Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a333030303a3a2f33362d3336203d3e20323634313431.roa
File:                     323830343a316530633a333030303a3a2f33362d3336203d3e20323634313431.roa (raw, json)
Hash identifier:          ODn0izxzN+c/I1liTVHp1HPHYd1IeZIUF4gicqPerGA=
Subject key identifier:   21:62:96:19:84:C3:37:BA:4A:D1:AF:C5:AE:E3:50:DF:30:9B:59:B9
Certificate issuer:       /CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
Certificate serial:       7D0EB42BA334CF7B008691C72A006458B4AF5FB2
Authority key identifier: A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a333030303a3a2f33362d3336203d3e20323634313431.roa
Signing time:             Thu 02 Jan 2025 19:59:22 +0000
ROA not before:           Thu 02 Jan 2025 19:54:22 +0000
ROA not after:            Thu 01 Jan 2026 19:59:22 +0000
asID:                     264141
IP address blocks:        2804:1e0c:3000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:0e:b4:2b:a3:34:cf:7b:00:86:91:c7:2a:00:64:58:b4:af:5f:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
        Validity
            Not Before: Jan  2 19:54:22 2025 GMT
            Not After : Jan  1 19:59:22 2026 GMT
        Subject: CN=2162961984C337BA4AD1AFC5AEE350DF309B59B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:37:83:f2:57:02:b7:97:72:e1:72:97:7e:81:
                    a6:27:31:e7:5f:b7:72:13:69:3e:da:0c:4d:6d:2d:
                    0c:1d:59:1a:fa:68:8f:9a:36:fd:2e:76:11:90:dc:
                    93:a1:9e:74:3d:a3:9c:7d:aa:a7:11:00:bf:ce:73:
                    67:e4:c1:10:c6:48:af:dd:11:50:c4:38:8f:f4:ff:
                    cc:fb:97:1c:b1:db:1d:08:3b:b0:92:80:8d:d6:0d:
                    a8:9c:e5:0d:5f:1d:bc:9b:27:9a:17:96:06:86:62:
                    46:93:53:0c:ce:22:6d:cb:4b:f8:d0:fa:2a:f4:50:
                    15:34:27:8a:6e:df:79:44:07:28:c7:ee:66:5c:96:
                    90:c8:d4:d1:53:9e:57:bc:18:3f:16:ab:2e:eb:97:
                    6c:97:53:c0:53:e7:77:c3:f7:19:a2:6e:9d:a1:d3:
                    5d:cb:67:0a:1f:db:f0:cf:29:7a:8b:f3:78:73:84:
                    ef:90:68:71:88:c7:ec:32:97:5f:1d:17:8c:73:3c:
                    2e:d0:3f:27:b6:12:9a:37:07:77:8e:d5:8e:78:7c:
                    ba:da:df:68:55:ce:d2:4c:57:87:cf:fb:83:64:c6:
                    1f:f0:fb:15:6d:d6:7d:6e:5b:39:ac:ee:0b:9b:49:
                    f1:46:c8:13:fa:48:10:00:f6:c3:cd:81:73:5d:8d:
                    0c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:62:96:19:84:C3:37:BA:4A:D1:AF:C5:AE:E3:50:DF:30:9B:59:B9
            X509v3 Authority Key Identifier:
                keyid:A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a333030303a3a2f33362d3336203d3e20323634313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e0c:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         7d:e0:03:2d:ff:f0:46:ce:d5:b6:6f:eb:46:d1:4f:e2:65:24:
         f9:54:30:d1:c2:1f:28:7e:40:2b:17:ea:27:f6:1d:ff:ec:46:
         90:95:af:8a:f7:81:56:1d:4a:e3:31:fb:f8:10:0b:06:66:26:
         5b:8e:95:3e:6d:48:1d:b7:84:92:cb:11:49:d2:02:8e:0a:09:
         0c:ff:21:ef:54:7d:4e:07:c5:ca:91:fb:c3:cd:51:17:2b:7f:
         ef:a1:03:3b:8f:df:dc:ba:5f:9b:4d:27:58:6f:77:a2:9a:a6:
         ca:1e:bb:eb:5b:fb:d8:3f:aa:4b:3c:df:65:13:54:d9:a1:a8:
         9b:ee:ff:a2:d5:83:57:fa:9c:33:ef:b4:4b:aa:02:3b:14:e6:
         ca:fd:ac:82:61:4d:1e:98:8e:e9:fe:af:83:27:b2:af:da:ca:
         e6:e4:98:36:57:45:24:18:81:b2:4d:83:eb:ae:f7:97:fc:9a:
         37:e4:3e:6b:fe:6d:83:d4:6a:5c:60:58:f0:8b:3b:61:81:7d:
         04:62:44:b1:1d:06:52:ba:78:3a:0e:1e:75:66:bf:aa:26:af:
         9e:00:74:04:89:f7:ed:6b:92:0d:fc:62:16:8c:d3:18:ae:7e:
         cb:a2:8f:97:bf:31:b8:7e:3f:6e:d3:4a:1e:1d:89:ae:e1:55:
         c4:6a:c1:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:35:44 2025 by rpki-client