Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BHizJEZx9UDzjCQGJpFtcauRiB7aHb1LbnZakmmUb847/1/323830343a376336303a383030303a3a2f33342d3334203d3e20323731343932.roa
File:                     323830343a376336303a383030303a3a2f33342d3334203d3e20323731343932.roa (raw, json)
Hash identifier:          +xkja7nkD4xLFgknpU58zLjnfC3puyLteiKjUJTlChA=
Subject key identifier:   3D:93:0D:48:3F:FB:33:73:86:2A:43:95:09:21:6E:60:34:1E:69:1C
Certificate issuer:       /CN=0FF034B9BE86ED04F47C8E99B17FD22FD9B58BAB
Certificate serial:       211346DA41E3F4601A097C47803CBEF77B9CAC99
Authority key identifier: 0F:F0:34:B9:BE:86:ED:04:F4:7C:8E:99:B1:7F:D2:2F:D9:B5:8B:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0FF034B9BE86ED04F47C8E99B17FD22FD9B58BAB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BHizJEZx9UDzjCQGJpFtcauRiB7aHb1LbnZakmmUb847/1/323830343a376336303a383030303a3a2f33342d3334203d3e20323731343932.roa
Signing time:             Sat 10 Jun 2023 14:00:30 +0000
ROA not before:           Sat 10 Jun 2023 13:55:30 +0000
ROA not after:            Sat 08 Jun 2024 14:00:30 +0000
asID:                     271492
IP address blocks:        2804:7c60:8000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:13:46:da:41:e3:f4:60:1a:09:7c:47:80:3c:be:f7:7b:9c:ac:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FF034B9BE86ED04F47C8E99B17FD22FD9B58BAB
        Validity
            Not Before: Jun 10 13:55:30 2023 GMT
            Not After : Jun  8 14:00:30 2024 GMT
        Subject: CN=3D930D483FFB3373862A439509216E60341E691C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:4b:2e:8c:95:bf:70:82:0f:25:a0:ab:da:49:
                    4f:4d:1b:bc:8d:60:67:fe:00:f9:d2:8a:35:35:ab:
                    3e:02:7d:6d:5d:e9:6f:5f:d3:74:f5:8c:c4:c3:d9:
                    30:44:a7:43:ac:67:03:24:9f:f6:c6:12:0a:ae:9b:
                    93:1f:47:88:35:65:ca:b7:d0:52:42:b1:77:bb:24:
                    95:56:05:4a:a1:f9:dc:75:ee:67:ef:48:41:1c:74:
                    b7:6b:f0:6e:7f:d5:bc:e4:43:8f:24:02:88:cf:45:
                    b2:66:b2:e2:fb:4b:89:fa:bc:8c:7d:d4:24:fa:45:
                    a1:f3:f9:de:fe:25:b5:4c:c6:02:b9:e3:1b:45:5d:
                    cd:08:1f:14:de:7e:ce:10:a1:94:9c:32:e4:53:e3:
                    d5:ba:bf:2b:7f:58:0b:f2:1c:e2:07:db:51:7c:0f:
                    1d:82:8a:68:5d:ba:99:ab:0b:f7:7c:b9:92:01:18:
                    a5:22:eb:6d:54:53:d6:77:ec:90:eb:48:b4:a9:ff:
                    15:13:df:6c:d7:c6:c9:8d:ef:07:b4:5b:41:63:dc:
                    b3:fd:85:37:b0:1a:43:c8:7b:d5:24:7f:82:c7:97:
                    ff:2a:c9:6d:e4:0b:51:ac:9d:31:5c:d1:17:27:a6:
                    85:4b:67:8e:56:95:c7:13:61:67:c0:9d:cb:d1:09:
                    1e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:93:0D:48:3F:FB:33:73:86:2A:43:95:09:21:6E:60:34:1E:69:1C
            X509v3 Authority Key Identifier:
                keyid:0F:F0:34:B9:BE:86:ED:04:F4:7C:8E:99:B1:7F:D2:2F:D9:B5:8B:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BHizJEZx9UDzjCQGJpFtcauRiB7aHb1LbnZakmmUb847/1/0FF034B9BE86ED04F47C8E99B17FD22FD9B58BAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0FF034B9BE86ED04F47C8E99B17FD22FD9B58BAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BHizJEZx9UDzjCQGJpFtcauRiB7aHb1LbnZakmmUb847/1/323830343a376336303a383030303a3a2f33342d3334203d3e20323731343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c60:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         82:2d:c9:5b:c6:ab:23:94:f6:c6:f4:2e:0f:5e:d4:76:3c:8e:
         cc:d5:1c:60:8a:b4:69:26:85:98:00:9b:c0:fb:df:23:f2:99:
         0e:6c:3b:f2:ee:93:01:1c:2b:b0:60:17:47:64:ff:05:49:57:
         30:ae:49:27:34:42:bb:fe:95:22:7e:14:6c:0f:2e:f3:2a:dd:
         78:23:f2:bd:12:fa:e6:7d:6e:68:de:41:bb:c5:bf:23:50:86:
         03:72:79:b0:1f:37:3e:13:fa:af:c6:0d:af:62:ff:79:0d:1e:
         4c:b0:55:98:43:8c:98:07:c5:ea:70:d3:8d:98:04:8d:6e:23:
         6d:2f:fc:d3:27:b4:af:2b:2e:e9:1d:18:0a:96:25:17:b8:01:
         6d:94:a4:32:75:ce:a2:0a:2d:d8:eb:fe:15:f5:ed:74:32:a0:
         89:41:6d:b6:05:25:40:ad:70:2f:37:c2:95:ab:6e:f8:9b:af:
         3d:e9:0b:59:3a:1b:c3:e9:02:56:b3:de:24:d3:24:de:a5:9d:
         a2:4f:17:03:b5:9f:d9:c0:8b:9f:07:1f:a1:27:84:71:44:d2:
         2c:03:4b:f0:8b:af:f7:cb:b8:fa:a0:f9:7e:b9:e0:ff:4f:0c:
         70:db:4e:a4:06:98:4c:70:0f:54:d5:bc:5f:2f:b2:ba:90:1c:
         4f:7e:0d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:40:43 2025 by rpki-client