Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/0/323830343a323232633a3a2f33322d3332203d3e20323634353936.roa
File:                     323830343a323232633a3a2f33322d3332203d3e20323634353936.roa (raw, json)
Hash identifier:          ecGKIo3ZBGYE4t4NPlIG/fn83+F7P9HI7pWZJUEgEdM=
Subject key identifier:   8E:5D:07:CF:0C:F7:74:05:3C:29:C5:A2:ED:0A:3A:5A:12:03:1A:B2
Certificate issuer:       /CN=4AEB6F3B61C5B782C9DAF5018FF8C1DA7864215A
Certificate serial:       28DCC759212AABFF63661B9E546DD50878ACAC91
Authority key identifier: 4A:EB:6F:3B:61:C5:B7:82:C9:DA:F5:01:8F:F8:C1:DA:78:64:21:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AEB6F3B61C5B782C9DAF5018FF8C1DA7864215A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/0/323830343a323232633a3a2f33322d3332203d3e20323634353936.roa
Signing time:             Tue 05 Mar 2024 16:05:17 +0000
ROA not before:           Tue 05 Mar 2024 16:00:17 +0000
ROA not after:            Tue 04 Mar 2025 16:05:17 +0000
asID:                     264596
IP address blocks:        2804:222c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:dc:c7:59:21:2a:ab:ff:63:66:1b:9e:54:6d:d5:08:78:ac:ac:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AEB6F3B61C5B782C9DAF5018FF8C1DA7864215A
        Validity
            Not Before: Mar  5 16:00:17 2024 GMT
            Not After : Mar  4 16:05:17 2025 GMT
        Subject: CN=8E5D07CF0CF774053C29C5A2ED0A3A5A12031AB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2b:d5:11:86:20:aa:a5:9f:34:55:b4:63:c9:
                    ee:27:6c:33:79:9e:e0:91:7f:6a:64:5a:93:89:8b:
                    a1:9e:37:b9:c5:48:e9:44:d1:7a:2d:13:d5:01:4d:
                    8e:54:d3:48:2f:da:57:9f:8b:43:e4:11:cd:6f:f2:
                    5f:24:51:02:df:fd:58:30:2f:77:b1:83:fd:a3:86:
                    4b:2c:45:59:c0:26:e1:bb:c4:5d:e4:c8:38:46:38:
                    e3:d4:49:cc:6b:64:bb:67:cb:5f:7b:3c:97:4f:5a:
                    40:f0:2d:ea:06:32:11:99:d3:16:20:92:c8:ac:e4:
                    60:29:05:2a:42:50:b2:11:44:66:1c:ec:5b:35:9c:
                    9f:4f:c6:b1:89:73:10:65:2d:58:df:60:71:9a:b7:
                    ef:10:80:dc:d5:83:45:44:35:bb:c0:07:5f:28:fc:
                    dd:61:ff:3d:f4:d7:e5:3c:d1:08:ed:83:17:53:9d:
                    35:98:03:d5:bd:be:23:61:bd:b3:82:aa:13:e5:63:
                    45:98:a6:60:a8:2f:3c:3c:64:e7:56:2c:71:57:bd:
                    8b:1d:07:0a:a5:1a:0b:53:45:5f:9d:4d:bc:ed:39:
                    8e:05:f3:fa:88:2e:ae:88:36:12:fa:b1:8d:66:e3:
                    50:92:b6:bf:45:96:9b:e6:0e:2c:17:84:35:8e:f1:
                    a4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:5D:07:CF:0C:F7:74:05:3C:29:C5:A2:ED:0A:3A:5A:12:03:1A:B2
            X509v3 Authority Key Identifier:
                keyid:4A:EB:6F:3B:61:C5:B7:82:C9:DA:F5:01:8F:F8:C1:DA:78:64:21:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/0/4AEB6F3B61C5B782C9DAF5018FF8C1DA7864215A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AEB6F3B61C5B782C9DAF5018FF8C1DA7864215A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/0/323830343a323232633a3a2f33322d3332203d3e20323634353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:222c::/32

    Signature Algorithm: sha256WithRSAEncryption
         b7:cf:7c:20:45:40:f4:92:2b:e8:94:94:da:cc:df:65:a7:43:
         34:03:8d:b6:9b:dd:3e:4f:00:31:da:20:26:5c:af:78:91:c9:
         62:92:5a:e4:d4:ab:9a:ba:61:33:2b:01:75:08:e2:e8:8f:db:
         70:72:43:1a:21:dd:8b:0d:54:50:a9:49:74:91:e8:4b:52:73:
         25:6d:ad:c6:da:bd:3f:c1:1c:ff:0e:09:02:1a:7e:b8:7e:36:
         48:55:6c:38:1f:27:19:2f:a8:68:b6:a4:18:0b:82:22:e4:bf:
         f0:d1:b9:27:d8:7d:5a:74:fd:e0:6e:bc:7c:08:07:6c:39:37:
         95:22:5e:0f:10:17:bd:cf:ca:39:5e:ee:1a:88:e3:36:55:28:
         80:79:68:6b:b7:af:fe:73:b3:a8:34:a5:5f:ee:40:7e:52:03:
         c7:a2:00:e0:c2:9d:87:d1:d5:db:25:97:58:21:ed:3c:10:ed:
         43:77:c9:ec:78:a4:ae:2b:5c:0d:21:20:03:cb:77:e3:ab:7f:
         58:1d:7b:7b:62:40:d7:57:f9:18:33:47:71:ab:e8:21:81:4b:
         a4:66:ed:09:d7:80:4d:3d:9b:5c:55:be:08:d8:8f:cd:f7:6c:
         1a:d7:8c:45:b5:5d:72:55:4d:c5:e7:bc:1d:e9:1b:7b:12:94:
         3d:38:69:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:57 2025 by rpki-client