Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a663030303a3a2f33362d3336203d3e20323634313431.roa
File:                     323830343a316530633a663030303a3a2f33362d3336203d3e20323634313431.roa (raw, json)
Hash identifier:          4HgRzq8WYsJc2mBWqy8WdF3epmMYYo/gPMrkd/N/gGY=
Subject key identifier:   1F:5F:02:39:5C:CB:F5:31:28:DF:D8:4A:AC:60:41:84:F1:26:89:95
Certificate issuer:       /CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
Certificate serial:       35F5872B01A3D021F67CF9A84F8B0E0D552BE56B
Authority key identifier: A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a663030303a3a2f33362d3336203d3e20323634313431.roa
Signing time:             Thu 02 Jan 2025 20:12:31 +0000
ROA not before:           Thu 02 Jan 2025 20:07:31 +0000
ROA not after:            Thu 01 Jan 2026 20:12:31 +0000
asID:                     264141
IP address blocks:        2804:1e0c:f000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:f5:87:2b:01:a3:d0:21:f6:7c:f9:a8:4f:8b:0e:0d:55:2b:e5:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
        Validity
            Not Before: Jan  2 20:07:31 2025 GMT
            Not After : Jan  1 20:12:31 2026 GMT
        Subject: CN=1F5F02395CCBF53128DFD84AAC604184F1268995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0c:f4:48:79:14:bf:ab:b1:b4:0f:37:71:2f:
                    a0:9e:71:71:b9:47:31:be:4a:30:f4:08:b1:2d:10:
                    6f:b3:e0:01:f1:60:d5:30:bc:e5:36:15:2f:b5:99:
                    33:f0:b0:8c:35:c4:23:a7:a2:74:95:69:67:05:22:
                    46:1d:e0:15:21:b8:25:f3:e4:df:d6:9d:e7:d4:17:
                    f9:a5:8e:cb:54:9f:24:61:8d:e0:8e:3f:e6:d6:a0:
                    65:ff:fa:92:d9:a0:6f:52:36:63:95:16:72:e0:97:
                    ca:0b:e9:c7:00:f6:f4:bf:cf:74:00:97:aa:20:c1:
                    8d:af:2d:bc:e5:de:c5:16:49:23:b2:41:a2:c6:01:
                    e9:cf:79:48:90:f2:20:c7:62:c2:18:7a:fa:e2:4b:
                    7e:eb:74:7e:f3:c2:5c:3a:f4:bb:d4:0b:f0:c7:b9:
                    cb:f1:d9:61:db:fb:a2:72:de:4c:1c:93:80:23:47:
                    ab:e3:e7:49:a4:2d:8f:ba:4e:22:cd:ca:24:e0:6b:
                    49:54:42:9b:2c:14:c9:a2:94:e4:aa:bb:80:74:3a:
                    61:53:98:a9:14:48:44:74:d7:07:96:c8:d6:91:13:
                    05:45:66:3a:dd:50:17:af:d7:a5:df:8f:a2:d2:3a:
                    d1:b2:ef:0a:77:b3:47:17:3e:ea:05:01:01:96:27:
                    c9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:5F:02:39:5C:CB:F5:31:28:DF:D8:4A:AC:60:41:84:F1:26:89:95
            X509v3 Authority Key Identifier:
                keyid:A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a663030303a3a2f33362d3336203d3e20323634313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e0c:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         3e:0e:b9:2c:bf:b7:31:c0:5c:fe:3a:dc:d9:0b:93:d8:c2:92:
         d1:08:ae:32:98:0b:ab:39:8e:1b:1c:2c:d5:3e:e8:a3:62:30:
         43:73:23:f2:9d:ec:ee:ce:79:80:19:8f:33:29:72:af:e2:45:
         b9:b0:99:57:50:9d:84:a8:b8:ab:02:4f:43:a8:07:5b:ec:cf:
         78:78:d2:3d:52:bb:5c:30:ac:aa:ac:f1:2e:4e:2c:e8:c6:49:
         78:b3:a3:84:a4:f6:c0:07:14:15:84:ea:c3:11:6b:86:17:43:
         44:6b:5c:2a:d9:ee:83:69:ea:4b:8c:e3:95:e0:36:6f:f1:d2:
         d6:05:e6:c6:99:c7:0f:e3:eb:ed:8f:99:84:46:d1:fb:e5:7d:
         5f:0d:15:12:05:65:11:56:87:2f:e6:02:7b:2f:d6:af:16:49:
         78:87:1c:c0:f0:e6:08:88:d9:c3:ab:6f:3d:74:d0:f3:01:35:
         46:18:1f:c9:e6:26:c7:68:fb:96:64:e9:87:67:f2:32:5b:ae:
         72:0a:d8:6f:cb:a5:33:03:93:34:3f:b1:b7:be:f1:6e:e2:20:
         20:03:e4:a6:c2:6b:19:6f:cf:9d:3d:0d:0a:a7:df:a8:4c:f1:
         02:43:1b:40:d5:e5:59:7f:76:b2:ec:1c:2f:09:30:11:d0:ef:
         50:fb:97:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:35:33 2025 by rpki-client