Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BiakSyNrt4VxcXfTgzfij2yWr5NNF5EjRiJpZsXjirfR/0/323830343a376166633a3a2f33322d3332203d3e20323731343034.roa
File:                     323830343a376166633a3a2f33322d3332203d3e20323731343034.roa (raw, json)
Hash identifier:          AwSaTuFgg7xaNZqCNEMGEdZcexeALRMK9pwK8OwgD1U=
Subject key identifier:   B6:5D:D3:FA:4B:7A:3A:06:C5:2F:25:8E:A5:04:CA:39:15:C1:51:70
Certificate issuer:       /CN=195B0E672501530A4C74BA0517CBCD60842BBBC9
Certificate serial:       1516CA0443ACB5639D28E847AE94B1B547A1A309
Authority key identifier: 19:5B:0E:67:25:01:53:0A:4C:74:BA:05:17:CB:CD:60:84:2B:BB:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/195B0E672501530A4C74BA0517CBCD60842BBBC9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BiakSyNrt4VxcXfTgzfij2yWr5NNF5EjRiJpZsXjirfR/0/323830343a376166633a3a2f33322d3332203d3e20323731343034.roa
Signing time:             Tue 18 Feb 2025 12:42:00 +0000
ROA not before:           Tue 18 Feb 2025 12:37:00 +0000
ROA not after:            Tue 17 Feb 2026 12:42:00 +0000
asID:                     271404
IP address blocks:        2804:7afc::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:16:ca:04:43:ac:b5:63:9d:28:e8:47:ae:94:b1:b5:47:a1:a3:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=195B0E672501530A4C74BA0517CBCD60842BBBC9
        Validity
            Not Before: Feb 18 12:37:00 2025 GMT
            Not After : Feb 17 12:42:00 2026 GMT
        Subject: CN=B65DD3FA4B7A3A06C52F258EA504CA3915C15170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5a:37:d7:74:0d:f9:7a:aa:48:fd:04:33:77:
                    30:a4:ce:7d:7b:01:a9:89:6a:03:f0:60:39:50:fc:
                    b3:0a:e8:08:42:04:bb:53:18:bb:fa:a2:1f:49:d0:
                    88:ff:95:1e:2a:42:b7:28:9c:a6:cd:5c:76:eb:c0:
                    39:9f:c8:36:ae:de:12:24:9b:05:b2:a6:ab:4b:d2:
                    d5:8d:ef:ea:00:28:95:be:3d:e6:79:c9:82:cb:f1:
                    3d:6e:49:9b:72:c1:0b:46:0a:96:fa:07:fe:1a:b7:
                    27:3e:c3:12:be:07:5a:3f:bb:81:2d:bd:64:66:a2:
                    8a:71:b6:95:1b:46:6f:15:12:19:23:88:56:71:a1:
                    18:5a:d2:be:6f:74:46:40:60:81:ae:ff:02:c1:1f:
                    20:8a:5c:c4:6f:60:60:84:da:6a:71:cc:9c:55:f1:
                    b3:e9:f7:d7:97:03:05:37:60:30:aa:7c:42:2d:83:
                    9a:94:32:14:71:ec:42:80:b9:ca:2d:2f:dd:1f:8f:
                    e4:93:27:98:71:4f:70:70:4f:d1:ac:e5:d9:ba:dd:
                    cc:44:f5:9e:1b:90:22:08:1a:d4:03:a5:c0:de:70:
                    77:5e:dc:84:ca:ee:03:f2:98:5f:25:bc:35:bc:bb:
                    c9:74:64:e2:01:b8:3f:d2:01:7d:4e:6b:8c:fa:83:
                    cd:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:5D:D3:FA:4B:7A:3A:06:C5:2F:25:8E:A5:04:CA:39:15:C1:51:70
            X509v3 Authority Key Identifier:
                keyid:19:5B:0E:67:25:01:53:0A:4C:74:BA:05:17:CB:CD:60:84:2B:BB:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BiakSyNrt4VxcXfTgzfij2yWr5NNF5EjRiJpZsXjirfR/0/195B0E672501530A4C74BA0517CBCD60842BBBC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/195B0E672501530A4C74BA0517CBCD60842BBBC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BiakSyNrt4VxcXfTgzfij2yWr5NNF5EjRiJpZsXjirfR/0/323830343a376166633a3a2f33322d3332203d3e20323731343034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7afc::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:f1:08:41:a8:36:2b:4a:3d:ec:ca:82:96:2a:c1:e2:32:52:
         ec:45:9f:e7:36:76:7c:d5:8d:76:11:67:7b:cf:cb:c9:19:70:
         26:b7:8d:0f:26:c5:d4:10:c6:fc:2e:ee:78:a7:fd:83:a7:8f:
         1c:39:9a:b6:62:b4:62:b8:fb:84:41:8e:d0:e2:e6:58:25:25:
         14:27:10:1d:b0:eb:8b:43:19:2c:db:b9:a0:bb:48:8e:e0:ca:
         d9:41:30:db:0a:63:dd:a7:55:24:2d:e4:49:9d:a1:8e:fc:f4:
         d0:e4:a2:10:98:f2:2f:87:d1:8d:f5:cb:66:6b:d3:63:fd:9b:
         9f:83:51:7f:e0:ad:02:d8:22:33:48:fd:49:21:82:11:16:f3:
         ad:84:49:7c:98:85:e2:09:10:bd:1b:3c:3f:48:1a:43:5f:99:
         e9:5c:55:62:57:52:9a:9f:cc:e3:92:51:45:c5:46:5c:0a:61:
         c2:76:92:2d:ed:34:f0:7c:d9:cc:91:1b:45:96:1e:d7:a6:1d:
         51:58:f3:a4:2d:79:c1:b2:eb:a0:e9:8d:c1:62:ff:e7:f1:e5:
         75:c2:99:ca:bd:84:a9:64:d4:f4:14:35:af:7a:91:eb:d3:26:
         8b:e1:d4:7b:18:18:31:21:20:2c:3a:c4:a8:3d:63:bc:ab:a0:
         c5:01:6c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:15:29 2025 by rpki-client