Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a343630303a3a2f34382d3438203d3e20323634333434.roa
File:                     323830343a323637343a343630303a3a2f34382d3438203d3e20323634333434.roa (raw, json)
Hash identifier:          MSQfVDDh0AbTIHBu9m2IO0zQeA0CAf/gk+E1elwUKFo=
Subject key identifier:   0A:E1:A0:B8:A1:A9:26:26:42:60:7C:F3:13:67:47:35:40:2D:FA:57
Certificate issuer:       /CN=6F414F9210A10E5720E75030635478050D4C7C97
Certificate serial:       746149E174015ACC959C8DB5F223F4C35E3EA860
Authority key identifier: 6F:41:4F:92:10:A1:0E:57:20:E7:50:30:63:54:78:05:0D:4C:7C:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F414F9210A10E5720E75030635478050D4C7C97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a343630303a3a2f34382d3438203d3e20323634333434.roa
Signing time:             Wed 05 Mar 2025 20:56:24 +0000
ROA not before:           Wed 05 Mar 2025 20:51:24 +0000
ROA not after:            Wed 04 Mar 2026 20:56:24 +0000
asID:                     264344
IP address blocks:        2804:2674:4600::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:61:49:e1:74:01:5a:cc:95:9c:8d:b5:f2:23:f4:c3:5e:3e:a8:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F414F9210A10E5720E75030635478050D4C7C97
        Validity
            Not Before: Mar  5 20:51:24 2025 GMT
            Not After : Mar  4 20:56:24 2026 GMT
        Subject: CN=0AE1A0B8A1A9262642607CF313674735402DFA57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:23:05:98:95:6f:f0:d3:14:1a:60:58:7c:c8:
                    9d:fe:59:23:2e:8a:82:33:de:6a:50:7c:a5:3d:bd:
                    33:14:58:87:42:c8:30:ab:c1:6d:44:6d:82:2a:11:
                    48:dc:bf:dd:00:a7:54:62:29:07:bb:44:00:de:b3:
                    30:18:41:55:8f:e3:58:88:a1:69:2a:49:e5:cd:8c:
                    ec:33:48:fc:e4:c1:72:f8:5e:9e:11:1e:09:89:13:
                    12:7b:b9:cf:08:78:b3:0c:6b:c0:6a:61:54:35:01:
                    89:1e:11:0c:cc:93:eb:d3:77:f2:63:a1:e0:4e:8d:
                    3a:08:11:0a:3a:68:4a:8f:15:ba:ef:ce:66:4a:37:
                    cc:03:e3:7c:23:34:4d:c7:3a:e5:45:b2:31:71:f6:
                    e0:f0:47:15:7a:5b:12:60:16:de:bf:da:6a:39:f8:
                    ff:ec:0a:32:a0:b4:d3:d5:9a:d3:b4:43:d2:ae:30:
                    15:bc:54:1f:24:75:17:32:91:c8:a7:fe:d7:84:3e:
                    da:06:c2:d8:96:43:c4:c3:95:59:93:dc:ea:5d:ff:
                    72:a4:0a:23:01:d0:1f:72:a1:a8:aa:3e:01:fa:a7:
                    d1:11:65:c2:06:05:58:a7:c3:66:05:3b:19:a9:32:
                    92:89:6e:db:5b:aa:46:1e:af:0a:d1:de:8b:c1:9c:
                    17:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:E1:A0:B8:A1:A9:26:26:42:60:7C:F3:13:67:47:35:40:2D:FA:57
            X509v3 Authority Key Identifier:
                keyid:6F:41:4F:92:10:A1:0E:57:20:E7:50:30:63:54:78:05:0D:4C:7C:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/6F414F9210A10E5720E75030635478050D4C7C97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F414F9210A10E5720E75030635478050D4C7C97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a343630303a3a2f34382d3438203d3e20323634333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2674:4600::/48

    Signature Algorithm: sha256WithRSAEncryption
         3e:2f:e9:03:b3:4e:25:46:e0:38:c3:8a:88:b2:a7:87:b8:83:
         9b:ac:26:f8:27:71:7f:1b:65:8e:5d:c3:c2:8c:25:f2:be:9c:
         5f:4e:4c:33:66:d8:8c:75:9b:b7:a9:b5:65:b7:33:f8:60:33:
         f7:1a:ed:2a:79:2a:c3:c1:f3:99:11:fe:6a:76:3d:27:b0:6a:
         3d:05:35:18:e5:54:8d:63:80:6f:78:f8:fe:32:f7:b5:51:ca:
         25:fb:80:f0:70:96:c3:81:26:9d:e6:fc:6f:94:74:e0:f4:37:
         e1:59:cc:6e:68:53:7e:e3:cf:08:26:06:40:2d:aa:7d:ab:b5:
         5e:4e:75:d8:9b:b2:86:97:95:f3:27:02:45:f1:56:9f:6d:d5:
         a6:a2:fd:e5:6f:2a:8d:7a:cd:98:e6:d0:6e:d1:f5:43:07:75:
         85:a2:ad:b4:84:ad:60:50:57:83:50:69:21:f1:62:3d:ff:6b:
         65:f6:d9:60:d1:45:2e:8e:e5:f7:45:16:8e:7b:4f:69:9e:a6:
         21:cc:93:eb:2c:4b:3f:33:0a:5a:4f:21:e4:45:cd:ed:6c:e7:
         f4:db:a1:51:65:37:4b:b6:2a:f9:9e:e0:e1:36:b5:e8:08:4e:
         f8:bd:31:aa:60:7c:cd:b9:75:9e:35:e7:01:1a:05:a3:15:aa:
         5e:1a:95:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:15:27 2025 by rpki-client