Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/323830343a6235343a383230303a3a2f34302d3430203d3e203532373635.roa
File:                     323830343a6235343a383230303a3a2f34302d3430203d3e203532373635.roa (raw, json)
Hash identifier:          sfcjKjNK7waoPbn2HXIq3paLx3sLaSwpQf0EjCX/eiI=
Subject key identifier:   B4:FF:46:B5:0A:50:50:8E:FA:61:A0:5E:4D:35:4E:BF:3C:83:A3:C1
Certificate issuer:       /CN=4D940BDC678200585FEFFC647CA6E5EE6F32CD8B
Certificate serial:       10F8EC092C46CB8B95B2C515BE036DBA876B25F6
Authority key identifier: 4D:94:0B:DC:67:82:00:58:5F:EF:FC:64:7C:A6:E5:EE:6F:32:CD:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D940BDC678200585FEFFC647CA6E5EE6F32CD8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/323830343a6235343a383230303a3a2f34302d3430203d3e203532373635.roa
Signing time:             Tue 05 Dec 2023 14:44:30 +0000
ROA not before:           Tue 05 Dec 2023 14:39:30 +0000
ROA not after:            Tue 03 Dec 2024 14:44:30 +0000
asID:                     52765
IP address blocks:        2804:b54:8200::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:f8:ec:09:2c:46:cb:8b:95:b2:c5:15:be:03:6d:ba:87:6b:25:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D940BDC678200585FEFFC647CA6E5EE6F32CD8B
        Validity
            Not Before: Dec  5 14:39:30 2023 GMT
            Not After : Dec  3 14:44:30 2024 GMT
        Subject: CN=B4FF46B50A50508EFA61A05E4D354EBF3C83A3C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2a:27:08:65:52:3c:8f:b2:b4:1b:d9:23:f9:
                    cc:a6:2c:38:4d:44:03:d0:fd:45:0d:38:e2:21:9c:
                    f4:5b:d3:dc:b2:73:d4:8d:94:8d:c8:6f:71:08:21:
                    9c:3c:23:73:5b:c0:26:84:7a:b2:94:f9:12:c7:0a:
                    dc:3a:e3:59:ac:4c:ae:16:6d:20:5e:60:47:a9:3c:
                    c3:18:73:f9:b5:1f:78:20:07:ec:e9:61:ac:f1:ea:
                    c7:9c:13:ab:62:8f:c1:68:08:07:3c:a8:87:6a:d5:
                    ac:67:1f:fb:6f:91:02:2a:c5:7b:d7:cf:c3:59:87:
                    78:50:c1:6a:9c:75:0b:a8:2f:cd:b4:85:a9:f5:42:
                    4e:f9:21:9d:8d:c6:11:f4:fe:77:11:ff:d8:e5:f0:
                    fa:e2:48:4e:fc:c2:03:49:54:82:c2:f2:1b:f4:e4:
                    13:6e:60:9a:bf:fa:63:7a:38:3c:f6:d4:00:3f:e8:
                    c7:2f:85:e8:34:1a:cd:49:27:ef:07:2a:61:ca:cf:
                    74:e6:a4:77:1e:89:95:02:b0:3f:40:f9:af:93:5d:
                    3b:d8:64:79:fd:06:8d:aa:29:81:1f:8f:1d:b4:aa:
                    65:8a:c9:a3:aa:0d:e3:57:17:51:82:8e:89:76:7c:
                    d0:29:a8:4a:a5:9b:fa:31:84:33:38:bf:13:57:bf:
                    5c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:FF:46:B5:0A:50:50:8E:FA:61:A0:5E:4D:35:4E:BF:3C:83:A3:C1
            X509v3 Authority Key Identifier:
                keyid:4D:94:0B:DC:67:82:00:58:5F:EF:FC:64:7C:A6:E5:EE:6F:32:CD:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/4D940BDC678200585FEFFC647CA6E5EE6F32CD8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D940BDC678200585FEFFC647CA6E5EE6F32CD8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/323830343a6235343a383230303a3a2f34302d3430203d3e203532373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:b54:8200::/40

    Signature Algorithm: sha256WithRSAEncryption
         0b:82:08:48:91:77:f4:20:e8:46:ef:cb:84:17:a7:f0:22:7a:
         fb:88:a5:10:45:84:fe:91:25:68:0c:da:e7:a0:30:3f:16:77:
         2f:1b:22:ec:85:fc:64:f1:30:c0:42:02:91:6e:2b:00:20:00:
         d1:f3:e7:7b:1e:33:af:14:7f:e0:25:b7:81:cc:c3:49:f3:5f:
         3c:b2:42:1d:5f:52:b9:b8:3e:25:ef:ab:9a:38:2b:57:a3:83:
         9a:68:be:3d:8d:df:ff:47:39:97:7e:b3:5c:4f:1c:e9:a2:ba:
         f1:d2:6a:8c:f0:bf:56:37:24:a1:82:ed:71:9a:db:72:38:35:
         92:9d:13:2c:a4:eb:52:cd:01:5c:f2:b1:69:05:00:aa:7b:b3:
         a4:90:00:fc:4c:40:5e:f6:31:f4:22:57:ab:f8:99:f2:ff:4e:
         f3:91:35:9e:78:c8:a1:87:1a:18:92:a5:91:36:6e:ad:90:8d:
         f4:9c:11:eb:d8:3f:f3:d6:c4:73:bd:58:38:c4:aa:0d:92:59:
         e2:d1:fe:a1:81:c7:7a:fd:2b:32:13:c8:50:54:c3:00:17:ef:
         4f:ae:7e:17:4a:74:a4:41:29:57:c6:aa:f8:3f:d3:00:1d:f3:
         70:ca:59:b1:de:f2:a0:2f:9c:f8:94:55:da:11:d5:51:20:84:
         df:01:fb:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:01:09 2025 by rpki-client