Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BUsApEcL6qwesRCPGnFNnvtiMBEL5NnUjNBDYn9PMx8M/0/323830343a376639303a3a2f33322d3438203d3e20323731363936.roa
File:                     323830343a376639303a3a2f33322d3438203d3e20323731363936.roa (raw, json)
Hash identifier:          2RZ1Id0SSF5ICLtt/XbXDRs/Z9SrXH5Scgb26jFnuVc=
Subject key identifier:   70:72:D4:21:BF:13:66:DD:F8:FF:94:3A:6C:D6:5E:49:79:2C:B8:52
Certificate issuer:       /CN=16B195956D88CCCB16940DC49CFC72F18ED60821
Certificate serial:       19518FA005043FC0311DE9E0AAF3D074DD904715
Authority key identifier: 16:B1:95:95:6D:88:CC:CB:16:94:0D:C4:9C:FC:72:F1:8E:D6:08:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16B195956D88CCCB16940DC49CFC72F18ED60821.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BUsApEcL6qwesRCPGnFNnvtiMBEL5NnUjNBDYn9PMx8M/0/323830343a376639303a3a2f33322d3438203d3e20323731363936.roa
Signing time:             Mon 27 Jan 2025 15:13:33 +0000
ROA not before:           Mon 27 Jan 2025 15:08:33 +0000
ROA not after:            Mon 26 Jan 2026 15:13:33 +0000
asID:                     271696
IP address blocks:        2804:7f90::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:51:8f:a0:05:04:3f:c0:31:1d:e9:e0:aa:f3:d0:74:dd:90:47:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16B195956D88CCCB16940DC49CFC72F18ED60821
        Validity
            Not Before: Jan 27 15:08:33 2025 GMT
            Not After : Jan 26 15:13:33 2026 GMT
        Subject: CN=7072D421BF1366DDF8FF943A6CD65E49792CB852
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9f:f8:f7:e3:56:c2:c7:40:7c:af:6a:4d:2a:
                    26:ed:ae:26:c5:e9:e1:e8:19:6a:a5:d8:49:fc:2a:
                    bc:f6:0b:00:d4:87:f9:f1:fa:e2:f0:3b:53:38:aa:
                    61:c9:5d:9f:a9:64:84:1d:91:bf:43:04:a0:29:a8:
                    1c:b1:6f:73:7d:81:6f:7b:94:bd:3d:e0:2c:71:8f:
                    ca:1e:e8:55:e5:ac:3f:35:d3:ed:2b:eb:79:d1:16:
                    c6:c3:a6:eb:e3:a8:dc:c6:63:f1:51:85:92:8e:20:
                    9f:59:9e:e8:87:0e:27:86:0a:38:ed:90:6d:9a:eb:
                    22:da:59:f2:71:f0:1c:87:f0:2f:9e:de:b0:a1:d6:
                    24:d2:ac:f2:ce:c2:dd:fb:5d:4a:e8:d9:da:e5:dc:
                    d8:98:7d:4e:7d:d2:47:85:27:db:1c:6b:f5:ca:c9:
                    70:2b:ed:17:79:9c:45:81:2b:72:a9:6e:9d:29:a4:
                    06:d2:17:1b:13:f9:2f:ee:95:76:87:76:41:d2:64:
                    cd:84:04:30:02:b3:ff:e5:1f:a3:7c:6e:26:2c:ea:
                    0d:f7:dc:64:de:f9:01:c0:22:58:60:6c:da:14:fb:
                    ba:19:1b:1f:87:2c:6f:09:c7:6a:c4:42:61:23:90:
                    e9:ac:9d:e0:89:f8:3d:a0:f4:74:43:01:a7:d1:73:
                    b2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:72:D4:21:BF:13:66:DD:F8:FF:94:3A:6C:D6:5E:49:79:2C:B8:52
            X509v3 Authority Key Identifier:
                keyid:16:B1:95:95:6D:88:CC:CB:16:94:0D:C4:9C:FC:72:F1:8E:D6:08:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BUsApEcL6qwesRCPGnFNnvtiMBEL5NnUjNBDYn9PMx8M/0/16B195956D88CCCB16940DC49CFC72F18ED60821.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16B195956D88CCCB16940DC49CFC72F18ED60821.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BUsApEcL6qwesRCPGnFNnvtiMBEL5NnUjNBDYn9PMx8M/0/323830343a376639303a3a2f33322d3438203d3e20323731363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7f90::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:3a:9b:67:fd:bf:2b:07:82:21:49:a9:92:a3:af:59:c1:63:
         91:cf:fc:18:e5:2f:41:a7:6e:cd:55:e8:1d:ab:e3:d3:d6:9a:
         53:db:31:a3:e9:a1:aa:9c:f9:59:04:00:2f:4b:76:78:4a:f2:
         ef:c5:42:1f:3c:56:ae:d8:18:2f:bb:68:de:b6:01:0f:c2:3d:
         33:d9:b2:17:8d:b2:e5:09:89:05:c1:9f:b9:07:1d:d7:bc:e0:
         3d:bb:08:55:43:b8:2c:bd:e1:a2:7c:e9:50:c6:e3:8b:3e:48:
         27:76:1d:a8:6b:ce:79:7c:8b:a2:cf:b6:a5:df:c6:cf:b1:a1:
         c3:ae:b8:30:15:5c:41:ca:41:6b:78:ff:8b:fd:64:3f:79:dd:
         e9:35:a2:cd:a0:2a:a4:10:68:f2:8c:d2:bd:5b:7f:9e:09:c8:
         f7:aa:4d:52:2e:f9:1f:99:c0:d2:d4:cd:85:9e:2e:a1:df:35:
         35:66:83:7a:a8:43:64:dc:b2:40:f6:dd:55:20:33:b3:d2:13:
         31:62:52:d6:b2:a9:d0:03:c7:42:ab:83:4b:18:7d:47:0d:a3:
         10:0f:0d:6d:7a:3d:ab:4f:30:ca:a5:8e:a5:b2:4d:9d:f8:1e:
         bb:e6:05:9b:0b:da:67:25:14:c1:02:88:94:5c:cb:a7:0b:b2:
         55:42:e2:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:33:37 2025 by rpki-client