Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/323830343a373463303a383030303a3a2f33332d3333203d3e20323731303031.roa
File:                     323830343a373463303a383030303a3a2f33332d3333203d3e20323731303031.roa (raw, json)
Hash identifier:          qgFxFxtxDJNyrMOE8s6UdEvMBq+6La07xmVkbifGxYo=
Subject key identifier:   B7:1D:18:5A:AE:15:B1:A7:CA:A7:8A:A3:15:4D:D6:8A:ED:13:3D:7E
Certificate issuer:       /CN=B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81
Certificate serial:       22148922C1516AE618B16FD751AFB182CDFB7FB6
Authority key identifier: B6:C5:FB:85:7E:69:A9:04:49:73:FA:30:62:AA:1D:6F:BF:5C:4A:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/323830343a373463303a383030303a3a2f33332d3333203d3e20323731303031.roa
Signing time:             Thu 06 Mar 2025 02:14:52 +0000
ROA not before:           Thu 06 Mar 2025 02:09:52 +0000
ROA not after:            Thu 05 Mar 2026 02:14:52 +0000
asID:                     271001
IP address blocks:        2804:74c0:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:14:89:22:c1:51:6a:e6:18:b1:6f:d7:51:af:b1:82:cd:fb:7f:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81
        Validity
            Not Before: Mar  6 02:09:52 2025 GMT
            Not After : Mar  5 02:14:52 2026 GMT
        Subject: CN=B71D185AAE15B1A7CAA78AA3154DD68AED133D7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e6:af:3b:d7:3a:d4:4b:70:f5:e0:45:8f:43:
                    08:6e:87:26:c5:0f:ea:3e:d9:bc:88:b3:68:61:59:
                    e9:2e:86:08:2c:4c:5f:ba:b9:66:27:d1:77:db:df:
                    a3:c0:33:5c:90:de:21:28:c7:bb:4f:a1:09:17:55:
                    c7:1d:c6:50:9a:7b:d9:2c:49:06:60:4c:75:d6:cf:
                    d3:91:86:f3:9e:b0:02:ed:2b:04:1b:9b:64:2e:5f:
                    20:c5:bc:47:c9:af:15:64:d2:09:e1:d4:22:c9:c4:
                    2e:cf:2c:0c:a1:02:a1:12:22:bf:c3:de:b2:b4:2b:
                    ad:fe:11:03:df:72:81:bc:77:df:ef:7a:7a:70:41:
                    b5:e9:2c:32:ac:83:1e:1f:4f:84:ea:37:fd:cc:3a:
                    8d:0a:dc:83:14:6d:31:1d:e6:3f:a8:0a:a7:c3:60:
                    50:23:aa:01:ea:e9:94:d3:f6:91:d4:8f:7a:7f:3c:
                    27:df:4f:99:77:7f:66:76:64:98:50:54:14:ed:50:
                    e6:84:55:0e:30:40:4d:5d:95:26:8c:71:09:91:92:
                    00:b3:3a:fe:fb:fe:49:c3:45:9b:7c:c3:bd:be:7f:
                    4f:20:23:95:8a:8a:61:5d:ec:78:f6:f9:7a:b6:1b:
                    60:4b:d4:bb:fe:86:5a:f3:55:f7:ff:5d:f1:a3:e7:
                    52:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:1D:18:5A:AE:15:B1:A7:CA:A7:8A:A3:15:4D:D6:8A:ED:13:3D:7E
            X509v3 Authority Key Identifier:
                keyid:B6:C5:FB:85:7E:69:A9:04:49:73:FA:30:62:AA:1D:6F:BF:5C:4A:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/323830343a373463303a383030303a3a2f33332d3333203d3e20323731303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74c0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         14:06:b7:83:a0:d6:58:da:d7:75:d8:39:ee:4b:3b:7d:a4:4b:
         74:49:2c:ce:71:a9:da:73:59:1e:d9:23:90:4e:84:2f:b8:49:
         ee:63:66:ae:c1:a8:1c:09:6f:c0:cf:a8:64:66:e8:64:86:b4:
         af:89:02:16:33:ac:70:54:01:64:21:19:fc:43:f3:92:e1:39:
         11:43:a4:d0:cf:69:98:13:fc:79:5b:49:16:12:00:1b:54:36:
         55:70:09:46:95:98:cb:e0:7b:7d:13:fd:9c:56:3a:50:d3:9a:
         67:ea:ef:1b:b6:43:9c:06:72:31:db:65:05:13:0c:75:3e:10:
         f6:9c:10:78:3b:9d:88:68:65:11:1b:a2:26:8b:ea:3d:11:3d:
         2a:0d:1e:07:13:62:5f:de:10:e8:b0:bf:c1:9a:3e:04:02:ca:
         49:7a:6e:e5:8a:05:4e:18:9f:d8:4a:d9:4b:6f:a3:8b:ad:36:
         96:98:6d:33:ec:f2:6c:bf:36:1e:23:a9:ee:e0:d0:c5:2f:66:
         c3:0f:3e:f4:cd:48:98:b3:23:c6:35:5b:7f:dc:32:f6:8c:37:
         0c:12:d8:71:92:21:61:bc:f6:46:d7:81:6f:b7:28:af:f5:ed:
         87:de:c6:41:d7:14:fd:a4:6b:47:71:95:cc:ba:3e:9c:d5:1d:
         aa:e3:2c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:13:18 2025 by rpki-client