Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a353230303a3a2f34302d3430203d3e20323634333434.roa
File:                     323830343a323637343a353230303a3a2f34302d3430203d3e20323634333434.roa (raw, json)
Hash identifier:          OFVY3TXOS2Q111hMCJNQbfAx1IFmUyyyl1b5/G7NwB0=
Subject key identifier:   F5:C0:97:DC:B5:14:A1:61:8E:B6:56:24:D0:07:70:65:3A:C1:24:04
Certificate issuer:       /CN=6F414F9210A10E5720E75030635478050D4C7C97
Certificate serial:       1B965A57C2E2865B7DDF73926B026BE158612F0D
Authority key identifier: 6F:41:4F:92:10:A1:0E:57:20:E7:50:30:63:54:78:05:0D:4C:7C:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F414F9210A10E5720E75030635478050D4C7C97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a353230303a3a2f34302d3430203d3e20323634333434.roa
Signing time:             Wed 05 Mar 2025 20:56:24 +0000
ROA not before:           Wed 05 Mar 2025 20:51:24 +0000
ROA not after:            Wed 04 Mar 2026 20:56:24 +0000
asID:                     264344
IP address blocks:        2804:2674:5200::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:96:5a:57:c2:e2:86:5b:7d:df:73:92:6b:02:6b:e1:58:61:2f:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F414F9210A10E5720E75030635478050D4C7C97
        Validity
            Not Before: Mar  5 20:51:24 2025 GMT
            Not After : Mar  4 20:56:24 2026 GMT
        Subject: CN=F5C097DCB514A1618EB65624D00770653AC12404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:01:e2:66:3f:62:59:f8:6a:a1:68:c8:69:26:
                    ae:97:e8:ad:ee:4f:da:a6:15:ac:0d:2a:a3:8e:68:
                    f8:b6:43:c7:da:ec:ea:a1:ac:b8:06:4f:04:7a:ad:
                    32:87:1f:e8:a3:2d:d9:db:21:65:61:44:84:f7:c3:
                    f3:f0:8f:d7:c0:23:2a:e4:5d:35:49:50:d4:3d:7e:
                    d1:7a:dd:9c:12:aa:be:3c:fb:f1:e3:38:a4:bc:bc:
                    ca:03:ca:e0:ae:0a:e6:62:ce:cc:71:cc:e1:1d:13:
                    16:66:da:b9:d7:68:8b:c3:0d:1e:d5:8f:05:d5:a1:
                    e3:ad:c6:f7:5c:f1:97:78:06:90:cf:9a:0c:29:86:
                    8d:58:3a:e8:3f:b9:32:11:ff:f6:cd:92:8d:2c:86:
                    6b:13:e4:4a:94:af:af:2c:df:ca:36:ef:1e:fb:d5:
                    42:fe:ff:8a:f7:b7:84:3a:ba:4a:5a:da:1f:93:78:
                    84:86:25:b2:0a:e2:35:79:4f:7c:66:bf:22:04:b5:
                    4d:14:19:bb:3b:65:7e:f3:45:42:c6:a5:7a:04:66:
                    ae:ac:48:ec:9e:86:9e:a1:00:08:c7:0f:1e:92:02:
                    11:eb:78:15:55:1f:c4:c6:43:96:23:7b:c8:10:fa:
                    ef:bc:be:d7:da:98:e6:59:e0:e6:9b:d7:b8:91:a9:
                    a1:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:C0:97:DC:B5:14:A1:61:8E:B6:56:24:D0:07:70:65:3A:C1:24:04
            X509v3 Authority Key Identifier:
                keyid:6F:41:4F:92:10:A1:0E:57:20:E7:50:30:63:54:78:05:0D:4C:7C:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/6F414F9210A10E5720E75030635478050D4C7C97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F414F9210A10E5720E75030635478050D4C7C97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a353230303a3a2f34302d3430203d3e20323634333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2674:5200::/40

    Signature Algorithm: sha256WithRSAEncryption
         84:71:ad:5f:95:50:80:df:57:37:b0:55:a0:08:a6:05:c5:b5:
         08:dc:ba:7f:5b:49:f7:75:45:d6:8c:11:03:79:b5:99:12:06:
         d6:54:1e:ec:d4:e4:5c:79:02:0a:af:73:34:b5:7d:ed:a2:70:
         fe:d2:b6:dd:30:ba:81:e1:47:e1:57:07:9d:27:15:d1:e1:a7:
         15:a4:7e:23:6b:ca:c6:47:3a:0a:92:a3:8c:36:79:55:54:1a:
         c0:40:a3:b5:1a:ab:a8:9d:91:81:e1:f9:df:67:f7:74:e1:d0:
         74:8b:7e:45:cb:5f:0f:55:75:9b:be:de:94:65:a7:24:3f:ab:
         54:6e:51:20:89:d4:8e:e4:e3:18:68:bf:ec:35:4f:c3:f0:13:
         c9:35:72:ad:ef:6e:a7:ba:8d:90:a2:ca:cc:d2:e0:a2:e7:66:
         56:f9:1d:ec:c4:9a:74:d1:bd:d1:ff:44:af:62:1f:50:30:a3:
         56:af:63:4e:7c:04:24:2c:7a:5a:20:79:77:01:2d:17:55:a0:
         33:6d:f4:42:df:09:c4:23:b4:a8:00:b3:fa:1e:f1:ce:fd:0d:
         63:dc:06:33:e5:31:e3:52:41:06:5b:80:2d:f8:fa:b9:29:cd:
         d4:fc:3b:bc:78:e7:ba:21:a8:22:3c:80:a5:b5:d7:65:5a:3f:
         15:6b:26:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:46:32 2025 by rpki-client