Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/323830343a333934343a343030303a3a2f33342d3334203d3e20323636303232.roa
File:                     323830343a333934343a343030303a3a2f33342d3334203d3e20323636303232.roa (raw, json)
Hash identifier:          hdi9qbxXOD9sK6Cr/FisZcffI3CW9ox0S9w6jdOzm+o=
Subject key identifier:   F0:97:3F:8E:63:A1:5F:76:5B:F2:38:F0:18:FC:8C:BE:C3:E6:4E:33
Certificate issuer:       /CN=63B4DE457F8E070CF2B3E14A61FF7DDFB3F87000
Certificate serial:       6F34E1FF70B73E52E287F96ADB594D90975E7065
Authority key identifier: 63:B4:DE:45:7F:8E:07:0C:F2:B3:E1:4A:61:FF:7D:DF:B3:F8:70:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63B4DE457F8E070CF2B3E14A61FF7DDFB3F87000.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/323830343a333934343a343030303a3a2f33342d3334203d3e20323636303232.roa
Signing time:             Tue 05 Nov 2024 14:47:39 +0000
ROA not before:           Tue 05 Nov 2024 14:42:39 +0000
ROA not after:            Tue 04 Nov 2025 14:47:39 +0000
asID:                     266022
IP address blocks:        2804:3944:4000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:34:e1:ff:70:b7:3e:52:e2:87:f9:6a:db:59:4d:90:97:5e:70:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63B4DE457F8E070CF2B3E14A61FF7DDFB3F87000
        Validity
            Not Before: Nov  5 14:42:39 2024 GMT
            Not After : Nov  4 14:47:39 2025 GMT
        Subject: CN=F0973F8E63A15F765BF238F018FC8CBEC3E64E33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b9:79:a6:6c:c5:c0:ec:f2:29:7a:18:92:32:
                    4a:b0:35:48:ee:c6:11:a9:0d:11:56:99:07:9a:59:
                    df:77:e7:09:2e:a7:15:5f:b3:de:b6:4f:96:7c:2a:
                    af:ac:93:4c:84:bd:81:d0:fe:16:13:63:d7:7e:df:
                    f3:0c:3d:3c:58:51:c9:ba:22:85:20:ea:43:44:49:
                    16:a6:68:c7:1c:51:4a:d3:33:45:95:14:88:c0:e4:
                    0d:1c:0f:04:cc:b1:f6:04:35:fa:15:d7:64:6e:a8:
                    cc:6f:03:40:57:17:be:2b:c4:8d:29:7b:a0:fd:95:
                    3b:05:fd:6c:8a:34:d0:a6:4b:d8:f3:fc:af:94:a5:
                    05:89:e4:2e:54:33:d1:b2:20:53:8d:d6:1c:34:61:
                    07:46:79:a4:64:fb:63:12:b8:ba:b4:00:36:e7:df:
                    7e:4e:ff:df:cd:20:e6:3c:18:43:71:5a:05:18:17:
                    cd:ea:32:b9:92:4d:ac:56:39:9d:34:d6:60:0a:1f:
                    9f:bf:69:51:72:35:5f:3d:6a:0e:dd:70:b4:a7:e6:
                    8a:c2:b8:ee:85:a4:e5:ba:ce:a6:3c:da:4c:86:d8:
                    f0:95:80:ed:e8:4c:f3:e2:69:f0:7b:fd:09:2c:71:
                    d5:26:74:88:7a:6b:71:70:db:b2:7f:6b:06:55:2b:
                    f4:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:97:3F:8E:63:A1:5F:76:5B:F2:38:F0:18:FC:8C:BE:C3:E6:4E:33
            X509v3 Authority Key Identifier:
                keyid:63:B4:DE:45:7F:8E:07:0C:F2:B3:E1:4A:61:FF:7D:DF:B3:F8:70:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/63B4DE457F8E070CF2B3E14A61FF7DDFB3F87000.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63B4DE457F8E070CF2B3E14A61FF7DDFB3F87000.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/323830343a333934343a343030303a3a2f33342d3334203d3e20323636303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3944:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         c9:4a:ce:bb:70:4b:c0:5d:c3:de:47:b0:3d:1f:88:8f:df:2f:
         26:6e:80:36:65:1e:66:4a:fa:70:05:ce:03:12:ca:cc:89:10:
         2f:f8:0a:4d:45:cf:f9:d9:12:a6:5b:e1:b5:20:91:2d:5d:e3:
         2b:24:01:be:ee:25:23:b9:ca:24:15:1e:31:31:12:f0:59:04:
         13:19:ba:b6:ea:90:11:c6:43:67:9a:4a:e0:f5:f5:03:0a:8e:
         c0:16:5a:cd:75:3f:66:ea:ef:fb:cb:fd:75:5d:10:6e:52:83:
         9f:43:83:6d:1b:f2:cd:a8:eb:4c:f9:be:29:3d:80:a5:30:1c:
         ca:9b:3a:f3:2a:9e:29:b6:2f:10:b9:1c:33:8a:e6:34:f9:24:
         b0:1f:0f:c0:e7:c2:fb:36:80:11:c2:34:36:89:be:b7:bb:88:
         1c:6a:a4:2d:18:d2:cf:c0:ab:f1:39:37:0b:03:3b:66:8d:4a:
         15:b1:ee:41:da:fe:38:7a:a6:66:cf:03:73:bf:53:30:1b:03:
         56:69:a6:44:3d:87:b3:31:9d:5f:10:3e:ba:14:4c:ec:3e:33:
         d7:8b:a8:53:a9:c6:a7:6f:27:ca:48:2f:ef:07:89:a8:aa:b3:
         59:92:c7:9b:e3:f0:dd:43:b4:dd:97:3e:5a:67:8e:46:d2:9b:
         7b:18:7d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:34:03 2025 by rpki-client