Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/323830343a313630303a613030303a3a2f33362d3336203d3e20323633343231.roa
File:                     323830343a313630303a613030303a3a2f33362d3336203d3e20323633343231.roa (raw, json)
Hash identifier:          ZOEtKp2AOpgu4n0+RSKVR6POM4FCXfY00wNi2JkcKPY=
Subject key identifier:   69:75:64:BE:A6:9F:16:E5:EC:67:97:DF:47:92:D7:13:C9:9C:0F:27
Certificate issuer:       /CN=A0FF9A83436226FF19D020B34271420BD55D7D05
Certificate serial:       0C29A837B325E29D5C26B59BF3222821C950DD23
Authority key identifier: A0:FF:9A:83:43:62:26:FF:19:D0:20:B3:42:71:42:0B:D5:5D:7D:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0FF9A83436226FF19D020B34271420BD55D7D05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/323830343a313630303a613030303a3a2f33362d3336203d3e20323633343231.roa
Signing time:             Thu 25 Jul 2024 01:01:29 +0000
ROA not before:           Thu 25 Jul 2024 00:56:29 +0000
ROA not after:            Thu 24 Jul 2025 01:01:29 +0000
asID:                     263421
IP address blocks:        2804:1600:a000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:29:a8:37:b3:25:e2:9d:5c:26:b5:9b:f3:22:28:21:c9:50:dd:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0FF9A83436226FF19D020B34271420BD55D7D05
        Validity
            Not Before: Jul 25 00:56:29 2024 GMT
            Not After : Jul 24 01:01:29 2025 GMT
        Subject: CN=697564BEA69F16E5EC6797DF4792D713C99C0F27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ef:f6:df:4a:1a:59:be:4c:4e:fc:e8:33:8c:
                    91:3d:3a:de:73:79:98:6d:d6:60:d9:3f:7d:de:20:
                    ec:27:e3:36:bf:0d:5f:dd:04:4b:44:56:01:a4:95:
                    87:2d:76:29:57:54:ab:3d:a5:62:44:44:7c:70:69:
                    bc:a2:c6:13:3a:d8:6a:90:95:cf:06:3d:6e:1d:d0:
                    93:b4:80:e2:b0:b9:a2:f4:ab:6a:4f:b2:00:86:8e:
                    91:02:ff:6c:c1:1a:cc:26:62:97:62:b7:27:aa:82:
                    8f:ed:66:ad:04:dc:a2:f9:95:b9:a9:0b:e2:f6:ba:
                    18:5f:91:71:24:d4:3b:f4:2e:11:8f:94:c1:09:2e:
                    9a:b4:bf:fc:f2:8d:bf:ab:04:c6:46:d3:f7:3a:08:
                    b0:63:2b:df:eb:e9:37:b6:b6:29:b4:2e:45:c7:d5:
                    5f:27:c0:dd:23:37:f6:43:db:42:5d:fe:1d:8a:e6:
                    c7:79:7d:44:d9:93:31:ca:1a:64:c8:f6:33:1c:6c:
                    48:f9:54:60:0d:48:17:e1:6c:9f:70:39:25:70:85:
                    46:62:dd:9c:44:4b:50:f1:3b:7a:97:54:d4:7f:ad:
                    75:5c:f3:4d:2d:1b:61:6b:4b:a7:7a:d9:bc:3a:b7:
                    4c:06:02:79:b9:b9:d1:4a:f4:bc:21:8a:c0:74:0d:
                    4b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:75:64:BE:A6:9F:16:E5:EC:67:97:DF:47:92:D7:13:C9:9C:0F:27
            X509v3 Authority Key Identifier:
                keyid:A0:FF:9A:83:43:62:26:FF:19:D0:20:B3:42:71:42:0B:D5:5D:7D:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/A0FF9A83436226FF19D020B34271420BD55D7D05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0FF9A83436226FF19D020B34271420BD55D7D05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/323830343a313630303a613030303a3a2f33362d3336203d3e20323633343231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1600:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         11:c3:b0:ce:b6:0f:b0:fb:6c:ea:a8:14:9b:3a:3f:4f:de:bb:
         cb:f1:dc:13:89:3c:2a:38:e9:dc:73:14:d4:28:6b:b6:7c:f0:
         cf:6b:db:9e:96:26:46:65:e9:af:39:99:60:94:21:9b:a5:bc:
         f9:17:01:cb:2c:a2:08:c7:6b:72:01:d6:21:df:fc:a8:79:c3:
         ee:3d:96:e3:29:2b:93:13:1d:34:64:85:9a:6c:73:d2:2e:a1:
         2a:06:ab:f5:26:ba:6b:3a:44:e0:4b:94:cd:70:8d:89:2b:06:
         a4:57:5c:55:63:8d:a9:a1:42:8f:52:b3:e5:c3:c6:64:db:89:
         a4:f6:16:73:4e:fe:70:dd:31:16:7e:e1:63:bc:cb:8a:92:c9:
         44:19:44:4c:c4:95:55:67:34:58:a0:1a:76:46:d5:1c:4d:30:
         7f:b2:c9:79:8b:88:71:3a:9a:7f:1a:7a:8d:ee:60:d9:a8:e3:
         c3:fa:5b:17:14:bf:8f:6f:14:f2:e0:ff:c4:1e:99:61:c3:bb:
         f4:5c:b4:23:8c:4f:74:41:79:99:cb:4d:a7:eb:b0:e5:04:02:
         3e:41:64:f8:f7:6a:52:a7:cd:37:ec:67:52:09:8a:56:7f:84:
         98:eb:4e:c7:59:34:b5:21:e2:89:65:fa:2a:96:b9:75:e3:4d:
         50:00:93:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:51 2025 by rpki-client