Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/323830343a323566303a383030303a3a2f33342d3334203d3e20323634333131.roa
File:                     323830343a323566303a383030303a3a2f33342d3334203d3e20323634333131.roa (raw, json)
Hash identifier:          FdkTZK+QRcoqs/as6Us9cCM+lpAHki0oc04RvUg0Xuw=
Subject key identifier:   5C:55:5E:AD:85:99:2D:EF:39:F1:41:A1:E6:B5:F9:28:52:F1:B2:2C
Certificate issuer:       /CN=B5E0BE3C4F73F852BFF3535537037CAE482A4EFA
Certificate serial:       64FB8F421E8FF658AE6122062C1C491CE61A6970
Authority key identifier: B5:E0:BE:3C:4F:73:F8:52:BF:F3:53:55:37:03:7C:AE:48:2A:4E:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/323830343a323566303a383030303a3a2f33342d3334203d3e20323634333131.roa
Signing time:             Wed 05 Mar 2025 19:00:02 +0000
ROA not before:           Wed 05 Mar 2025 18:55:02 +0000
ROA not after:            Wed 04 Mar 2026 19:00:02 +0000
asID:                     264311
IP address blocks:        2804:25f0:8000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:fb:8f:42:1e:8f:f6:58:ae:61:22:06:2c:1c:49:1c:e6:1a:69:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5E0BE3C4F73F852BFF3535537037CAE482A4EFA
        Validity
            Not Before: Mar  5 18:55:02 2025 GMT
            Not After : Mar  4 19:00:02 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:56:e5:2d:57:bc:45:52:aa:ea:92:ff:21:6e:
                    60:26:ab:32:ae:52:5b:8a:94:6c:00:ef:68:7c:f3:
                    67:b4:e2:db:e2:bd:c4:bd:86:f0:5f:b5:54:d6:b9:
                    01:a2:12:4e:ad:e7:f8:9e:f3:c8:d6:70:35:1e:64:
                    94:ee:5d:1e:3e:a8:62:7a:50:3e:03:f9:da:6d:59:
                    a7:22:66:3d:dd:c2:20:c7:32:11:fe:b5:13:cc:c8:
                    47:5e:82:9f:78:f9:1a:79:c8:e3:80:7b:63:b6:8f:
                    8c:37:c1:34:53:8f:12:94:33:be:60:96:fb:0d:13:
                    9b:db:29:4b:4d:48:7e:be:44:b4:d8:2b:5c:60:95:
                    76:d5:66:d2:11:b2:22:b5:bc:11:ff:6a:b5:dc:ee:
                    54:28:89:79:bb:50:49:06:a3:01:d5:4e:a9:78:6b:
                    fd:df:34:4b:39:e2:f3:02:68:ae:30:dd:cf:40:03:
                    a6:14:4c:8c:f1:a7:e6:1a:78:a4:76:aa:94:f0:93:
                    98:b9:56:c7:c1:03:52:10:ac:f6:1f:85:5c:a8:0d:
                    04:23:fb:89:53:26:3f:ea:65:d7:bf:64:6b:5a:e0:
                    b3:aa:a1:8a:1d:c2:57:22:8c:d0:df:4e:f7:15:13:
                    a8:06:92:79:14:54:d4:a3:59:63:1e:ae:7f:59:fc:
                    4a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:55:5E:AD:85:99:2D:EF:39:F1:41:A1:E6:B5:F9:28:52:F1:B2:2C
            X509v3 Authority Key Identifier:
                keyid:B5:E0:BE:3C:4F:73:F8:52:BF:F3:53:55:37:03:7C:AE:48:2A:4E:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/323830343a323566303a383030303a3a2f33342d3334203d3e20323634333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25f0:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         89:fc:3e:b5:3e:ef:f1:ef:e7:46:5a:36:a7:13:88:5f:0b:e4:
         44:13:8d:a0:3e:c1:42:75:03:10:af:7d:28:46:4d:d8:b6:ab:
         ff:c7:98:bb:7c:9c:a3:c5:58:c0:9f:43:8d:c9:a3:98:b6:92:
         07:99:7d:38:3b:ff:34:f2:94:4a:78:f0:a2:a9:ee:c6:6c:81:
         3e:0d:32:6d:3b:96:5c:df:a9:84:6f:a5:c5:86:66:06:3a:fa:
         ae:6c:04:35:03:b3:9b:3e:8c:98:37:a8:72:f2:99:d8:8c:90:
         bb:6e:f1:f0:ad:28:5d:d1:f1:46:73:7c:35:99:95:9b:af:95:
         5c:48:6d:c9:86:5b:2e:8d:f0:ea:ca:7e:fe:f2:92:8d:e3:a8:
         7a:fa:95:41:07:34:ea:f0:bc:61:0c:84:7c:3c:58:d2:d9:b0:
         31:4b:06:79:99:8f:75:dc:0a:a8:39:5d:7f:94:2d:e5:91:a9:
         5d:96:55:1f:ee:87:f7:a9:fd:d0:0a:02:29:88:3b:89:c6:67:
         b5:4c:49:03:53:67:1a:ea:64:fa:37:04:0d:0b:13:b7:1e:2d:
         45:c5:01:84:ee:71:6f:48:4d:d0:0c:57:3b:6c:e5:79:ce:fe:
         10:ac:dd:85:8b:65:dc:6a:6d:0f:1e:60:7f:c2:4c:e6:0b:99:
         ae:43:6c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:41:57 2025 by rpki-client