Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BCnhu5Fw7A74tcpnftQxbw5SKd6ZKiejSrCzYjbKmaxM/0/323830343a323761343a383030303a3a2f33332d3333203d3e20323633393134.roa
File:                     323830343a323761343a383030303a3a2f33332d3333203d3e20323633393134.roa (raw, json)
Hash identifier:          FqzbtutTgjS/2Pj+X9v1Dix/JAWU9AZMqoSM9Lu+DDs=
Subject key identifier:   80:64:D6:78:1D:A2:15:B9:DB:A7:8A:8B:C0:0D:16:9E:B7:B7:E3:2D
Certificate issuer:       /CN=7D024D482794E0E96397A274EC4071AD93013B55
Certificate serial:       2077BD5031104D6EB2F31E422A94A5C8467CF988
Authority key identifier: 7D:02:4D:48:27:94:E0:E9:63:97:A2:74:EC:40:71:AD:93:01:3B:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D024D482794E0E96397A274EC4071AD93013B55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BCnhu5Fw7A74tcpnftQxbw5SKd6ZKiejSrCzYjbKmaxM/0/323830343a323761343a383030303a3a2f33332d3333203d3e20323633393134.roa
Signing time:             Mon 15 May 2023 20:56:35 +0000
ROA not before:           Mon 15 May 2023 20:51:35 +0000
ROA not after:            Mon 13 May 2024 20:56:35 +0000
asID:                     263914
IP address blocks:        2804:27a4:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:77:bd:50:31:10:4d:6e:b2:f3:1e:42:2a:94:a5:c8:46:7c:f9:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D024D482794E0E96397A274EC4071AD93013B55
        Validity
            Not Before: May 15 20:51:35 2023 GMT
            Not After : May 13 20:56:35 2024 GMT
        Subject: CN=8064D6781DA215B9DBA78A8BC00D169EB7B7E32D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5a:44:3b:ca:7e:bb:e4:c5:b1:bf:09:f0:8b:
                    5a:c3:6a:eb:2c:5e:17:3e:64:65:d2:04:35:50:5e:
                    8f:48:fe:b3:63:e9:0a:c3:c0:3d:5a:7f:54:96:c1:
                    f2:aa:fb:72:88:41:c8:9b:a0:52:af:db:14:2f:92:
                    0c:8a:77:d3:61:ee:dc:99:36:8c:3a:e9:e4:7b:d3:
                    df:aa:86:2a:a5:42:1b:be:dd:7b:4c:4f:98:fe:93:
                    15:fe:3e:85:3d:7f:5f:da:57:ba:02:a2:27:e3:aa:
                    25:48:d6:10:2e:54:8b:97:77:ca:ef:26:72:97:ec:
                    28:67:9f:18:d5:d3:03:96:eb:7c:c2:3b:a9:f5:57:
                    14:6e:f5:c3:87:94:d5:b1:90:86:0b:13:f3:6f:1e:
                    ab:77:e7:f4:44:53:02:77:95:6f:f6:04:a8:52:86:
                    30:15:fd:ec:98:fb:8b:a2:ff:80:a6:5e:a8:86:91:
                    cc:95:46:ab:d3:66:9c:fa:e3:1c:1f:1d:13:4f:3d:
                    08:69:ab:c2:84:2e:19:3d:9a:3f:0e:bb:0e:70:bb:
                    23:47:29:8e:47:06:13:bc:c8:03:75:29:90:f8:6d:
                    11:ce:62:63:f6:3b:26:db:82:cc:7b:be:3e:d2:2c:
                    0e:d7:5c:65:fb:06:6c:ca:7d:1d:ce:86:34:6b:bd:
                    66:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:64:D6:78:1D:A2:15:B9:DB:A7:8A:8B:C0:0D:16:9E:B7:B7:E3:2D
            X509v3 Authority Key Identifier:
                keyid:7D:02:4D:48:27:94:E0:E9:63:97:A2:74:EC:40:71:AD:93:01:3B:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BCnhu5Fw7A74tcpnftQxbw5SKd6ZKiejSrCzYjbKmaxM/0/7D024D482794E0E96397A274EC4071AD93013B55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D024D482794E0E96397A274EC4071AD93013B55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BCnhu5Fw7A74tcpnftQxbw5SKd6ZKiejSrCzYjbKmaxM/0/323830343a323761343a383030303a3a2f33332d3333203d3e20323633393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:27a4:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         a8:39:c8:6f:5e:f2:97:6c:5d:fe:70:ff:0f:a1:34:0b:0b:bb:
         19:99:e7:ed:27:76:29:4c:a7:82:63:cf:b4:74:cf:af:9a:d8:
         44:83:f0:aa:fc:17:fe:e1:cd:f2:37:d7:81:f7:58:a9:9d:d1:
         b0:47:12:11:41:14:06:c0:a5:05:c9:1c:98:a6:e9:e9:4b:69:
         d1:6d:33:85:cf:2e:f8:1a:fc:89:ad:df:89:8a:b0:92:23:48:
         6a:24:3e:dd:f1:3d:26:98:ce:1c:ea:bf:3d:7c:fd:5b:21:0b:
         44:26:f1:84:51:b1:94:13:5e:94:bf:b4:f2:0e:58:80:22:b7:
         68:a3:11:2b:94:43:fb:22:7b:7b:b3:01:bb:f9:0c:49:dd:03:
         bf:10:6f:8c:29:79:ce:37:70:70:ad:56:99:34:a2:ca:b9:56:
         e1:04:38:a4:b7:72:70:f5:29:e4:19:82:e6:f2:5d:fa:44:73:
         9d:c9:70:8e:09:b5:42:d0:fe:44:a6:64:9c:34:c6:4f:59:51:
         5e:76:51:86:e1:45:61:ad:62:d7:08:cc:43:d6:94:1c:00:17:
         c6:8c:bb:af:dc:70:23:d0:4a:57:77:08:cb:cc:1c:b3:60:ce:
         a8:7d:22:4b:47:b6:88:b3:e1:b0:f7:26:2e:85:62:c5:e3:c6:
         45:66:1e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:23:40 2025 by rpki-client