Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a633030303a3a2f33352d3335203d3e20323634313431.roa
File:                     323830343a316530633a633030303a3a2f33352d3335203d3e20323634313431.roa (raw, json)
Hash identifier:          E1DHQ1NynjW5SxjSSWfymke59KXNxvGUjNUB3YuR9Io=
Subject key identifier:   14:8B:FE:70:75:F0:CF:03:15:43:D2:F8:52:6E:70:79:7D:25:6A:49
Certificate issuer:       /CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
Certificate serial:       4B917515E8FE1AF8F03D29C2D64C92F83E71F409
Authority key identifier: A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a633030303a3a2f33352d3335203d3e20323634313431.roa
Signing time:             Thu 02 Jan 2025 20:10:55 +0000
ROA not before:           Thu 02 Jan 2025 20:05:55 +0000
ROA not after:            Thu 01 Jan 2026 20:10:55 +0000
asID:                     264141
IP address blocks:        2804:1e0c:c000::/35 maxlen: 35
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:91:75:15:e8:fe:1a:f8:f0:3d:29:c2:d6:4c:92:f8:3e:71:f4:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
        Validity
            Not Before: Jan  2 20:05:55 2025 GMT
            Not After : Jan  1 20:10:55 2026 GMT
        Subject: CN=148BFE7075F0CF031543D2F8526E70797D256A49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:81:ed:10:cc:cf:35:28:8b:23:c7:99:38:50:
                    a7:77:f5:be:46:89:4c:88:f5:43:44:c7:79:db:e6:
                    f7:8b:6a:cf:4e:54:d8:c5:b4:55:72:b1:60:8b:f7:
                    16:00:d8:c5:64:08:c7:be:dc:dc:d3:b0:75:2f:ff:
                    ea:16:93:15:72:a2:da:e7:a6:27:ab:f1:0c:f4:ad:
                    5c:4d:17:a0:32:49:a6:bd:b6:ac:da:47:50:61:5d:
                    7a:09:83:4c:19:39:e5:95:6d:da:81:d3:75:1f:1d:
                    ad:82:89:49:2a:65:d7:e2:7f:ca:cd:c4:f8:4b:ee:
                    70:53:e2:57:73:55:bd:ff:64:61:6e:3c:0c:d1:7e:
                    26:8e:cd:a3:5f:8a:c0:88:a2:a2:d6:97:79:92:7c:
                    3b:92:a5:07:a4:4a:c3:59:09:0c:a1:ef:a2:ff:c2:
                    db:6d:b2:76:8c:7d:93:5e:af:95:1c:87:82:f6:ae:
                    32:2a:ea:30:ec:cc:6d:34:1c:68:4d:9b:61:77:bf:
                    c2:34:4e:f5:0e:b2:0c:3c:e3:a8:38:4c:1a:67:69:
                    e5:02:47:53:0e:7a:dd:d9:ef:b9:1b:e4:6e:ec:e8:
                    9a:77:be:19:85:eb:0d:66:79:c9:91:d1:d3:6f:88:
                    53:0f:7f:14:9f:95:9f:bc:59:e9:6c:52:df:46:9e:
                    25:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:8B:FE:70:75:F0:CF:03:15:43:D2:F8:52:6E:70:79:7D:25:6A:49
            X509v3 Authority Key Identifier:
                keyid:A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a633030303a3a2f33352d3335203d3e20323634313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e0c:c000::/35

    Signature Algorithm: sha256WithRSAEncryption
         7b:27:1d:8e:32:0f:6c:a3:ed:e0:5b:da:97:19:b0:7e:48:0b:
         1d:e5:d2:af:5b:cf:60:d9:f8:35:b4:29:1b:d4:6f:a8:97:c8:
         d0:16:c0:8d:c5:cb:50:a0:dd:8e:f5:8a:ee:e6:56:42:29:59:
         34:db:47:dc:22:44:5a:63:2d:74:82:a4:05:b0:3c:cd:e0:c7:
         0e:3c:8d:8e:05:fe:a2:bf:11:0a:ed:0d:ba:ad:2c:09:eb:ed:
         ea:cc:af:a3:fb:42:be:7a:59:32:f9:df:1f:b5:fa:49:e2:6d:
         ed:f6:77:ec:91:0a:2a:b3:f7:b9:1a:03:03:f6:ce:31:de:fa:
         e2:7d:b4:26:89:01:f2:0a:04:ab:f9:5a:c5:b4:0c:bb:28:49:
         5c:5f:fc:bf:9c:59:ba:90:a2:60:60:dc:c7:57:1a:f3:24:d6:
         18:70:c7:ab:0c:dd:a5:19:2a:7b:a0:b1:1d:ef:e0:7d:21:92:
         e7:69:7e:ea:f9:a0:45:c3:cb:36:e9:6b:81:f1:49:d1:c5:0e:
         74:90:b4:23:9c:a2:25:d9:ea:00:80:61:4e:69:f7:e7:84:c9:
         a0:ae:7c:c2:ba:c2:fa:aa:ab:b7:92:09:78:15:c0:20:9c:28:
         e7:bd:f4:86:fb:ce:26:4d:61:c1:c3:1f:c4:72:88:47:02:8d:
         44:c3:89:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:34:09 2025 by rpki-client