Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EBpeZLqvUdZ8WUcQMzRiyAtCv4SZKPL5VtVTLvZFiCcN/1/323830343a363763343a3a2f33322d313238203d3e20323639363439.roa
File:                     323830343a363763343a3a2f33322d313238203d3e20323639363439.roa (raw, json)
Hash identifier:          sx66GdN/o8ObU+kS4UdT85uvRj7R169FGRhEutZKWEQ=
Subject key identifier:   6A:79:DD:89:DF:E9:88:57:87:F9:EE:5B:51:24:5C:B6:C9:8D:60:CE
Certificate issuer:       /CN=BBD11DF49273D1C5B130165EBD7161A3E93D1629
Certificate serial:       74738049718A8F9895835A8B67132317A025DD44
Authority key identifier: BB:D1:1D:F4:92:73:D1:C5:B1:30:16:5E:BD:71:61:A3:E9:3D:16:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BBD11DF49273D1C5B130165EBD7161A3E93D1629.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EBpeZLqvUdZ8WUcQMzRiyAtCv4SZKPL5VtVTLvZFiCcN/1/323830343a363763343a3a2f33322d313238203d3e20323639363439.roa
Signing time:             Thu 06 Mar 2025 20:21:34 +0000
ROA not before:           Thu 06 Mar 2025 20:16:34 +0000
ROA not after:            Thu 05 Mar 2026 20:21:34 +0000
asID:                     269649
IP address blocks:        2804:67c4::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:73:80:49:71:8a:8f:98:95:83:5a:8b:67:13:23:17:a0:25:dd:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBD11DF49273D1C5B130165EBD7161A3E93D1629
        Validity
            Not Before: Mar  6 20:16:34 2025 GMT
            Not After : Mar  5 20:21:34 2026 GMT
        Subject: CN=6A79DD89DFE9885787F9EE5B51245CB6C98D60CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b1:81:c4:4a:a7:f2:d2:76:2a:8f:76:34:e8:
                    9f:73:a4:bd:ae:dc:9f:73:7f:08:db:10:a6:fb:74:
                    02:a7:8b:cd:f9:b1:d1:29:10:99:23:92:4b:a4:62:
                    b9:a0:95:9e:74:9e:56:3d:47:5d:b5:64:fb:c7:21:
                    dd:9a:2d:ae:05:04:1c:ca:8f:4b:8e:46:39:f0:70:
                    64:d8:e2:c8:9a:6b:72:3c:fc:0f:3f:60:76:2a:4c:
                    09:5b:83:fe:48:a4:3a:80:00:10:85:0f:f2:60:56:
                    8c:da:08:14:1a:42:9a:d4:8e:0c:27:4d:b2:81:c0:
                    5e:51:22:26:1d:be:3a:2b:58:f4:91:43:08:d6:42:
                    ba:dc:dd:42:ad:2e:fd:4c:d4:60:83:e9:ed:7e:c9:
                    fd:a5:56:49:d2:e7:d4:5f:3f:d5:83:a3:f6:02:0c:
                    fa:00:ee:59:f6:8e:ee:e3:fa:4f:9e:2b:0c:fa:de:
                    d5:24:87:d7:08:4c:27:60:e8:d3:57:ec:f6:2b:8e:
                    bd:fe:84:28:77:3f:1d:ad:20:67:02:ca:e8:60:82:
                    9b:30:7b:59:a2:ed:ad:86:13:ca:39:04:38:50:11:
                    f1:af:47:7a:1d:96:5a:2d:85:cf:a5:d6:4f:58:fb:
                    4b:8c:1c:b1:21:a0:85:87:82:b4:8d:0f:ba:18:3a:
                    f1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:79:DD:89:DF:E9:88:57:87:F9:EE:5B:51:24:5C:B6:C9:8D:60:CE
            X509v3 Authority Key Identifier:
                keyid:BB:D1:1D:F4:92:73:D1:C5:B1:30:16:5E:BD:71:61:A3:E9:3D:16:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EBpeZLqvUdZ8WUcQMzRiyAtCv4SZKPL5VtVTLvZFiCcN/1/BBD11DF49273D1C5B130165EBD7161A3E93D1629.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BBD11DF49273D1C5B130165EBD7161A3E93D1629.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EBpeZLqvUdZ8WUcQMzRiyAtCv4SZKPL5VtVTLvZFiCcN/1/323830343a363763343a3a2f33322d313238203d3e20323639363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:67c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:a2:86:b5:72:a3:81:58:b9:15:b8:3e:35:f3:12:9e:83:50:
         55:3d:3f:e5:65:cc:c2:58:6b:b0:a4:69:82:15:be:94:19:5d:
         9f:2b:ed:53:5e:af:56:fc:fc:a4:e0:d2:47:e6:96:c1:7d:79:
         46:51:76:69:62:d1:05:6e:8f:6e:5e:11:8e:66:16:60:b2:8e:
         a9:44:50:ff:12:f8:ad:81:7d:3e:3f:08:33:b7:57:29:38:6b:
         62:61:70:32:26:7b:aa:81:42:af:2a:a6:70:0c:2d:34:46:87:
         77:42:f6:d5:e8:8f:bb:bc:10:46:97:30:14:2f:ef:88:cb:26:
         87:db:4d:47:0b:ae:bc:d9:4c:2d:8c:9c:83:96:bb:08:14:a2:
         28:80:5e:af:b6:96:91:d7:e0:b6:03:48:83:66:5f:1b:9a:25:
         6f:0b:9f:bf:8f:fc:1f:57:f8:e9:7a:c4:f8:7c:f0:cb:88:92:
         3c:f3:2d:56:a5:90:39:31:c9:23:61:35:66:a1:57:b3:00:77:
         05:e3:37:6a:e9:13:ff:5e:c2:24:85:f7:7e:57:7e:7f:0d:87:
         8c:2a:bc:6d:8b:23:12:47:df:96:be:c7:46:0d:cc:b7:b2:8c:
         0c:27:bc:59:82:bd:dc:09:29:88:36:26:88:05:4a:aa:39:0c:
         c4:5e:20:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:54:52 2025 by rpki-client