Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DyMaBAFmTbEbu1Yxsv2ndwCJGTGch5EmBpRVikvJuqBK/1/323830343a356533343a3a2f33322d313238203d3e20323639303138.roa
File:                     323830343a356533343a3a2f33322d313238203d3e20323639303138.roa (raw, json)
Hash identifier:          OLgKHqgGbEwp9YLyt+GlkYBGdIT0pdiA2z5v+L18RW0=
Subject key identifier:   B4:FE:91:32:28:73:58:3C:82:9E:EF:68:CD:55:60:8E:E1:E0:02:62
Certificate issuer:       /CN=83CE6152C5DC2AF2E628D574237B19843CB8056C
Certificate serial:       0B5A5C800D37404E8B2B7C459998187562AC74B4
Authority key identifier: 83:CE:61:52:C5:DC:2A:F2:E6:28:D5:74:23:7B:19:84:3C:B8:05:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83CE6152C5DC2AF2E628D574237B19843CB8056C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DyMaBAFmTbEbu1Yxsv2ndwCJGTGch5EmBpRVikvJuqBK/1/323830343a356533343a3a2f33322d313238203d3e20323639303138.roa
Signing time:             Thu 06 Mar 2025 03:03:19 +0000
ROA not before:           Thu 06 Mar 2025 02:58:19 +0000
ROA not after:            Thu 05 Mar 2026 03:03:19 +0000
asID:                     269018
IP address blocks:        2804:5e34::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:5a:5c:80:0d:37:40:4e:8b:2b:7c:45:99:98:18:75:62:ac:74:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83CE6152C5DC2AF2E628D574237B19843CB8056C
        Validity
            Not Before: Mar  6 02:58:19 2025 GMT
            Not After : Mar  5 03:03:19 2026 GMT
        Subject: CN=B4FE91322873583C829EEF68CD55608EE1E00262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c6:14:1a:7d:ab:8e:72:77:00:63:58:df:fe:
                    96:4c:ee:04:bd:ba:72:12:d5:d0:48:d7:e8:56:90:
                    0e:7a:2a:1c:b8:b7:77:47:76:f2:07:83:67:1d:ae:
                    44:7e:d4:6e:b6:22:e4:af:13:c3:e5:c8:b6:35:c7:
                    0b:c9:92:91:50:b6:a6:90:c8:c0:48:ec:20:37:01:
                    9e:0c:2f:ba:97:3a:b7:73:32:68:b7:82:40:95:b8:
                    17:47:71:a9:18:5d:99:2e:af:0d:a5:d9:bf:43:70:
                    5b:8c:15:20:5f:4f:99:8d:6c:80:a1:db:d1:aa:01:
                    b7:e3:b0:b9:ed:32:c9:8c:c7:e2:2e:f5:cb:97:f8:
                    f0:54:89:67:22:7e:e2:7c:a6:5f:cd:38:34:7b:21:
                    e6:8c:ca:77:0a:ff:5a:f6:3c:ac:a1:06:aa:41:06:
                    80:6c:1d:92:6c:db:cc:08:45:5e:68:52:0c:71:96:
                    73:a2:7e:05:36:31:bc:40:f4:52:8f:8b:4f:2f:73:
                    f5:59:43:20:7d:77:ff:9a:09:ba:6b:b6:66:b2:48:
                    8d:a0:62:f8:27:60:61:11:8e:51:bf:83:21:79:f3:
                    68:11:5f:7f:6c:27:70:59:56:a3:99:49:30:7b:ac:
                    4e:e1:cc:99:41:1a:23:56:9e:97:3c:3b:26:78:03:
                    6e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:FE:91:32:28:73:58:3C:82:9E:EF:68:CD:55:60:8E:E1:E0:02:62
            X509v3 Authority Key Identifier:
                keyid:83:CE:61:52:C5:DC:2A:F2:E6:28:D5:74:23:7B:19:84:3C:B8:05:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DyMaBAFmTbEbu1Yxsv2ndwCJGTGch5EmBpRVikvJuqBK/1/83CE6152C5DC2AF2E628D574237B19843CB8056C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83CE6152C5DC2AF2E628D574237B19843CB8056C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DyMaBAFmTbEbu1Yxsv2ndwCJGTGch5EmBpRVikvJuqBK/1/323830343a356533343a3a2f33322d313238203d3e20323639303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5e34::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:92:b0:d7:d7:41:ce:f2:3a:d5:09:cc:bc:a1:ab:eb:a7:d2:
         80:1e:52:ec:98:50:cd:14:3c:27:2b:71:2a:cd:2c:ac:a2:75:
         f6:9a:32:4a:af:96:05:a9:c2:4e:54:27:aa:9e:c7:bd:ff:47:
         5f:44:54:3d:27:17:a1:e1:05:30:07:3e:de:a6:d5:cc:f6:9f:
         e8:8b:2d:81:6f:01:d1:17:c6:81:7f:65:bc:da:68:62:6e:14:
         11:c1:f5:07:68:82:ed:2b:70:7e:4d:08:bf:0f:cd:9e:71:02:
         a5:69:d0:31:d9:f1:d3:ed:9e:3a:e0:7d:b4:b6:f6:ec:3a:48:
         e8:b2:6b:c7:d1:c3:1b:f7:5f:73:dd:e8:20:a0:d0:03:c3:30:
         6e:35:a8:b5:ed:5f:0f:61:bd:bb:5f:0a:a5:c5:a9:5c:c7:34:
         8b:d3:05:46:5d:7a:b3:f2:b6:42:a6:c3:c3:a9:cc:a9:a7:4f:
         99:e8:f1:de:9f:a1:bf:b3:41:15:31:5d:28:2d:3d:e5:61:e5:
         f4:8e:77:16:86:44:06:f2:0b:2c:7d:98:4b:c5:13:47:16:91:
         28:d7:39:d7:ec:2e:81:87:9f:0d:3e:8f:1a:44:90:b6:65:e9:
         3f:41:e2:a2:3a:55:49:93:42:fe:db:af:0f:2a:9e:c3:11:b9:
         cd:7a:9a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:31:43 2025 by rpki-client