Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a346630303a3a2f34302d3430203d3e20323638303633.roa
File:                     323830343a323637343a346630303a3a2f34302d3430203d3e20323638303633.roa (raw, json)
Hash identifier:          ivxTN80KUx3MU3o3D0ug3DCODjNaBXkJAa8ehZc8eUc=
Subject key identifier:   BB:CD:95:2A:FD:BA:7B:86:61:03:D6:29:09:A8:35:56:20:4F:B0:B0
Certificate issuer:       /CN=988D9558519B864B89E9DBAD7B77E7BCCD06F82E
Certificate serial:       4CB5B519E95686054395C3F5AF4B1E4B39897741
Authority key identifier: 98:8D:95:58:51:9B:86:4B:89:E9:DB:AD:7B:77:E7:BC:CD:06:F8:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/988D9558519B864B89E9DBAD7B77E7BCCD06F82E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a346630303a3a2f34302d3430203d3e20323638303633.roa
Signing time:             Wed 03 Jan 2024 19:25:22 +0000
ROA not before:           Wed 03 Jan 2024 19:20:22 +0000
ROA not after:            Wed 01 Jan 2025 19:25:22 +0000
asID:                     268063
IP address blocks:        2804:2674:4f00::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:b5:b5:19:e9:56:86:05:43:95:c3:f5:af:4b:1e:4b:39:89:77:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=988D9558519B864B89E9DBAD7B77E7BCCD06F82E
        Validity
            Not Before: Jan  3 19:20:22 2024 GMT
            Not After : Jan  1 19:25:22 2025 GMT
        Subject: CN=BBCD952AFDBA7B866103D62909A83556204FB0B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:45:6e:17:d3:b3:e7:c0:a9:d4:73:50:d3:2f:
                    3f:e7:2a:5f:5d:bc:31:49:c3:cd:04:aa:27:c1:fa:
                    35:83:f8:b1:99:74:b1:a9:df:fc:9c:76:02:e3:ca:
                    86:80:a9:cc:f4:1b:6f:81:9f:e2:c6:18:f2:6d:44:
                    68:1b:62:6f:a3:98:82:9a:1c:0d:c9:53:db:5a:71:
                    8b:4c:a2:a7:31:8e:4b:d8:66:89:90:47:38:a3:03:
                    39:c1:ce:ec:c8:55:15:2b:49:6b:39:c9:0a:31:6d:
                    32:a7:91:e7:f1:6d:53:09:14:15:1d:9d:c5:e7:e5:
                    31:08:40:53:67:ac:42:b5:ff:45:05:c3:ea:0f:ea:
                    1d:00:35:e9:21:cd:14:04:fe:54:f3:1d:fe:f7:82:
                    dd:e6:7a:c7:fc:1c:cc:a2:30:0a:ac:7f:46:c8:a1:
                    20:d4:ed:cf:1b:0b:b8:23:cd:5a:43:a1:ab:81:95:
                    28:76:6d:67:07:8c:d0:e7:35:34:5e:88:f2:9e:b5:
                    60:98:cd:98:ac:ba:5d:29:7d:b6:b5:88:2c:82:8d:
                    d5:80:a3:95:e3:11:4d:47:38:15:77:41:32:1f:15:
                    e3:18:16:a2:3f:22:5d:d8:12:4d:71:fa:b8:93:42:
                    3a:7f:46:76:fd:86:21:aa:ea:f1:50:22:3c:a9:30:
                    6f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:CD:95:2A:FD:BA:7B:86:61:03:D6:29:09:A8:35:56:20:4F:B0:B0
            X509v3 Authority Key Identifier:
                keyid:98:8D:95:58:51:9B:86:4B:89:E9:DB:AD:7B:77:E7:BC:CD:06:F8:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/988D9558519B864B89E9DBAD7B77E7BCCD06F82E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/988D9558519B864B89E9DBAD7B77E7BCCD06F82E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a346630303a3a2f34302d3430203d3e20323638303633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2674:4f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         74:9b:4a:40:a4:12:84:e1:75:d6:dc:75:cd:d4:93:ba:32:bf:
         84:c5:2c:f9:25:40:6b:38:77:39:3f:22:b3:59:ea:e0:35:53:
         a9:34:b6:4e:02:1e:51:cd:ad:c2:32:8e:8c:7d:6d:59:1e:c6:
         1c:09:fc:2b:6a:37:ee:04:bf:f4:fc:3f:fd:1b:e8:03:18:cf:
         c6:08:09:2d:7f:6c:ca:40:48:f2:9f:9f:2d:f6:e1:f0:f6:b4:
         4a:5c:cc:b2:dd:3a:ce:ec:50:63:a2:aa:65:5a:a7:5c:4e:20:
         b4:5d:63:8a:c9:f4:7b:97:79:5f:e6:04:1f:44:cf:71:b4:1d:
         fb:8f:cd:f0:66:ee:9b:ca:e3:f8:e6:38:34:3c:32:2d:03:4c:
         be:82:67:a2:1e:29:c4:c2:75:c7:25:82:a6:e2:8d:b3:87:f3:
         e0:2c:fe:f5:f2:94:82:6d:e2:99:93:a3:2b:f7:51:12:d3:61:
         5b:5c:1e:38:f3:a4:84:7d:26:30:15:cf:de:77:0c:28:ae:44:
         aa:ab:7a:c2:cb:8f:86:9f:fa:fe:30:00:3e:15:e0:ed:09:7f:
         74:4a:b4:11:cf:18:5c:9f:e8:3e:82:2c:1f:32:0d:c8:19:7e:
         1f:f3:7d:1d:e0:c8:55:9b:0d:6e:b1:43:0c:e8:d7:7c:43:cf:
         d6:64:6b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:34:00 2025 by rpki-client