Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CikieeVDn3QBt3qq5bkP3jFNc6jQyNQ2M9woAJHi8Jv4/0/323830343a353536633a383030303a3a2f33332d3333203d3e20323637393334.roa
File:                     323830343a353536633a383030303a3a2f33332d3333203d3e20323637393334.roa (raw, json)
Hash identifier:          FMGUX9QhSxYnoEEJ0VyC8OtH4S59wtJmwovif0R8fEk=
Subject key identifier:   BE:BE:00:22:82:0A:7E:63:0C:25:8C:DB:9F:2C:F5:5F:6E:A5:6D:03
Certificate issuer:       /CN=59B8F0B9B2D0E36E4909DD9EEB66DF00C75CBC2D
Certificate serial:       76538A543A68CA3F0478750F392ACB27A5667C8D
Authority key identifier: 59:B8:F0:B9:B2:D0:E3:6E:49:09:DD:9E:EB:66:DF:00:C7:5C:BC:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59B8F0B9B2D0E36E4909DD9EEB66DF00C75CBC2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CikieeVDn3QBt3qq5bkP3jFNc6jQyNQ2M9woAJHi8Jv4/0/323830343a353536633a383030303a3a2f33332d3333203d3e20323637393334.roa
Signing time:             Mon 08 Jan 2024 18:31:06 +0000
ROA not before:           Mon 08 Jan 2024 18:26:06 +0000
ROA not after:            Mon 06 Jan 2025 18:31:06 +0000
asID:                     267934
IP address blocks:        2804:556c:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:53:8a:54:3a:68:ca:3f:04:78:75:0f:39:2a:cb:27:a5:66:7c:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B8F0B9B2D0E36E4909DD9EEB66DF00C75CBC2D
        Validity
            Not Before: Jan  8 18:26:06 2024 GMT
            Not After : Jan  6 18:31:06 2025 GMT
        Subject: CN=BEBE0022820A7E630C258CDB9F2CF55F6EA56D03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:36:0b:13:2c:e4:21:f5:fb:ab:52:36:7a:a6:
                    f5:00:df:9a:23:64:2d:62:40:37:35:52:5c:7f:2f:
                    d7:a1:63:4b:94:20:26:54:df:66:b6:43:32:fa:e3:
                    52:83:50:e6:1f:cb:fc:08:2c:2a:24:9d:35:21:6e:
                    42:6e:3b:3e:77:2f:db:79:c0:90:13:07:e5:e0:da:
                    bc:b8:8e:dc:52:da:8c:e5:bd:ba:4c:34:46:b9:c6:
                    3d:76:5b:e4:e2:53:b6:65:4a:3e:1b:46:b1:42:c9:
                    06:54:55:e1:e9:04:49:f9:35:85:d1:06:94:19:89:
                    ec:2f:01:ee:8d:b3:b3:fc:49:f5:1e:f9:ae:77:de:
                    4b:b4:ab:ee:8d:ed:f4:d8:29:3b:c7:9c:11:32:df:
                    b5:62:66:a7:48:09:51:02:6a:a7:21:e9:4b:6f:ee:
                    80:cc:5c:38:ef:f7:52:7e:ed:f3:4c:3a:2e:ad:dd:
                    a6:36:cf:7a:ee:1a:57:cb:90:6a:a2:89:e9:56:a3:
                    49:cb:75:32:7d:a9:c0:af:69:e9:76:74:8f:15:c5:
                    03:21:0c:28:c0:aa:3b:e8:cc:33:fa:5e:26:f0:66:
                    ab:9d:9d:33:5a:67:9e:b2:06:e8:f9:98:32:7b:55:
                    82:05:5b:3e:44:65:bf:4d:1a:f8:df:ab:88:87:6f:
                    82:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:BE:00:22:82:0A:7E:63:0C:25:8C:DB:9F:2C:F5:5F:6E:A5:6D:03
            X509v3 Authority Key Identifier:
                keyid:59:B8:F0:B9:B2:D0:E3:6E:49:09:DD:9E:EB:66:DF:00:C7:5C:BC:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CikieeVDn3QBt3qq5bkP3jFNc6jQyNQ2M9woAJHi8Jv4/0/59B8F0B9B2D0E36E4909DD9EEB66DF00C75CBC2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59B8F0B9B2D0E36E4909DD9EEB66DF00C75CBC2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CikieeVDn3QBt3qq5bkP3jFNc6jQyNQ2M9woAJHi8Jv4/0/323830343a353536633a383030303a3a2f33332d3333203d3e20323637393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:556c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         04:b9:7b:ab:1e:ac:75:1c:66:ab:f9:57:a3:4b:62:fb:f3:40:
         f5:fa:8f:fb:4d:10:97:72:a0:2e:c2:af:29:f9:3f:bd:13:b3:
         0b:5b:20:de:ca:d0:d0:3d:a6:6c:10:f5:38:8e:ce:4e:92:5b:
         f8:6b:d1:6c:87:18:01:c8:6e:bd:d3:b4:a0:63:43:05:52:1e:
         fd:ab:53:2d:d2:29:90:58:96:f1:23:be:7c:4c:f8:79:32:f7:
         a1:cf:26:9b:6b:5b:39:2c:38:ab:b1:a4:13:e1:b0:33:6a:4d:
         33:e9:e5:8d:69:10:cb:b3:32:b7:1f:47:47:68:b9:d2:1a:0d:
         6e:74:e0:f2:28:4e:2a:31:03:13:25:31:58:87:63:c2:7d:d7:
         e7:1e:67:2d:22:0f:53:a2:a7:ef:8b:d7:8e:3e:22:ab:64:6a:
         7e:8a:92:0f:a1:20:7f:09:12:08:f3:ff:fc:21:49:f5:83:9f:
         60:6b:61:ad:a3:e1:37:f5:c0:c9:3d:4f:52:21:4c:bf:ba:71:
         86:d3:42:53:c3:ea:3b:86:e8:7d:e1:73:ce:30:26:90:f7:f6:
         ce:94:b1:9a:b7:82:6d:c8:47:3b:17:07:cb:f2:83:0a:89:24:
         87:d7:d6:17:80:37:7f:bb:9e:ef:fd:78:f0:8f:94:58:53:ae:
         38:18:1a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:27 2025 by rpki-client