Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BMUSYRu4t6eVwwmktEQjzGW4kjjXfFHnkTC1pTwZM7EF/0/323830343a316461633a3430303a3a2f34302d3430203d3e20323634333835.roa
File:                     323830343a316461633a3430303a3a2f34302d3430203d3e20323634333835.roa (raw, json)
Hash identifier:          5mDmeZJRfJ+NwddtSpxxGZwiGofVQEvb0HjyGfjpat8=
Subject key identifier:   94:2B:91:C1:8E:DC:94:5D:06:9A:A3:43:C1:A8:4F:9C:27:71:1B:3C
Certificate issuer:       /CN=F6040AB66B5057ADB8752A8F3320197F1323C253
Certificate serial:       110626FAB4A01CE4F38A3DA639280FA52073BA58
Authority key identifier: F6:04:0A:B6:6B:50:57:AD:B8:75:2A:8F:33:20:19:7F:13:23:C2:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F6040AB66B5057ADB8752A8F3320197F1323C253.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BMUSYRu4t6eVwwmktEQjzGW4kjjXfFHnkTC1pTwZM7EF/0/323830343a316461633a3430303a3a2f34302d3430203d3e20323634333835.roa
Signing time:             Mon 27 Jun 2022 18:39:39 +0000
ROA not before:           Mon 27 Jun 2022 18:34:39 +0000
ROA not after:            Mon 26 Jun 2023 18:39:39 +0000
asID:                     264385
IP address blocks:        2804:1dac:400::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:06:26:fa:b4:a0:1c:e4:f3:8a:3d:a6:39:28:0f:a5:20:73:ba:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6040AB66B5057ADB8752A8F3320197F1323C253
        Validity
            Not Before: Jun 27 18:34:39 2022 GMT
            Not After : Jun 26 18:39:39 2023 GMT
        Subject: CN=942B91C18EDC945D069AA343C1A84F9C27711B3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:b7:10:ac:00:b8:2d:9a:13:a6:23:40:7d:6c:
                    fe:ca:71:58:09:66:b3:2e:d2:eb:eb:5f:28:0c:cd:
                    c9:4c:e4:31:75:e4:12:2a:44:41:66:d4:44:13:3d:
                    64:9c:1d:c7:ae:89:82:64:3f:e8:8b:55:ff:ae:de:
                    28:d0:9d:28:4a:ba:72:27:ab:2b:15:9b:11:3d:4d:
                    61:80:c9:77:49:43:65:36:9d:d8:57:ac:93:08:1e:
                    63:16:53:7e:4a:d2:fb:72:53:74:4a:f3:ec:df:8c:
                    68:9e:03:00:28:6c:af:0a:3f:c2:4a:e3:d6:b8:5c:
                    3a:52:6d:30:8a:db:18:50:f4:76:f7:41:56:19:5e:
                    a2:8b:4d:cd:dc:84:47:0c:65:90:20:e1:b9:e5:1a:
                    2d:87:c3:d5:39:ff:93:31:8e:a8:8f:6c:8e:da:c8:
                    87:96:13:1c:61:3c:18:c2:28:19:49:0d:3c:ce:e7:
                    1c:63:21:46:c8:06:75:91:ba:93:db:51:cf:8a:b8:
                    c3:e6:9e:07:19:76:94:83:c8:c0:4f:82:b0:cf:05:
                    1a:51:fc:d2:06:e2:f0:b2:46:a4:40:6c:fa:42:82:
                    5e:e8:22:e0:c7:30:6b:2a:f6:db:e9:93:75:38:5b:
                    0c:7c:15:ce:d7:c0:57:5a:39:16:26:57:73:c2:49:
                    af:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:2B:91:C1:8E:DC:94:5D:06:9A:A3:43:C1:A8:4F:9C:27:71:1B:3C
            X509v3 Authority Key Identifier:
                keyid:F6:04:0A:B6:6B:50:57:AD:B8:75:2A:8F:33:20:19:7F:13:23:C2:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BMUSYRu4t6eVwwmktEQjzGW4kjjXfFHnkTC1pTwZM7EF/0/F6040AB66B5057ADB8752A8F3320197F1323C253.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F6040AB66B5057ADB8752A8F3320197F1323C253.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BMUSYRu4t6eVwwmktEQjzGW4kjjXfFHnkTC1pTwZM7EF/0/323830343a316461633a3430303a3a2f34302d3430203d3e20323634333835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1dac:400::/40

    Signature Algorithm: sha256WithRSAEncryption
         2d:3b:ef:ff:29:4f:25:1f:b7:57:f6:a1:6f:1a:52:5c:a2:d9:
         f5:3a:3c:d0:76:6e:d5:91:59:ad:93:42:a7:7f:b7:8a:6a:64:
         ee:4a:62:3f:0e:71:cd:2e:d6:a3:38:2b:20:75:86:6e:60:39:
         4a:61:e5:b4:80:00:0c:44:d2:84:92:e0:aa:e5:de:40:ae:f4:
         1f:76:8f:3b:30:f4:73:fc:7f:22:18:84:97:be:e0:5a:8f:84:
         4a:37:df:42:1a:dd:01:ca:66:b0:fc:fc:4f:e4:83:5a:b2:5d:
         76:f0:b3:59:aa:36:74:ef:1d:5e:93:88:a2:03:22:ee:5b:71:
         d9:d5:6b:6b:ae:39:bb:68:e5:8d:fd:81:c5:d6:62:15:9c:d0:
         7f:01:f5:e9:89:ec:8a:15:22:bf:1d:07:0a:75:04:8b:3c:3a:
         9b:96:d7:bd:83:bf:cf:6b:97:ba:39:3b:74:77:03:d2:1f:f9:
         33:38:df:2e:35:8e:64:65:8a:22:fa:70:e3:df:bf:c4:e9:b6:
         94:49:0b:96:3a:de:bc:f3:53:8a:d2:20:32:ba:00:7e:2d:40:
         83:d4:ed:90:9f:ae:da:f4:41:cf:88:4a:21:e1:97:c9:be:42:
         3e:e3:cd:74:c1:0e:c2:15:23:53:a3:3e:6e:0f:84:c6:77:d4:
         b5:cf:28:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:50:05 2025 by rpki-client