Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BxF85QGg8Q3nCrpY2CmDtmnxYRcwKp6t7jdMovXu5Gjb/0/323830343a313235303a3a2f33322d3334203d3e20323633343639.roa
File:                     323830343a313235303a3a2f33322d3334203d3e20323633343639.roa (raw, json)
Hash identifier:          U7lGwUz5nNlC4MmF3g4JgHj02KBGuIKmQZtYK0L6XFs=
Subject key identifier:   24:E1:27:67:8E:DB:6B:80:A0:6D:FA:3A:43:4E:57:A6:DB:DA:B5:68
Certificate issuer:       /CN=C27022B7E95BA3A6EDB2EBDEA9C142011C269ACE
Certificate serial:       1E6E35DCEAD14363C97C7D64EE3A189F484886ED
Authority key identifier: C2:70:22:B7:E9:5B:A3:A6:ED:B2:EB:DE:A9:C1:42:01:1C:26:9A:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C27022B7E95BA3A6EDB2EBDEA9C142011C269ACE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BxF85QGg8Q3nCrpY2CmDtmnxYRcwKp6t7jdMovXu5Gjb/0/323830343a313235303a3a2f33322d3334203d3e20323633343639.roa
Signing time:             Wed 30 Aug 2023 14:00:00 +0000
ROA not before:           Wed 30 Aug 2023 13:55:00 +0000
ROA not after:            Wed 28 Aug 2024 14:00:00 +0000
asID:                     263469
IP address blocks:        2804:1250::/32 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:6e:35:dc:ea:d1:43:63:c9:7c:7d:64:ee:3a:18:9f:48:48:86:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C27022B7E95BA3A6EDB2EBDEA9C142011C269ACE
        Validity
            Not Before: Aug 30 13:55:00 2023 GMT
            Not After : Aug 28 14:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6a:a0:d3:15:dd:5f:09:ce:64:e3:74:34:85:
                    8d:7b:e4:3f:f1:ae:2e:4c:70:0b:6d:84:77:36:7e:
                    32:39:fe:21:1c:bc:e7:ce:50:41:a8:72:00:39:10:
                    14:af:2b:18:55:6d:f4:05:c8:85:09:f6:ca:c0:be:
                    4d:9b:fe:5f:05:6f:c5:fc:d5:3a:b9:ea:ad:c8:ee:
                    58:ba:50:13:32:41:2f:45:d7:cf:7a:15:6a:38:dc:
                    fb:e2:b2:55:2e:b6:40:19:48:39:c7:5a:f6:d2:c8:
                    11:7a:a7:7f:b7:d4:af:06:36:19:cb:51:8c:aa:33:
                    22:0f:9f:ea:e6:2c:53:91:ba:d6:df:52:15:20:1a:
                    23:d8:fc:92:ff:d0:b0:d3:1e:4f:97:a6:49:d9:82:
                    d5:9b:df:b8:e8:ac:b4:04:a9:b5:c3:99:84:c3:71:
                    f5:6d:dd:96:80:09:c1:ab:7f:25:36:a2:78:68:ef:
                    d1:65:4c:08:d7:d2:11:1b:85:37:e6:cf:08:40:6e:
                    77:c9:e9:73:1b:68:6d:e4:e3:aa:7c:70:cd:c6:95:
                    6a:0d:e2:a4:ae:fa:75:74:45:d9:7e:64:f6:46:b7:
                    19:1d:a8:3c:78:15:2a:76:80:6f:52:43:52:56:a9:
                    8d:87:8f:17:fb:1d:70:84:99:74:a8:09:ca:60:af:
                    c8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:E1:27:67:8E:DB:6B:80:A0:6D:FA:3A:43:4E:57:A6:DB:DA:B5:68
            X509v3 Authority Key Identifier:
                keyid:C2:70:22:B7:E9:5B:A3:A6:ED:B2:EB:DE:A9:C1:42:01:1C:26:9A:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BxF85QGg8Q3nCrpY2CmDtmnxYRcwKp6t7jdMovXu5Gjb/0/C27022B7E95BA3A6EDB2EBDEA9C142011C269ACE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C27022B7E95BA3A6EDB2EBDEA9C142011C269ACE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BxF85QGg8Q3nCrpY2CmDtmnxYRcwKp6t7jdMovXu5Gjb/0/323830343a313235303a3a2f33322d3334203d3e20323633343639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1250::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:31:a1:d0:86:63:ac:8f:4f:ca:60:f9:a7:1d:02:53:dc:fc:
         c3:0f:96:9f:bc:ac:85:ca:87:02:1e:c8:2d:fe:c9:64:c8:30:
         e0:6c:8f:9f:d7:91:bd:3c:04:6d:17:1d:34:ac:1a:e5:8e:4b:
         21:05:c5:39:64:8f:d0:33:c8:30:d2:0e:25:d1:2a:e8:05:d9:
         bf:83:80:a8:b2:0d:c6:c3:5a:08:85:46:b6:c1:4b:43:7a:b0:
         d8:ba:02:09:fc:7a:8d:bd:b0:0e:0a:92:c3:19:c1:ae:9d:a6:
         0e:f2:29:2c:19:7e:44:c4:7b:46:d7:35:c6:bd:bf:5d:d5:58:
         28:1e:2f:22:93:91:ea:cb:dc:44:ec:82:62:0b:5b:2e:cb:44:
         3f:36:f7:59:6a:f6:36:a6:98:70:74:e4:f6:8e:45:c7:a0:09:
         a7:9c:d5:00:88:f1:52:25:ef:38:96:e0:93:83:fe:68:2f:b9:
         a6:fc:96:bd:38:b6:f3:35:5e:ab:e6:05:7f:fc:3b:72:19:8e:
         54:3b:8d:30:d8:21:2b:37:b9:d3:73:bc:35:97:ff:19:ab:73:
         92:8f:a7:9a:ec:b7:72:1e:91:a6:d1:9f:c3:2f:98:61:89:3c:
         6c:4d:76:7d:66:cc:06:c9:99:2f:5c:d9:e7:63:31:f7:93:0a:
         fa:5f:0c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:16:38 2025 by rpki-client