Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/0/323830343a323232633a3230303a3a2f34302d3434203d3e20323634353936.roa
File:                     323830343a323232633a3230303a3a2f34302d3434203d3e20323634353936.roa (raw, json)
Hash identifier:          A1096I3Fc1dD1Xg3zEW5U2ewCUxw54+JhCNaEEgImSs=
Subject key identifier:   D5:79:16:0B:DD:F8:05:7F:E7:0A:F0:B3:A1:35:67:DA:4F:FF:A6:63
Certificate issuer:       /CN=4AEB6F3B61C5B782C9DAF5018FF8C1DA7864215A
Certificate serial:       7F75B9EB66566F9672D2635765CEB1E2C310CAB1
Authority key identifier: 4A:EB:6F:3B:61:C5:B7:82:C9:DA:F5:01:8F:F8:C1:DA:78:64:21:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AEB6F3B61C5B782C9DAF5018FF8C1DA7864215A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/0/323830343a323232633a3230303a3a2f34302d3434203d3e20323634353936.roa
Signing time:             Tue 05 Mar 2024 16:05:40 +0000
ROA not before:           Tue 05 Mar 2024 16:00:40 +0000
ROA not after:            Tue 04 Mar 2025 16:05:40 +0000
asID:                     264596
IP address blocks:        2804:222c:200::/40 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:75:b9:eb:66:56:6f:96:72:d2:63:57:65:ce:b1:e2:c3:10:ca:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AEB6F3B61C5B782C9DAF5018FF8C1DA7864215A
        Validity
            Not Before: Mar  5 16:00:40 2024 GMT
            Not After : Mar  4 16:05:40 2025 GMT
        Subject: CN=D579160BDDF8057FE70AF0B3A13567DA4FFFA663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:0d:03:12:db:08:d6:a5:64:6b:21:85:67:fe:
                    1b:b7:48:4b:05:c9:3d:2a:bb:f9:98:b7:76:fa:6f:
                    7d:f0:21:29:48:3b:a7:5b:e3:c8:36:19:2b:d8:16:
                    fe:04:a7:3f:df:f1:32:f7:07:b5:81:1a:87:55:2b:
                    2f:d7:a3:b5:f7:72:5b:be:60:54:98:ad:01:0e:30:
                    9f:83:a4:d2:5b:ff:18:5e:d0:98:2c:8d:b9:93:82:
                    c1:b3:5a:28:1e:7c:07:46:2a:9a:d3:be:f2:0e:d9:
                    78:6e:8f:fb:f8:de:b5:f5:3d:fe:6b:bb:b8:93:89:
                    7b:28:42:bf:19:af:a3:b4:1c:55:b0:dd:2f:a7:83:
                    5e:1a:0f:1c:e8:31:23:f1:5b:35:50:5b:27:e4:87:
                    3a:7e:d7:f2:c7:3a:2f:05:42:07:3b:c7:ff:20:f1:
                    b8:ca:44:0a:cf:6c:7d:6c:05:53:c7:b7:0e:d7:e9:
                    82:62:53:62:b4:b9:96:81:5f:7d:af:c5:60:81:93:
                    ce:92:c1:94:00:6d:47:14:f9:02:99:63:8d:73:a0:
                    ad:65:b4:fb:e7:5b:99:12:44:07:c8:bc:4c:73:a8:
                    3c:a3:41:fd:33:30:56:bf:5c:1c:e2:f0:39:a0:db:
                    f9:2c:de:9d:37:d7:5c:49:44:e7:f3:0d:29:d7:3e:
                    82:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:79:16:0B:DD:F8:05:7F:E7:0A:F0:B3:A1:35:67:DA:4F:FF:A6:63
            X509v3 Authority Key Identifier:
                keyid:4A:EB:6F:3B:61:C5:B7:82:C9:DA:F5:01:8F:F8:C1:DA:78:64:21:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/0/4AEB6F3B61C5B782C9DAF5018FF8C1DA7864215A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AEB6F3B61C5B782C9DAF5018FF8C1DA7864215A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/0/323830343a323232633a3230303a3a2f34302d3434203d3e20323634353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:222c:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         c9:cb:e1:d2:b8:01:07:3a:fa:ce:fe:e7:1f:2d:82:32:bf:bb:
         3b:53:35:c7:8a:c1:89:77:de:b5:81:ac:67:21:7d:28:57:87:
         9d:f2:20:d7:f6:f2:6f:88:1f:99:d1:92:91:38:e1:1b:83:b1:
         77:91:2a:1f:27:28:0c:25:89:4e:8c:c9:8e:d2:c5:ab:43:94:
         fa:47:f4:ca:c9:cc:55:2a:ca:77:8b:64:21:74:30:4c:49:d2:
         6e:c7:7a:46:5f:16:7d:6f:85:d6:f7:91:63:dc:ff:ea:13:e3:
         1c:c9:5f:1f:a5:98:eb:3a:b7:44:29:8f:df:ee:93:3e:2f:d7:
         74:c6:ac:d6:cc:8c:68:a2:cf:68:41:0e:72:8d:4e:1c:f4:32:
         08:a9:fc:3a:d0:72:eb:23:0e:2b:1a:ee:95:0b:07:74:e9:4b:
         c2:21:cc:80:5b:e8:29:90:53:3d:fe:6d:8b:7e:e5:f9:4b:e9:
         7a:7c:c8:d9:3a:f6:6e:80:b9:02:3c:6c:1b:05:8d:7b:f4:6f:
         72:f0:ec:a4:ba:c5:a7:bd:fa:2a:5c:e4:ed:d7:a5:8e:6e:38:
         12:03:8b:fe:89:91:b1:6b:df:d6:e4:43:78:65:95:4b:c7:48:
         ff:e3:02:4d:c4:42:6d:1f:45:f9:37:11:1e:8b:c2:fd:0c:63:
         22:3d:38:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:26:32 2025 by rpki-client