Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/323830343a356163303a3a2f33322d3332203d3e20323638373933.roa
File:                     323830343a356163303a3a2f33322d3332203d3e20323638373933.roa (raw, json)
Hash identifier:          yfnfVddyHbULbaFzeKqPGmmLokmuA5/qlfdOo+93P1Y=
Subject key identifier:   06:3D:7B:1F:2B:A4:6F:C7:F0:1B:A3:C9:21:16:61:9F:E6:03:0D:E6
Certificate issuer:       /CN=62542D04D7B086689C6E3FE7D77F27061824D478
Certificate serial:       12BEECD1DE070B796BE4DB82BF90175C882F2E10
Authority key identifier: 62:54:2D:04:D7:B0:86:68:9C:6E:3F:E7:D7:7F:27:06:18:24:D4:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62542D04D7B086689C6E3FE7D77F27061824D478.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/323830343a356163303a3a2f33322d3332203d3e20323638373933.roa
Signing time:             Tue 17 Dec 2024 12:47:32 +0000
ROA not before:           Tue 17 Dec 2024 12:42:32 +0000
ROA not after:            Tue 16 Dec 2025 12:47:32 +0000
asID:                     268793
IP address blocks:        2804:5ac0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:be:ec:d1:de:07:0b:79:6b:e4:db:82:bf:90:17:5c:88:2f:2e:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62542D04D7B086689C6E3FE7D77F27061824D478
        Validity
            Not Before: Dec 17 12:42:32 2024 GMT
            Not After : Dec 16 12:47:32 2025 GMT
        Subject: CN=063D7B1F2BA46FC7F01BA3C92116619FE6030DE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f2:1a:11:5e:89:60:3c:c4:c2:f0:17:39:3b:
                    32:80:4c:71:f5:6d:7e:3f:f9:f4:aa:50:d6:d9:d4:
                    e4:7b:ca:40:69:6f:6c:2a:d6:c3:93:95:2f:d9:62:
                    db:72:4f:9c:ef:df:cb:67:da:6b:4f:78:a8:bd:c9:
                    af:21:e7:c6:5e:23:b0:2c:28:dc:97:b7:50:5d:17:
                    88:87:42:40:68:ee:a0:2a:a9:29:b1:58:79:87:cb:
                    5f:f3:23:fb:30:37:e7:86:74:5f:41:c4:5c:87:b4:
                    b6:fb:40:97:bc:31:c3:fe:06:2d:94:bb:96:41:63:
                    5d:66:d4:88:2f:d8:c6:42:06:bc:b1:84:d5:39:4e:
                    10:b3:5f:6a:ab:2e:ae:e5:c1:c6:95:ab:4d:a6:88:
                    18:6d:17:18:03:c6:45:75:e3:29:b2:4f:3a:e6:7f:
                    59:77:2d:17:03:e3:7c:f3:fa:97:90:40:2f:2f:f4:
                    60:59:7d:8f:d0:24:ea:8e:ad:3c:71:df:4e:e9:40:
                    0d:b0:76:23:c0:60:6c:75:ba:8e:6e:bd:df:d3:7d:
                    d6:4e:ed:a9:55:9a:8e:2c:88:10:3f:88:b4:44:5a:
                    43:24:c9:eb:ae:d9:81:c7:85:e0:34:e5:8c:0f:3d:
                    8e:19:0a:cb:62:ec:52:b5:98:7c:04:97:0b:e5:8a:
                    23:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:3D:7B:1F:2B:A4:6F:C7:F0:1B:A3:C9:21:16:61:9F:E6:03:0D:E6
            X509v3 Authority Key Identifier:
                keyid:62:54:2D:04:D7:B0:86:68:9C:6E:3F:E7:D7:7F:27:06:18:24:D4:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/62542D04D7B086689C6E3FE7D77F27061824D478.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62542D04D7B086689C6E3FE7D77F27061824D478.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/323830343a356163303a3a2f33322d3332203d3e20323638373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:d4:0a:6b:24:4b:2f:fb:4e:8d:4b:ad:33:e0:9a:a6:be:f6:
         e4:7c:ee:79:93:6d:10:51:2a:07:3c:5d:81:82:95:c6:16:67:
         bf:2c:25:d6:60:ba:2e:cf:9c:5a:bb:05:47:e3:57:1d:6f:22:
         5a:29:d1:d4:e7:5a:59:c5:24:e4:8d:2b:cf:ba:69:81:9a:15:
         38:a5:63:66:4e:01:9c:90:12:c1:e3:45:67:bd:e1:0c:e4:7e:
         51:fb:8f:83:43:c7:6e:09:0b:2e:9b:84:a3:61:c8:34:e7:47:
         7e:9b:22:d5:ed:ea:29:f2:c4:aa:b1:9f:66:3d:49:51:e2:15:
         cb:89:de:a6:c9:ce:ba:9c:b2:07:f0:00:df:94:a2:3e:ee:9a:
         91:13:8e:5e:aa:86:30:c9:01:10:a3:95:2e:e5:97:24:bb:35:
         7d:f5:9a:e1:f1:bb:3b:08:d9:5f:44:1a:01:63:90:ed:d9:96:
         4a:eb:0f:a5:f7:49:de:ed:ad:e8:d1:c3:83:a2:2a:85:bd:05:
         44:48:23:4a:31:ad:99:53:cd:e2:e1:86:78:48:0a:01:6f:40:
         bd:2c:02:c0:70:8e:d8:06:e3:da:f7:c9:18:b3:f7:93:2a:7a:
         bd:12:be:c7:ce:ac:95:b0:b9:c9:c6:b3:cb:1c:f1:12:0a:ab:
         9b:d7:6c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:10:52 2025 by rpki-client