Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/0/323830343a353737633a3a2f33362d3336203d3e20323638303638.roa
File:                     323830343a353737633a3a2f33362d3336203d3e20323638303638.roa (raw, json)
Hash identifier:          OKQzEQphQODwUoAIEepD6yen5C5rp2ZpDkbsoWQZClE=
Subject key identifier:   B7:D6:60:BA:CF:06:8B:F8:E4:1A:B4:F6:58:D9:61:EA:BE:3C:88:CC
Certificate issuer:       /CN=BAEE190B65B2228090D515B7CF62B6AEAC2F5270
Certificate serial:       2A4FB3C13CA01E1B0ACD970A02B26E0551E5B36B
Authority key identifier: BA:EE:19:0B:65:B2:22:80:90:D5:15:B7:CF:62:B6:AE:AC:2F:52:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BAEE190B65B2228090D515B7CF62B6AEAC2F5270.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/0/323830343a353737633a3a2f33362d3336203d3e20323638303638.roa
Signing time:             Wed 17 May 2023 14:42:42 +0000
ROA not before:           Wed 17 May 2023 14:37:42 +0000
ROA not after:            Wed 15 May 2024 14:42:42 +0000
asID:                     268068
IP address blocks:        2804:577c::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:4f:b3:c1:3c:a0:1e:1b:0a:cd:97:0a:02:b2:6e:05:51:e5:b3:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAEE190B65B2228090D515B7CF62B6AEAC2F5270
        Validity
            Not Before: May 17 14:37:42 2023 GMT
            Not After : May 15 14:42:42 2024 GMT
        Subject: CN=B7D660BACF068BF8E41AB4F658D961EABE3C88CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:2e:c6:f5:34:b5:ee:c8:aa:e8:78:47:cd:6d:
                    39:56:70:be:3e:a4:6d:59:52:41:e0:0c:9c:f3:bd:
                    66:9d:61:37:fd:c0:bb:20:92:2f:6d:8b:27:a3:eb:
                    ff:37:91:a1:5e:da:2c:81:54:9a:49:95:cd:c6:0f:
                    af:ce:d8:e8:24:cf:3b:31:e1:6a:44:6a:a0:e0:06:
                    36:64:e0:2a:76:af:58:fd:36:6c:da:51:d6:39:8c:
                    0f:3b:41:92:28:5a:6c:18:ad:d2:80:37:34:f3:a2:
                    d0:8f:16:83:35:a2:69:d1:60:d2:77:d5:df:27:02:
                    3e:37:ba:42:de:a0:09:62:47:7a:a2:7e:6a:65:1a:
                    a2:7b:db:1d:66:ad:3f:80:6c:56:27:17:d3:d9:cc:
                    8e:f8:61:31:a6:01:61:ff:7b:eb:be:b1:f3:d9:80:
                    ab:27:5c:dd:2b:c3:d1:97:ed:05:44:64:21:67:54:
                    bf:45:16:5a:6e:b5:02:40:bf:68:00:3d:2b:3e:b2:
                    65:f8:8c:75:1a:41:42:a5:ae:0f:24:42:83:ce:d9:
                    00:b6:e4:d3:e3:5b:ea:05:29:22:54:c7:e7:23:8f:
                    d1:6e:8d:e0:fd:66:c3:27:77:f5:23:4d:79:fd:13:
                    d0:4e:2d:7c:ae:ad:12:2f:e7:3e:fe:b7:f7:5f:96:
                    45:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:D6:60:BA:CF:06:8B:F8:E4:1A:B4:F6:58:D9:61:EA:BE:3C:88:CC
            X509v3 Authority Key Identifier:
                keyid:BA:EE:19:0B:65:B2:22:80:90:D5:15:B7:CF:62:B6:AE:AC:2F:52:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/0/BAEE190B65B2228090D515B7CF62B6AEAC2F5270.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BAEE190B65B2228090D515B7CF62B6AEAC2F5270.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/0/323830343a353737633a3a2f33362d3336203d3e20323638303638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:577c::/36

    Signature Algorithm: sha256WithRSAEncryption
         c6:35:05:0b:87:dd:25:3d:7a:e8:2c:bc:14:a2:85:46:3d:c5:
         97:4d:24:d3:f0:b8:93:d8:30:29:97:fa:e1:f6:75:c2:02:9b:
         5a:bd:f3:e9:d0:87:8a:59:79:e8:d2:ca:29:d0:48:fd:d4:aa:
         0c:ed:48:65:c3:4a:15:a2:d9:de:a0:85:37:80:25:6f:13:35:
         19:56:53:87:53:66:c1:7d:d0:6b:da:ad:6f:51:cf:77:08:32:
         cf:82:39:63:21:48:ef:3f:bf:63:8c:d4:28:72:91:a1:e6:61:
         04:0e:95:87:2c:ca:a2:a6:59:18:0f:0c:39:f8:7b:a6:c3:04:
         1f:c5:f8:99:95:2f:b6:07:24:9d:ed:2d:3d:51:db:4b:bc:bc:
         62:d5:ae:4b:2a:51:13:05:a6:35:48:a0:bd:8e:48:61:95:73:
         1f:29:9d:84:d3:da:6c:b4:51:fe:31:d5:f2:bc:cb:d3:7f:44:
         63:f6:d3:6d:f7:0d:0e:99:87:f7:4f:d6:3c:2e:da:10:5f:c3:
         4e:d0:98:f9:23:12:ed:76:aa:ff:d0:ca:ca:7e:c2:33:11:0e:
         19:38:f9:e8:c3:11:7d:c1:74:78:dd:16:66:f3:11:e8:ce:56:
         62:0d:2a:ca:24:91:a3:85:27:59:94:27:25:93:05:8c:fb:4d:
         26:2f:ac:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:03:23 2025 by rpki-client