2:99:D2:1A
Certificate issuer:       /CN=B2BE0210DA61E2A77EB0445E58A50E7DB64F06C4
Certificate serial:       10BE07F738EA043BA453A17A1B09411F864314AF
Authority key identifier: B2:BE:02:10:DA:61:E2:A7:7E:B0:44:5E:58:A5:0E:7D:B6:4F:06:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2BE0210DA61E2A77EB0445E58A50E7DB64F06C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/323830343a363936303a363830303a3a2f33372d3337203d3e20323730323636.roa
Signing time:             Tue 06 Aug 2024 13:40:08 +0000
ROA not before:           Tue 06 Aug 2024 13:35:08 +0000
ROA not after:            Tue 05 Aug 2025 13:40:08 +0000
asID:                     270266
IP address blocks:        2804:6960:6800::/37 maxlen: 37
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:be:07:f7:38:ea:04:3b:a4:53:a1:7a:1b:09:41:1f:86:43:14:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2BE0210DA61E2A77EB0445E58A50E7DB64F06C4
        Validity
            Not Before: Aug  6 13:35:08 2024 GMT
            Not After : Aug  5 13:40:08 2025 GMT
        Subject: CN=4217F0F73E0DB11744D3AE4297E198CCB299D21A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:54:ad:6d:90:f0:17:13:cc:92:5d:16:c1:fd:
                    b9:a6:69:7e:38:dd:be:e9:4b:20:00:99:9b:f6:d8:
                    81:1b:1f:3a:5a:bc:a7:5b:5f:c0:13:23:bc:34:33:
                    99:4b:35:5f:af:f1:8f:af:d7:e6:d0:0e:4d:15:8f:
                    dd:65:7c:a0:92:81:a8:12:d9:07:35:00:91:3f:81:
                    52:e6:33:63:ab:9c:ce:94:1e:75:27:0e:54:b9:b0:
                    d4:f1:04:34:8b:79:6b:76:a9:45:06:cc:18:70:c6:
                    04:bd:6e:ec:d8:a9:96:8b:89:2d:9c:62:03:92:5b:
                    3d:6c:75:fe:19:a7:4c:e3:e5:8d:fa:05:c6:07:09:
                    33:40:e8:1c:4c:d1:29:2f:4f:97:1c:cf:54:9e:d2:
                    19:1f:d1:bf:62:f1:64:69:34:6c:7a:55:91:86:0c:
                    e4:e3:07:07:06:62:b3:a2:2c:88:b2:1a:4f:18:88:
                    26:51:63:02:6d:b3:99:8a:44:1e:e3:d0:e9:97:a4:
                    85:e9:1b:70:99:39:63:c9:20:61:0a:0b:23:23:fa:
                    2c:b6:d3:33:50:1e:70:2d:2c:94:cb:70:3a:b3:a6:
                    ac:b6:12:c9:9b:a4:1d:d5:3e:cb:78:a4:18:6c:78:
                    36:6d:d8:19:f1:be:3b:de:f6:f7:b4:6d:f7:36:9d:
                    13:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:17:F0:F7:3E:0D:B1:17:44:D3:AE:42:97:E1:98:CC:B2:99:D2:1A
            X509v3 Authority Key Identifier:
                keyid:B2:BE:02:10:DA:61:E2:A7:7E:B0:44:5E:58:A5:0E:7D:B6:4F:06:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/B2BE0210DA61E2A77EB0445E58A50E7DB64F06C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2BE0210DA61E2A77EB0445E58A50E7DB64F06C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/323830343a363936303a363830303a3a2f33372d3337203d3e20323730323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6960:6800::/37

    Signature Algorithm: sha256WithRSAEncryption
         e9:ea:ba:5f:b0:d7:8b:65:cc:83:cb:4d:05:20:9b:aa:c2:0c:
         95:99:3c:f9:2b:f3:c1:a7:1d:47:bf:ad:4a:ff:16:ab:11:02:
         57:08:76:66:fa:a9:77:ae:0c:7a:2c:7c:cf:1b:09:e9:45:b9:
         3c:cb:4e:44:9d:ed:88:ca:5b:70:c8:32:2d:56:1f:e4:bc:ca:
         30:c4:dd:3b:7b:2c:db:d3:2c:e0:90:b2:e4:56:a3:3f:e1:66:
         c0:22:4a:9c:01:cd:c7:57:b7:70:32:a2:67:31:6c:15:0c:87:
         d7:c0:54:72:15:62:06:46:1c:b8:5b:da:0e:5f:11:1a:d6:31:
         a9:e9:a9:29:ef:5c:3a:4d:d5:b3:b6:72:c7:2d:58:c6:b6:86:
         0f:14:f1:19:fa:79:5a:d1:4f:5d:64:07:2a:5d:d5:6a:b2:02:
         06:73:58:d0:82:7c:4e:e9:14:8f:68:1a:b2:3d:6b:a7:01:eb:
         2f:20:a7:83:24:67:21:82:54:9f:8c:d8:dc:9f:dc:a0:bd:d8:
         8e:39:4d:b3:0e:be:a8:e0:e4:ee:c0:c2:cb:5a:77:55:82:86:
         b8:5f:48:b6:16:29:ce:7a:0f:9f:8a:28:91:0d:a7:1b:a7:1c:
         79:96:b4:71:07:1a:9f:81:53:ac:86:77:af:ab:da:fa:75:62:
         00:12:98:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:47:04 2025 by rpki-client