Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/323830343a333036343a336230303a3a2f34302d3430203d3e20323634393438.roa
File:                     323830343a333036343a336230303a3a2f34302d3430203d3e20323634393438.roa (raw, json)
Hash identifier:          WUCm8vjikJ+qRXDFzgN9ddzJeaMPwJ1kPfSNl+0Gv00=
Subject key identifier:   34:28:9F:BE:78:2A:E0:EA:BA:F4:C2:73:DD:32:D8:30:A9:AB:05:90
Certificate issuer:       /CN=BC478768F2510E76FB1F8CDBCF5F948FD7A7C01F
Certificate serial:       7F0DEAEAAF112AC3D20ECC7A4DE7D74532DCF7A7
Authority key identifier: BC:47:87:68:F2:51:0E:76:FB:1F:8C:DB:CF:5F:94:8F:D7:A7:C0:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC478768F2510E76FB1F8CDBCF5F948FD7A7C01F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/323830343a333036343a336230303a3a2f34302d3430203d3e20323634393438.roa
Signing time:             Wed 15 Jan 2025 20:16:22 +0000
ROA not before:           Wed 15 Jan 2025 20:11:22 +0000
ROA not after:            Wed 14 Jan 2026 20:16:22 +0000
asID:                     264948
IP address blocks:        2804:3064:3b00::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:0d:ea:ea:af:11:2a:c3:d2:0e:cc:7a:4d:e7:d7:45:32:dc:f7:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC478768F2510E76FB1F8CDBCF5F948FD7A7C01F
        Validity
            Not Before: Jan 15 20:11:22 2025 GMT
            Not After : Jan 14 20:16:22 2026 GMT
        Subject: CN=34289FBE782AE0EABAF4C273DD32D830A9AB0590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3d:aa:81:c9:0c:f9:cf:12:23:e6:72:1c:0d:
                    ae:19:44:dc:f7:b0:9a:89:6c:b5:f8:9b:64:3b:a7:
                    a6:e3:f1:6f:e5:6d:ba:12:7e:24:ef:3e:f3:9b:eb:
                    52:07:f0:58:ef:89:28:51:cd:2d:63:23:bd:25:66:
                    8f:ba:bc:59:97:3a:9b:d3:a0:f6:53:e9:9f:8d:59:
                    9f:8c:c8:1e:4c:cb:11:67:7f:46:c7:b1:30:d9:a5:
                    b2:4e:62:91:05:80:6a:88:9c:fe:ac:1f:4f:af:5e:
                    5d:9a:47:f4:f4:8d:d2:08:15:3e:69:40:20:42:22:
                    e6:a7:80:e5:5e:c1:b8:ae:f4:60:f9:73:44:30:b6:
                    38:36:5a:1f:9a:9c:d5:3a:03:96:35:6c:c8:67:db:
                    39:81:3c:d9:65:38:1f:aa:09:0c:ff:c3:22:45:ee:
                    3e:86:3e:95:cb:a7:32:fc:0e:41:b0:11:2f:b4:7a:
                    46:56:0d:ec:e1:db:79:f2:51:3d:04:36:06:03:3f:
                    3d:3b:22:5f:64:1d:36:39:2a:8d:f6:54:1c:63:cb:
                    be:ce:5a:29:83:01:07:d3:cc:ce:0d:29:b3:81:30:
                    46:e6:db:b0:6a:c0:f1:dd:0f:b9:ec:0a:62:ea:9e:
                    d1:bb:68:95:40:f2:ca:08:75:14:70:a7:ab:50:78:
                    8b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:28:9F:BE:78:2A:E0:EA:BA:F4:C2:73:DD:32:D8:30:A9:AB:05:90
            X509v3 Authority Key Identifier:
                keyid:BC:47:87:68:F2:51:0E:76:FB:1F:8C:DB:CF:5F:94:8F:D7:A7:C0:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/BC478768F2510E76FB1F8CDBCF5F948FD7A7C01F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC478768F2510E76FB1F8CDBCF5F948FD7A7C01F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/323830343a333036343a336230303a3a2f34302d3430203d3e20323634393438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3064:3b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         9e:3e:11:40:fc:36:c9:59:05:39:df:ea:8a:71:c9:29:ed:8f:
         47:5e:08:14:5a:e3:5b:71:5d:62:7a:23:7a:53:7d:61:58:89:
         de:b7:1d:2d:b7:c4:d4:4d:76:54:a5:53:de:f8:06:47:56:a7:
         39:44:c2:7a:68:6e:0e:d5:a2:85:e2:f2:62:fa:e3:62:03:45:
         f0:bd:72:a2:dc:13:39:c4:d7:88:48:d9:fa:97:ba:bc:0a:a8:
         a2:87:a7:d3:31:ad:53:49:a1:fd:41:18:61:fd:66:c8:0d:6e:
         fd:4c:ea:a5:de:d9:2a:87:09:05:73:55:fc:63:cb:76:59:06:
         68:13:f2:cb:61:03:67:bb:98:ce:fe:c8:ee:a6:f2:e0:6c:23:
         b9:06:e1:fe:a1:d3:1c:ed:7e:b5:02:dc:03:58:b1:9c:05:90:
         5f:64:5c:96:60:9f:05:5b:45:4f:75:07:23:b5:b3:d5:d7:96:
         bb:b8:14:50:7f:b7:90:9b:13:a0:ad:bd:92:91:ea:70:59:ff:
         c2:ce:9f:4e:06:a6:f4:d2:0f:5f:72:a6:d2:1c:c1:70:f0:4c:
         47:81:4e:97:c2:a6:23:b3:1d:f1:39:be:1b:4b:9c:38:e5:50:
         cd:03:2a:12:95:42:f8:01:21:1b:96:88:dd:1a:bc:c3:9a:b5:
         0b:00:d8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:12:53 2025 by rpki-client