Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BNFHc1ceHLydoLmVHqcfEBBB4whXw9v7xZkZ7fq9Vi56/0/323830343a373563383a3a2f33332d3333203d3e20323731303639.roa
File:                     323830343a373563383a3a2f33332d3333203d3e20323731303639.roa (raw, json)
Hash identifier:          5ZX6KXtpbtjUP3lWQ8jTyY3LgHDqLbxkfFxpQr6k5zs=
Subject key identifier:   31:C8:A8:02:CB:06:9D:77:55:D9:94:B3:F5:32:8F:00:E0:9D:D5:B1
Certificate issuer:       /CN=5CA08C4651107AEDDECD1096FFA4E1D02388016E
Certificate serial:       7B7D0EF890B48C7028EF188933BAB8CCBB011C79
Authority key identifier: 5C:A0:8C:46:51:10:7A:ED:DE:CD:10:96:FF:A4:E1:D0:23:88:01:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CA08C4651107AEDDECD1096FFA4E1D02388016E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BNFHc1ceHLydoLmVHqcfEBBB4whXw9v7xZkZ7fq9Vi56/0/323830343a373563383a3a2f33332d3333203d3e20323731303639.roa
Signing time:             Tue 26 Apr 2022 17:24:55 +0000
ROA not before:           Tue 26 Apr 2022 17:19:55 +0000
ROA not after:            Tue 25 Apr 2023 17:24:55 +0000
asID:                     271069
IP address blocks:        2804:75c8::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:7d:0e:f8:90:b4:8c:70:28:ef:18:89:33:ba:b8:cc:bb:01:1c:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CA08C4651107AEDDECD1096FFA4E1D02388016E
        Validity
            Not Before: Apr 26 17:19:55 2022 GMT
            Not After : Apr 25 17:24:55 2023 GMT
        Subject: CN=31C8A802CB069D7755D994B3F5328F00E09DD5B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:00:22:68:cd:7f:13:1a:50:6a:bf:91:01:65:
                    d6:c8:7a:43:ad:f0:85:47:6b:fa:6c:29:27:12:83:
                    14:97:6c:dc:65:c1:25:54:3e:bc:c2:77:22:07:77:
                    98:07:45:21:4a:52:bb:67:00:35:3f:31:21:cf:ea:
                    a7:7d:c4:ae:d8:2e:d7:68:4e:f1:c1:cb:7f:ba:46:
                    54:2e:a1:5e:45:a9:93:72:c7:f1:a7:c2:3c:86:2d:
                    2d:ef:09:c6:c5:5c:81:a1:7b:fd:eb:86:c6:fb:0b:
                    ec:1e:92:05:c9:78:20:60:89:bb:b9:3a:45:6b:d1:
                    6a:91:49:0c:a3:35:c8:2d:d6:f1:82:3d:18:9f:42:
                    1a:31:16:a6:3c:8d:0f:8a:f2:02:5b:53:f6:44:7c:
                    43:1b:15:23:60:21:d4:3a:da:d9:3a:fd:99:b2:50:
                    42:e1:22:09:07:c9:43:19:de:71:34:b5:3b:a6:d7:
                    8a:cb:db:6a:ec:84:20:5d:7f:e5:30:8f:46:56:64:
                    be:95:c4:97:3d:c7:39:a0:a2:b3:a4:62:a4:29:47:
                    63:d5:35:e7:32:3d:11:53:9f:af:4c:6c:0a:cb:58:
                    cd:1f:7d:18:01:81:89:df:a4:12:37:07:3a:74:c2:
                    71:db:e3:13:4e:13:50:e4:e5:84:e4:1d:19:6f:f0:
                    d6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:C8:A8:02:CB:06:9D:77:55:D9:94:B3:F5:32:8F:00:E0:9D:D5:B1
            X509v3 Authority Key Identifier:
                keyid:5C:A0:8C:46:51:10:7A:ED:DE:CD:10:96:FF:A4:E1:D0:23:88:01:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BNFHc1ceHLydoLmVHqcfEBBB4whXw9v7xZkZ7fq9Vi56/0/5CA08C4651107AEDDECD1096FFA4E1D02388016E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CA08C4651107AEDDECD1096FFA4E1D02388016E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BNFHc1ceHLydoLmVHqcfEBBB4whXw9v7xZkZ7fq9Vi56/0/323830343a373563383a3a2f33332d3333203d3e20323731303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:75c8::/33

    Signature Algorithm: sha256WithRSAEncryption
         7a:ca:a2:a9:20:d5:ce:f2:7e:ec:c0:f9:11:6c:b6:71:4b:fd:
         0f:a9:b2:bc:bc:01:59:60:54:b0:f3:35:02:b7:ac:17:a7:b9:
         ef:81:6f:aa:7e:ce:bf:f4:ee:89:3e:97:38:e6:1c:aa:8b:79:
         68:c0:ed:4c:6c:a5:28:35:8c:4d:a9:0d:75:b6:d3:72:1c:08:
         16:23:4e:4a:81:3d:2b:e4:3b:28:f5:63:eb:5f:44:5f:82:b5:
         4b:78:45:5c:6a:98:ff:3b:25:ea:75:cc:bd:64:b4:30:2b:b2:
         fb:6b:a8:48:88:87:30:e7:ba:16:0b:dd:22:5b:14:81:16:b3:
         ac:c6:7d:95:58:ed:e5:b6:5e:49:ce:9b:33:2d:0e:a3:6e:eb:
         36:25:ed:9a:a0:13:3e:45:8b:13:55:0b:38:bd:e8:3f:fd:e4:
         f7:84:b3:ab:0d:86:43:2b:94:ff:2c:0d:51:8f:5e:f9:98:12:
         71:34:fa:13:59:1a:a9:3c:05:7b:70:f1:be:89:c2:0e:ac:c5:
         0e:3f:53:b9:f3:59:49:7b:3f:77:e9:3a:4c:ac:72:cb:77:e5:
         0a:79:03:b1:82:82:20:62:94:47:6b:b6:63:af:ea:17:41:2c:
         90:f1:1b:1c:a9:65:34:0b:0a:fa:e7:ab:bc:36:56:53:7e:4b:
         d1:71:43:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:43:34 2025 by rpki-client