Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/323830343a356163303a3a2f33352d3335203d3e20323638373933.roa
File:                     323830343a356163303a3a2f33352d3335203d3e20323638373933.roa (raw, json)
Hash identifier:          3yqOp4uN6b7eSlHhwf4qhaeoxlUV3GMZ8ZxIxPGwv9A=
Subject key identifier:   78:DC:2C:9D:65:D0:C5:A6:7D:E1:29:6C:8D:C1:6B:19:DC:AA:11:5F
Certificate issuer:       /CN=62542D04D7B086689C6E3FE7D77F27061824D478
Certificate serial:       393406E951FE442006196B5723E07058DE829A7D
Authority key identifier: 62:54:2D:04:D7:B0:86:68:9C:6E:3F:E7:D7:7F:27:06:18:24:D4:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62542D04D7B086689C6E3FE7D77F27061824D478.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/323830343a356163303a3a2f33352d3335203d3e20323638373933.roa
Signing time:             Mon 13 Jan 2025 18:14:29 +0000
ROA not before:           Mon 13 Jan 2025 18:09:29 +0000
ROA not after:            Mon 12 Jan 2026 18:14:29 +0000
asID:                     268793
IP address blocks:        2804:5ac0::/35 maxlen: 35
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:34:06:e9:51:fe:44:20:06:19:6b:57:23:e0:70:58:de:82:9a:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62542D04D7B086689C6E3FE7D77F27061824D478
        Validity
            Not Before: Jan 13 18:09:29 2025 GMT
            Not After : Jan 12 18:14:29 2026 GMT
        Subject: CN=78DC2C9D65D0C5A67DE1296C8DC16B19DCAA115F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b0:c1:27:ef:93:78:08:87:b0:36:98:0a:7d:
                    41:7b:25:db:4f:51:49:c4:72:d3:06:5b:f8:f5:0f:
                    c6:81:9a:3f:00:ca:42:f4:3b:cf:89:5e:f0:89:e6:
                    c9:0f:71:a1:cb:b3:98:e0:71:83:f6:aa:48:a0:f6:
                    c0:eb:d7:34:3c:95:05:e6:0f:1c:41:26:7a:8c:4c:
                    b8:1c:c6:11:6a:59:38:fd:36:d8:be:c3:19:1f:27:
                    c7:93:85:42:9d:b4:53:09:cb:57:9c:39:01:54:a6:
                    c6:c5:a3:86:a6:da:8a:11:85:3a:1b:9f:51:a8:1c:
                    40:ad:61:6b:ac:37:c5:80:26:8f:2f:fc:5c:20:1c:
                    8a:37:f6:4a:95:7e:07:20:39:13:ab:8c:79:df:ec:
                    53:5d:c5:3c:23:ea:8b:7d:ad:20:6d:6c:d7:95:2d:
                    81:9c:0c:ac:a4:79:3b:eb:29:77:0f:43:bb:a3:de:
                    21:0b:0f:31:88:20:6a:9b:a9:ad:fb:28:15:ea:4b:
                    18:cb:1c:e8:bd:4a:63:d0:93:2b:a2:01:e7:07:5e:
                    5f:c0:b5:2e:41:86:aa:4e:fb:af:ef:08:75:b3:4e:
                    f2:69:fe:ac:2b:8d:f9:b8:20:ef:c7:49:06:64:ec:
                    d7:40:88:cb:96:21:85:c9:8c:b2:79:4f:ac:a3:7e:
                    d4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:DC:2C:9D:65:D0:C5:A6:7D:E1:29:6C:8D:C1:6B:19:DC:AA:11:5F
            X509v3 Authority Key Identifier:
                keyid:62:54:2D:04:D7:B0:86:68:9C:6E:3F:E7:D7:7F:27:06:18:24:D4:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/62542D04D7B086689C6E3FE7D77F27061824D478.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62542D04D7B086689C6E3FE7D77F27061824D478.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/323830343a356163303a3a2f33352d3335203d3e20323638373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ac0::/35

    Signature Algorithm: sha256WithRSAEncryption
         62:44:e8:ea:18:fa:2c:a3:11:cc:e4:9c:9c:bd:88:b9:9d:87:
         86:7d:6c:62:77:f3:5d:82:65:80:23:3e:c3:44:b0:75:6a:92:
         f9:d5:ff:95:2f:7e:fa:4b:b7:55:bc:76:b3:6d:d1:1b:b7:aa:
         24:17:9a:94:e4:2e:29:7b:43:79:ac:71:cb:ec:ea:55:b2:c1:
         36:b8:1f:d4:e6:70:1e:64:aa:eb:a5:68:14:d4:c2:70:67:72:
         32:02:d9:c2:0d:74:dc:50:80:48:04:72:11:73:5b:12:e0:01:
         03:56:5c:c2:29:c4:79:33:e4:4f:ce:27:c2:51:14:b1:f2:4d:
         87:c7:25:ec:ba:2a:1b:1d:3f:15:52:2a:a8:79:1f:30:54:30:
         14:2a:77:03:89:d0:8e:87:d4:b2:97:92:2b:45:11:3a:f9:ef:
         c8:23:e8:00:30:4a:a3:ac:d1:36:fe:f7:7e:23:35:ff:71:69:
         af:56:d8:fd:02:d4:b0:34:fc:cb:44:a1:f4:9d:29:fb:66:09:
         bd:e3:51:25:97:72:00:d8:7d:81:71:41:84:4f:7c:7c:ef:5f:
         9b:b3:70:57:d6:49:6f:a3:d8:e1:3d:c4:ab:69:a1:14:df:3a:
         4b:08:63:43:4a:e6:f8:00:3e:9e:f2:96:22:8e:60:4a:47:6f:
         89:fb:cf:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:11:42 2025 by rpki-client