Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/323830343a333934343a633030303a3a2f33342d3334203d3e20323636303232.roa
File:                     323830343a333934343a633030303a3a2f33342d3334203d3e20323636303232.roa (raw, json)
Hash identifier:          /ipJ/eNiOs47Oqi3HUeYjZNzulziOjV6Gcn6eyGybto=
Subject key identifier:   92:81:BF:CE:AA:15:D6:AA:41:72:17:10:05:CE:24:DB:C2:70:DF:4F
Certificate issuer:       /CN=63B4DE457F8E070CF2B3E14A61FF7DDFB3F87000
Certificate serial:       0EB11CE0161A860DF6434BB5106197F278D18C70
Authority key identifier: 63:B4:DE:45:7F:8E:07:0C:F2:B3:E1:4A:61:FF:7D:DF:B3:F8:70:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63B4DE457F8E070CF2B3E14A61FF7DDFB3F87000.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/323830343a333934343a633030303a3a2f33342d3334203d3e20323636303232.roa
Signing time:             Tue 05 Nov 2024 14:47:38 +0000
ROA not before:           Tue 05 Nov 2024 14:42:38 +0000
ROA not after:            Tue 04 Nov 2025 14:47:38 +0000
asID:                     266022
IP address blocks:        2804:3944:c000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:b1:1c:e0:16:1a:86:0d:f6:43:4b:b5:10:61:97:f2:78:d1:8c:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63B4DE457F8E070CF2B3E14A61FF7DDFB3F87000
        Validity
            Not Before: Nov  5 14:42:38 2024 GMT
            Not After : Nov  4 14:47:38 2025 GMT
        Subject: CN=9281BFCEAA15D6AA4172171005CE24DBC270DF4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:07:48:c1:7a:dd:34:ad:9c:f4:a0:3c:ba:8b:
                    e7:b1:25:51:e5:6b:eb:8c:74:24:de:a4:90:46:00:
                    ad:a4:b6:66:b9:75:7d:83:c7:4c:27:a8:fe:ff:13:
                    3a:73:43:07:2c:aa:9d:cd:84:9f:06:ff:d1:cd:da:
                    f3:05:fd:af:8d:bf:30:18:f3:9f:b4:eb:fd:dc:72:
                    4b:0b:b2:6e:ce:22:4e:63:f9:66:33:03:0f:57:24:
                    e8:6a:a4:5b:55:37:58:9c:c9:cc:67:8f:71:e1:82:
                    d5:cb:1a:48:34:03:af:bd:74:9e:83:59:62:53:ab:
                    d9:ff:cc:8f:f6:4d:e0:83:dd:8b:0d:cb:20:ee:4a:
                    20:2e:ba:9e:01:2f:57:6e:a2:45:12:87:3c:39:c7:
                    bd:7b:18:5b:74:b3:38:95:8a:a4:4d:d2:0a:38:d6:
                    3d:96:88:99:1f:a7:73:10:f9:f4:62:c6:e7:39:73:
                    8e:eb:2a:8e:d3:c9:ec:e1:45:ac:06:61:75:4f:3a:
                    17:f8:a3:e2:e5:6f:b2:0e:c3:b6:c3:2a:db:a8:77:
                    16:45:66:7b:6c:84:6a:41:9f:5c:8d:cc:af:6b:fd:
                    dd:34:8f:c2:88:57:bc:fd:2f:9e:6e:6b:33:15:ff:
                    67:15:47:a8:97:db:16:10:64:7d:96:4e:52:10:28:
                    d6:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:81:BF:CE:AA:15:D6:AA:41:72:17:10:05:CE:24:DB:C2:70:DF:4F
            X509v3 Authority Key Identifier:
                keyid:63:B4:DE:45:7F:8E:07:0C:F2:B3:E1:4A:61:FF:7D:DF:B3:F8:70:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/63B4DE457F8E070CF2B3E14A61FF7DDFB3F87000.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63B4DE457F8E070CF2B3E14A61FF7DDFB3F87000.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/323830343a333934343a633030303a3a2f33342d3334203d3e20323636303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3944:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         15:0e:b9:31:76:f9:b0:31:86:97:85:f8:eb:b1:29:b3:b9:52:
         87:b9:ab:28:d3:d9:dc:d5:b4:21:9a:5a:f8:dd:b9:fc:39:97:
         06:00:bd:dc:44:66:71:2d:4e:98:c0:21:a3:73:aa:75:38:9e:
         54:c9:85:4b:4b:f1:58:d3:b7:bc:11:6b:11:f4:5d:08:20:a3:
         a3:d4:4f:be:90:19:05:f0:30:87:e3:8d:e5:b3:49:0d:82:83:
         35:fd:54:b0:7f:42:5c:77:13:72:ce:d8:f2:9f:4d:89:19:b0:
         cb:8c:23:96:16:a5:8d:b0:a2:77:c3:f7:e8:e9:b6:f4:ec:b8:
         9c:73:5b:e4:5f:90:4a:20:f9:e6:91:97:b2:04:ed:99:f1:06:
         17:32:3c:94:cf:a4:e9:a8:c6:a7:1b:de:8a:b0:f3:cd:11:c5:
         1e:3d:78:b4:a8:9c:38:31:da:41:c0:3b:03:ae:31:73:2d:42:
         8e:89:5a:c6:30:fb:22:e6:04:18:b4:84:f2:e1:89:93:b7:81:
         81:a9:e2:2a:98:f6:b8:1a:d4:56:d7:b8:99:d6:d1:98:9e:0c:
         d5:09:87:f3:a7:a1:6b:0e:fe:31:6d:f0:81:43:dc:8c:0d:25:
         e2:9e:d2:da:a4:7b:ea:e7:ce:04:44:2e:ef:27:f1:77:c6:dc:
         cc:ed:88:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:42:40 2025 by rpki-client