Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a643030303a3a2f33362d3336203d3e20323634313431.roa
File:                     323830343a316530633a643030303a3a2f33362d3336203d3e20323634313431.roa (raw, json)
Hash identifier:          UAKuN5Pa2drxQnNpwIq2puB4DSkz+oH3D7ZlAm4CkIU=
Subject key identifier:   C0:5B:A4:04:48:49:B8:4E:BA:D6:4E:E8:06:C9:35:B9:72:4F:4A:A4
Certificate issuer:       /CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
Certificate serial:       072808CB1B0EC4390E72C873F7F6C4B295856A84
Authority key identifier: A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a643030303a3a2f33362d3336203d3e20323634313431.roa
Signing time:             Thu 02 Jan 2025 20:11:33 +0000
ROA not before:           Thu 02 Jan 2025 20:06:33 +0000
ROA not after:            Thu 01 Jan 2026 20:11:33 +0000
asID:                     264141
IP address blocks:        2804:1e0c:d000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:28:08:cb:1b:0e:c4:39:0e:72:c8:73:f7:f6:c4:b2:95:85:6a:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
        Validity
            Not Before: Jan  2 20:06:33 2025 GMT
            Not After : Jan  1 20:11:33 2026 GMT
        Subject: CN=C05BA4044849B84EBAD64EE806C935B9724F4AA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:57:17:8e:51:70:7f:44:72:37:38:7a:b4:d8:
                    0c:a8:0f:95:41:84:b6:02:e9:ae:0b:cc:6b:c4:b8:
                    cd:c1:52:a0:0f:1d:28:2e:db:83:8d:2b:6d:2c:58:
                    2f:63:aa:d9:fb:74:09:2e:35:93:9f:bd:3d:15:0f:
                    b8:b7:46:9f:81:03:58:f8:18:35:75:10:95:5a:7a:
                    1d:19:a5:52:37:af:40:82:d0:65:e8:de:0e:57:a0:
                    7d:50:02:48:73:c6:87:8f:5e:ec:09:d4:cb:b3:c7:
                    ed:32:ed:31:25:ea:2c:19:2e:82:5c:eb:02:98:8d:
                    b4:78:c6:40:ba:72:bc:a7:46:d6:c1:d3:e0:5a:13:
                    d2:19:b5:85:1f:1a:ed:6a:24:c9:5e:dc:de:87:62:
                    ea:e2:52:f6:30:c4:17:0a:40:62:0f:98:50:01:76:
                    9d:00:c0:10:08:90:19:e7:dd:18:bc:56:8a:95:46:
                    49:47:e3:e5:ed:fb:6d:c4:e5:1d:d9:9b:02:53:fa:
                    9b:4e:9f:70:ff:86:e8:4e:fe:91:9b:7c:e5:17:88:
                    8c:e4:28:e3:af:a9:3a:e1:f6:3c:34:9c:f1:0e:78:
                    54:76:03:6e:e2:cf:b2:2c:9d:9f:31:1c:dd:6c:af:
                    15:c9:a1:e2:75:9b:6d:8c:3e:dd:b1:7f:81:05:63:
                    f8:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:5B:A4:04:48:49:B8:4E:BA:D6:4E:E8:06:C9:35:B9:72:4F:4A:A4
            X509v3 Authority Key Identifier:
                keyid:A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a643030303a3a2f33362d3336203d3e20323634313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e0c:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         58:7c:5a:8b:db:c4:fb:1b:c1:21:09:15:95:b1:6c:82:e8:6b:
         8d:4b:4e:05:0b:d8:36:e7:ad:bc:82:66:6e:22:e5:24:fb:c6:
         fd:36:5a:9b:ae:45:e8:04:a2:25:34:56:a5:59:30:21:98:b3:
         d1:c1:6f:f1:97:7a:92:91:b7:15:ba:ac:ec:24:1a:93:fc:6a:
         9e:56:c0:cc:16:c9:b3:ac:53:a0:0b:73:60:54:80:e2:65:54:
         d7:8f:9f:05:73:b3:6d:78:c2:03:f9:13:4d:7a:d7:80:33:7a:
         9d:a2:69:ea:85:97:2b:4d:11:2f:52:34:97:30:51:b4:ae:1e:
         c5:35:35:e3:db:cc:73:a5:b6:73:60:c7:6c:eb:29:4a:95:e0:
         b7:11:c6:f3:5a:5f:c2:84:74:e0:9c:a9:dd:83:e4:ee:1c:b4:
         65:83:31:65:d8:54:1e:52:cf:da:fa:41:40:6c:f1:3f:74:de:
         55:31:05:df:be:fb:6a:bf:2b:d9:e4:ff:2c:82:a6:71:81:53:
         be:27:2f:66:8e:71:02:f4:41:be:f7:c7:76:34:1d:fb:a0:53:
         ec:46:5a:9a:5c:f4:3e:b5:06:7f:ed:13:e5:e7:0a:b1:a4:62:
         10:79:1c:d4:b7:df:6a:d0:5e:06:b4:75:a7:43:c1:a0:40:71:
         47:3b:93:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:35:35 2025 by rpki-client