Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a343730303a3a2f34302d3430203d3e20323634333434.roa
File:                     323830343a323637343a343730303a3a2f34302d3430203d3e20323634333434.roa (raw, json)
Hash identifier:          rFg1wNwVGlR4pZQDK3iCo7tIx5LoQsvQusHNJkDG2c8=
Subject key identifier:   A6:86:14:F7:E2:6A:9A:9C:FF:08:BC:CC:3D:57:2C:B5:CC:6D:DD:67
Certificate issuer:       /CN=513CE4A81796F944497410B832C764D2FEF2E43A
Certificate serial:       12D2442CBD6DDAAC4EA0C8C88AF37A50C599217F
Authority key identifier: 51:3C:E4:A8:17:96:F9:44:49:74:10:B8:32:C7:64:D2:FE:F2:E4:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/513CE4A81796F944497410B832C764D2FEF2E43A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a343730303a3a2f34302d3430203d3e20323634333434.roa
Signing time:             Wed 02 Oct 2024 14:58:25 +0000
ROA not before:           Wed 02 Oct 2024 14:53:25 +0000
ROA not after:            Wed 01 Oct 2025 14:58:25 +0000
asID:                     264344
IP address blocks:        2804:2674:4700::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:d2:44:2c:bd:6d:da:ac:4e:a0:c8:c8:8a:f3:7a:50:c5:99:21:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=513CE4A81796F944497410B832C764D2FEF2E43A
        Validity
            Not Before: Oct  2 14:53:25 2024 GMT
            Not After : Oct  1 14:58:25 2025 GMT
        Subject: CN=A68614F7E26A9A9CFF08BCCC3D572CB5CC6DDD67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d3:2c:f8:7c:e0:2e:19:73:03:42:fc:34:de:
                    38:06:15:01:9e:7e:68:da:3f:f9:5d:30:34:3c:b7:
                    3b:75:81:22:f3:e8:99:ed:c8:bb:00:c4:54:77:ea:
                    cf:e1:5e:b3:8b:a7:d2:f8:c8:ed:b4:0f:68:84:1b:
                    57:29:1c:3a:7e:fb:db:6c:59:75:f2:ad:cc:bd:58:
                    37:21:67:9c:10:17:4c:3c:2e:da:e8:2f:ef:13:0f:
                    d6:e3:38:63:69:83:96:f3:4c:13:93:9f:ae:db:58:
                    e5:34:89:7f:ee:e8:5f:51:0e:87:21:e9:da:a4:e5:
                    f9:90:bd:ee:94:d8:66:bb:79:f1:1b:ae:fe:50:3f:
                    18:8a:17:58:2f:e2:a4:fb:73:16:0a:9d:99:06:3c:
                    77:e9:16:6c:fa:7c:39:c9:93:d3:c6:ca:3f:21:f1:
                    11:c7:41:10:5f:eb:89:ca:0e:bf:45:e8:d4:7c:d4:
                    98:1c:5a:fe:13:02:02:36:ee:75:6a:7f:16:bb:1b:
                    d9:ac:c9:e5:cb:d7:85:f3:cc:ed:a0:9b:e5:a9:6e:
                    7c:7b:fd:23:67:0a:99:f1:8c:45:4d:ae:d4:17:4e:
                    1f:18:83:ca:d4:b3:27:fc:2c:db:ab:c1:df:81:55:
                    89:1d:cf:52:a2:6f:1b:9c:00:d5:3e:46:12:c4:7b:
                    2c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:86:14:F7:E2:6A:9A:9C:FF:08:BC:CC:3D:57:2C:B5:CC:6D:DD:67
            X509v3 Authority Key Identifier:
                keyid:51:3C:E4:A8:17:96:F9:44:49:74:10:B8:32:C7:64:D2:FE:F2:E4:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/513CE4A81796F944497410B832C764D2FEF2E43A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/513CE4A81796F944497410B832C764D2FEF2E43A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a343730303a3a2f34302d3430203d3e20323634333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2674:4700::/40

    Signature Algorithm: sha256WithRSAEncryption
         13:f1:c2:3c:e0:31:6f:a7:d9:9a:d6:47:95:84:e6:fc:b1:28:
         ca:6b:0b:3b:79:6c:3b:f5:19:ac:9d:3f:02:30:ce:c6:96:d2:
         ed:71:11:8f:fe:f4:32:06:7a:34:68:7e:5a:9d:92:61:eb:7e:
         f6:7b:1c:e6:49:cc:43:c3:db:f9:80:b2:39:24:f8:23:aa:14:
         26:44:02:c2:99:2d:76:d5:3b:17:cc:ec:52:c0:fe:92:f4:58:
         9d:2c:07:31:f0:79:f7:9c:66:6d:61:59:61:e8:a7:3a:05:2b:
         4b:b1:52:3a:0b:8f:c5:88:05:06:e7:13:73:cf:14:a2:30:77:
         36:01:eb:c4:75:dc:32:50:11:4e:10:a6:08:d8:91:2f:ae:d8:
         05:fc:92:8b:61:02:50:ac:c5:ac:47:72:9a:ad:62:ea:46:05:
         a9:6f:64:89:63:89:a3:6c:73:68:02:cd:af:2b:fa:f1:6e:1f:
         f7:31:af:d3:47:06:85:7d:fd:f3:9a:d4:f5:a4:1e:95:a6:21:
         d4:da:af:31:24:8e:f9:d5:1f:d7:1d:36:71:32:fe:47:b6:35:
         61:c3:9a:68:35:de:ae:25:4e:6c:0f:d4:2c:1b:ac:20:7d:37:
         d6:b1:39:96:77:0d:5e:a6:da:93:6d:6f:9d:a9:e8:d1:00:b5:
         2a:f5:b7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:34:59 2025 by rpki-client