Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/1/323830343a336237633a3a2f33332d3333203d3e20323636313532.roa
File:                     323830343a336237633a3a2f33332d3333203d3e20323636313532.roa (raw, json)
Hash identifier:          6s6DcL2qgPS0vQOt7Ms9C2x5NhaFsIXYoKsglw74Lxk=
Subject key identifier:   E5:6D:BB:C8:2D:E6:9D:DA:DD:85:85:8D:A9:E7:B8:A5:4C:60:94:91
Certificate issuer:       /CN=BF741951CE72820C5CAEB22CA5BEBFBC47F41278
Certificate serial:       61E462D13FF5DD2E8F15E7894C5B0C7BC7B4B834
Authority key identifier: BF:74:19:51:CE:72:82:0C:5C:AE:B2:2C:A5:BE:BF:BC:47:F4:12:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF741951CE72820C5CAEB22CA5BEBFBC47F41278.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/1/323830343a336237633a3a2f33332d3333203d3e20323636313532.roa
Signing time:             Wed 01 Mar 2023 19:21:59 +0000
ROA not before:           Wed 01 Mar 2023 19:16:59 +0000
ROA not after:            Wed 28 Feb 2024 19:21:59 +0000
asID:                     266152
IP address blocks:        2804:3b7c::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:e4:62:d1:3f:f5:dd:2e:8f:15:e7:89:4c:5b:0c:7b:c7:b4:b8:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF741951CE72820C5CAEB22CA5BEBFBC47F41278
        Validity
            Not Before: Mar  1 19:16:59 2023 GMT
            Not After : Feb 28 19:21:59 2024 GMT
        Subject: CN=E56DBBC82DE69DDADD85858DA9E7B8A54C609491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:af:04:c4:17:41:12:64:70:a5:a0:61:9a:49:
                    1a:f9:7a:10:ff:9c:92:e4:69:07:35:9e:15:0d:56:
                    f0:d8:c9:23:f4:2c:02:65:91:ab:ee:38:69:49:3d:
                    b0:90:0e:9d:81:a4:8c:49:38:39:80:82:56:58:d5:
                    82:cb:34:d4:79:d0:5a:a0:63:08:92:af:f7:0b:6f:
                    12:f8:9e:37:73:2f:8b:5b:00:f0:ad:81:7b:70:ec:
                    05:2e:45:0b:2b:9f:76:e9:59:cb:b7:fc:e2:35:e3:
                    60:06:ca:5c:1f:50:27:40:fc:aa:17:93:b3:87:d8:
                    0f:52:8c:25:4e:2d:9e:00:0f:89:47:e4:fb:60:85:
                    b5:61:18:ab:dd:bb:a4:07:f3:9f:03:33:3c:3d:45:
                    a8:e3:ee:ba:e6:ff:f3:0f:9d:39:20:4c:b4:4f:e5:
                    2a:19:4c:3d:1c:62:42:b6:08:bb:39:51:5e:2a:0c:
                    ee:c4:ac:8d:03:56:af:46:56:cd:4e:5f:c1:f4:c5:
                    0b:3a:5a:34:a7:e3:69:c8:84:cb:4d:88:5e:8e:1e:
                    b8:79:ac:32:bb:60:23:6b:9d:a4:a1:82:60:af:b8:
                    a7:6a:5c:4e:75:f8:02:20:b8:c8:be:e7:df:cc:d7:
                    37:c3:5c:97:99:ec:95:29:7d:3e:5a:c6:73:11:26:
                    e9:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:6D:BB:C8:2D:E6:9D:DA:DD:85:85:8D:A9:E7:B8:A5:4C:60:94:91
            X509v3 Authority Key Identifier:
                keyid:BF:74:19:51:CE:72:82:0C:5C:AE:B2:2C:A5:BE:BF:BC:47:F4:12:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/1/BF741951CE72820C5CAEB22CA5BEBFBC47F41278.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF741951CE72820C5CAEB22CA5BEBFBC47F41278.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/1/323830343a336237633a3a2f33332d3333203d3e20323636313532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b7c::/33

    Signature Algorithm: sha256WithRSAEncryption
         38:16:6f:19:27:d4:3c:f0:64:ad:52:48:a0:66:7d:66:39:72:
         e0:ae:30:6d:f5:07:b3:11:61:9a:fe:66:0b:85:d6:e7:62:93:
         c8:14:15:b2:ab:95:93:6d:15:83:49:2d:6e:cb:c4:a8:c6:b6:
         c1:08:da:a3:ec:b4:ff:14:ea:e2:55:70:46:b3:c6:04:82:87:
         e4:51:04:77:3f:2e:b3:64:90:1b:57:4d:0e:be:47:a5:ab:f7:
         66:82:1d:8b:7e:d4:c2:00:50:f2:ad:64:3a:10:34:85:60:22:
         34:e8:b0:e1:21:fa:15:e0:ce:45:90:84:68:7a:42:4b:23:af:
         94:ce:8a:49:e6:0b:da:b1:a5:c2:c2:0a:f6:bc:1f:64:9d:84:
         8e:22:5a:1b:b7:cd:ad:18:22:3e:a0:22:1d:28:17:e0:ad:ad:
         86:8d:85:13:3b:56:ee:bd:cc:0f:fe:a9:d5:00:dc:eb:64:db:
         ef:04:f3:88:0d:d0:92:41:b5:08:20:d2:9d:e8:bd:a2:df:f0:
         46:86:dd:7f:5f:5b:2b:7e:38:56:15:c7:62:e9:40:c9:66:b1:
         74:bb:a4:63:9e:ca:04:a9:2e:1e:bb:d4:9b:0f:09:b3:eb:5b:
         25:52:72:3f:ec:04:a8:f5:b3:05:d4:96:c3:43:f7:0c:7f:56:
         23:42:d5:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 10:01:25 2025 by rpki-client