Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/323830343a353831383a313230303a3a2f34302d3430203d3e20323638313036.roa
File:                     323830343a353831383a313230303a3a2f34302d3430203d3e20323638313036.roa (raw, json)
Hash identifier:          HrdOYnsB48hHtaVU5mdKP2NZDrxyMezLpIBcAgOlQV4=
Subject key identifier:   D4:76:2E:B2:98:5E:87:EF:1B:F9:CC:C3:D0:A3:E9:80:74:A6:FC:43
Certificate issuer:       /CN=B2614F2D35FDF04FB428DEB46E60713A8DCF6B49
Certificate serial:       1EE7ED81A85B0B07EF467C21F869767CD51ECB25
Authority key identifier: B2:61:4F:2D:35:FD:F0:4F:B4:28:DE:B4:6E:60:71:3A:8D:CF:6B:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2614F2D35FDF04FB428DEB46E60713A8DCF6B49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/323830343a353831383a313230303a3a2f34302d3430203d3e20323638313036.roa
Signing time:             Mon 07 Feb 2022 12:09:16 +0000
ROA not before:           Mon 07 Feb 2022 12:04:16 +0000
ROA not after:            Mon 06 Feb 2023 12:09:16 +0000
asID:                     268106
IP address blocks:        2804:5818:1200::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:e7:ed:81:a8:5b:0b:07:ef:46:7c:21:f8:69:76:7c:d5:1e:cb:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2614F2D35FDF04FB428DEB46E60713A8DCF6B49
        Validity
            Not Before: Feb  7 12:04:16 2022 GMT
            Not After : Feb  6 12:09:16 2023 GMT
        Subject: CN=D4762EB2985E87EF1BF9CCC3D0A3E98074A6FC43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:07:b5:45:fc:6a:8c:1e:4a:e1:1e:3c:08:1e:
                    6e:d1:e3:ec:6b:a1:4d:62:ec:ed:fb:4d:3a:10:ee:
                    b6:4c:f1:30:50:25:76:c4:b7:04:fa:6f:98:aa:53:
                    3d:89:58:e4:4f:03:b8:bb:bd:01:16:0f:b3:b4:f1:
                    3f:77:ac:0a:dc:47:0e:37:08:69:67:cb:4b:63:d9:
                    7e:8f:09:76:0c:f1:d5:c7:d6:b5:c7:9d:bc:46:20:
                    18:ad:3c:50:e8:90:b6:49:d9:8d:c0:86:8a:92:19:
                    93:54:48:7f:6b:e7:0e:7b:6d:c3:2c:ef:71:af:1d:
                    d5:58:cb:cf:c0:a0:87:8f:98:cb:5b:25:f5:dc:c2:
                    fb:0c:68:33:ff:58:92:c1:db:53:77:a3:42:c3:61:
                    46:b3:27:c6:96:c3:15:ee:92:72:a5:b5:91:fe:4b:
                    51:15:d1:d4:d1:58:be:19:75:ba:6f:16:ac:b3:d5:
                    f1:6f:6c:cd:e8:25:1a:39:5b:32:8e:97:83:03:b3:
                    f6:80:4e:3c:23:35:18:3c:e5:13:85:07:43:e9:1c:
                    c4:aa:01:79:03:8b:24:aa:b9:85:02:42:0c:39:20:
                    ef:13:12:46:d5:2c:37:d4:33:de:bc:01:1a:da:42:
                    16:38:ae:81:7a:9b:6c:b9:82:4f:db:57:32:52:ea:
                    fb:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:76:2E:B2:98:5E:87:EF:1B:F9:CC:C3:D0:A3:E9:80:74:A6:FC:43
            X509v3 Authority Key Identifier:
                keyid:B2:61:4F:2D:35:FD:F0:4F:B4:28:DE:B4:6E:60:71:3A:8D:CF:6B:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/B2614F2D35FDF04FB428DEB46E60713A8DCF6B49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2614F2D35FDF04FB428DEB46E60713A8DCF6B49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/323830343a353831383a313230303a3a2f34302d3430203d3e20323638313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5818:1200::/40

    Signature Algorithm: sha256WithRSAEncryption
         65:eb:ef:03:86:69:f0:1d:73:c7:31:1f:af:4c:e5:04:d6:b0:
         3e:2f:78:27:b5:ef:d2:bf:0c:50:cd:22:4b:29:22:f4:df:5a:
         77:2e:3e:68:d0:57:7c:3c:28:80:04:d5:0e:a7:d9:39:98:cc:
         93:62:c2:9a:95:8c:e1:7f:29:22:79:72:bf:57:20:c0:66:5f:
         96:11:89:3f:47:b4:07:d1:86:d6:d4:f6:67:26:a2:e5:11:a5:
         86:d3:a3:27:67:86:05:a7:05:99:f8:82:39:cd:b5:35:09:4d:
         14:9c:54:08:9e:73:9d:61:07:a5:50:49:c4:d0:8a:6d:0d:be:
         e4:1e:f8:d3:d7:20:2c:22:b1:6e:6a:86:aa:2d:d0:d7:cf:10:
         d1:e5:be:bb:b4:19:1f:c8:c8:fb:85:5d:f1:0b:31:d4:98:c0:
         3c:85:ad:cb:8a:30:88:92:2f:4f:02:b3:95:53:e1:eb:65:72:
         99:90:1d:4d:d8:e9:64:44:0e:9a:7d:7f:35:d1:be:c6:c6:2c:
         e1:d3:b0:cd:27:54:71:08:6d:4c:e9:cf:b6:e5:93:42:68:28:
         b5:eb:9c:b3:02:69:73:07:e6:a6:c6:2d:22:37:df:ca:b4:15:
         58:09:fa:3e:8c:b7:38:20:b1:f5:ed:1a:d4:e4:92:ee:69:ed:
         76:7e:8e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:53 2025 by rpki-client