Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/323830343a363436343a666530303a3a2f34302d3430203d3e20323639343235.roa
File:                     323830343a363436343a666530303a3a2f34302d3430203d3e20323639343235.roa (raw, json)
Hash identifier:          OcgUdtpbqhN4rahe5+DY7Y0T44LRwhgoYfvhodKkIq4=
Subject key identifier:   BF:AD:4D:32:3B:41:12:01:29:F7:4B:9F:9A:59:0F:BC:5E:F9:1F:FC
Certificate issuer:       /CN=A52F416E7DE17981FB7334B51C91FD583746E12E
Certificate serial:       6A52DF71F4CB38AA3A0C1C0AE4845FB4F08DDE5D
Authority key identifier: A5:2F:41:6E:7D:E1:79:81:FB:73:34:B5:1C:91:FD:58:37:46:E1:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A52F416E7DE17981FB7334B51C91FD583746E12E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/323830343a363436343a666530303a3a2f34302d3430203d3e20323639343235.roa
Signing time:             Mon 19 Feb 2024 15:48:27 +0000
ROA not before:           Mon 19 Feb 2024 15:43:27 +0000
ROA not after:            Mon 17 Feb 2025 15:48:27 +0000
asID:                     269425
IP address blocks:        2804:6464:fe00::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:52:df:71:f4:cb:38:aa:3a:0c:1c:0a:e4:84:5f:b4:f0:8d:de:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A52F416E7DE17981FB7334B51C91FD583746E12E
        Validity
            Not Before: Feb 19 15:43:27 2024 GMT
            Not After : Feb 17 15:48:27 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b9:b1:3d:68:ea:af:1f:56:a1:3e:00:a2:c1:
                    ef:f0:fd:fd:21:c1:3e:78:b7:ff:4f:2a:cd:5d:63:
                    c5:14:e5:1c:14:d0:34:2a:df:24:ac:44:a6:01:a5:
                    dc:3d:ce:a5:37:08:5d:2c:03:1d:b6:89:9b:ea:21:
                    9e:74:bf:8f:42:22:68:f8:7d:5f:83:09:0f:25:f4:
                    7c:ef:b2:01:ca:5f:c0:09:9b:b8:21:80:51:5a:77:
                    9b:68:b2:f6:e2:3e:cd:7d:7b:43:60:8d:50:3f:95:
                    90:54:ea:ac:54:1a:8c:cc:bd:6b:c1:26:8d:98:20:
                    f8:82:c6:a6:71:3d:e0:a8:ce:bd:8f:b7:55:14:45:
                    5d:a6:8c:19:4f:ab:fb:b5:af:ba:1e:d5:20:f6:c4:
                    ca:19:b5:54:dd:9d:64:9b:0c:a9:b0:9f:7f:f0:8f:
                    e1:21:20:56:85:42:81:57:07:be:98:f4:4d:06:a3:
                    74:37:07:f8:92:37:3d:8a:47:1a:6b:ea:f9:8d:d3:
                    ef:29:3d:29:ec:2c:1c:34:ba:5e:a5:88:bf:1f:00:
                    d1:7f:b0:0f:8c:b0:36:11:da:49:76:f4:6b:36:3d:
                    42:d7:e3:ba:c0:87:0d:67:3b:d3:5c:96:81:b5:7d:
                    ce:59:ea:a9:30:c8:aa:bf:bc:6b:2e:47:4d:3d:4c:
                    fb:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:AD:4D:32:3B:41:12:01:29:F7:4B:9F:9A:59:0F:BC:5E:F9:1F:FC
            X509v3 Authority Key Identifier:
                keyid:A5:2F:41:6E:7D:E1:79:81:FB:73:34:B5:1C:91:FD:58:37:46:E1:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/A52F416E7DE17981FB7334B51C91FD583746E12E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A52F416E7DE17981FB7334B51C91FD583746E12E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/323830343a363436343a666530303a3a2f34302d3430203d3e20323639343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6464:fe00::/40

    Signature Algorithm: sha256WithRSAEncryption
         be:ec:7a:62:aa:84:21:cd:4d:cb:ec:07:14:38:0f:1a:c3:ca:
         8b:1f:af:a6:61:47:14:82:3a:e5:47:c2:91:87:83:89:78:96:
         17:e1:e8:e7:38:da:78:9f:0f:57:48:9a:7f:c2:c8:16:bb:52:
         e2:03:7b:54:37:20:05:f2:8f:ce:34:cc:7d:ba:a1:9b:df:46:
         f7:b0:07:cf:47:d5:55:5c:d4:bb:5d:80:93:29:9d:8d:06:f9:
         44:1e:8d:66:2d:9a:b9:c0:ee:bd:18:68:00:0c:a9:14:43:5e:
         41:ff:2d:76:ec:2b:48:5c:8c:f2:f6:f9:7b:4f:f0:9a:a2:21:
         68:4f:31:f9:82:fe:26:5d:74:20:ef:17:d7:fd:97:ee:b3:3c:
         66:69:30:a4:2d:28:d6:2c:de:eb:13:88:6c:9d:77:24:6d:01:
         54:76:a9:f5:a1:93:93:9c:8b:35:e7:fb:9f:d9:05:20:b6:36:
         74:dc:ed:c8:26:cd:14:13:ef:8f:84:df:c7:64:a3:56:1f:bb:
         01:58:34:82:99:82:c9:c6:ca:1b:21:86:ec:59:63:06:35:4f:
         8c:59:36:37:3e:7a:32:32:1d:d5:99:3f:03:78:cd:bf:49:f7:
         b7:64:dd:64:7d:7f:1d:2a:13:5e:91:f4:73:ad:ee:70:46:f6:
         35:4f:57:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:01:29 2025 by rpki-client