Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EennRTSYfwGuDgSRTw2tFLKSMbE7e6MXh8WehGCE9Ta/0/323830343a323436383a3a2f33322d3438203d3e20323634323231.roa
File:                     323830343a323436383a3a2f33322d3438203d3e20323634323231.roa (raw, json)
Hash identifier:          QGDwcQEqCT7btwVyIGdgyY62zgT7pMJk3TEqaOeRqUI=
Subject key identifier:   9C:66:7D:02:D7:21:93:F0:36:AD:58:C7:B0:86:2B:92:F5:8E:9E:12
Certificate issuer:       /CN=BEC2FF1EC8AC86D3B2252C937D13CB8E9D51FF33
Certificate serial:       39232F4F909B51D46174D616C979EA4DBEF268D0
Authority key identifier: BE:C2:FF:1E:C8:AC:86:D3:B2:25:2C:93:7D:13:CB:8E:9D:51:FF:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEC2FF1EC8AC86D3B2252C937D13CB8E9D51FF33.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EennRTSYfwGuDgSRTw2tFLKSMbE7e6MXh8WehGCE9Ta/0/323830343a323436383a3a2f33322d3438203d3e20323634323231.roa
Signing time:             Mon 24 Feb 2025 14:35:59 +0000
ROA not before:           Mon 24 Feb 2025 14:30:59 +0000
ROA not after:            Mon 23 Feb 2026 14:35:59 +0000
asID:                     264221
IP address blocks:        2804:2468::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:23:2f:4f:90:9b:51:d4:61:74:d6:16:c9:79:ea:4d:be:f2:68:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BEC2FF1EC8AC86D3B2252C937D13CB8E9D51FF33
        Validity
            Not Before: Feb 24 14:30:59 2025 GMT
            Not After : Feb 23 14:35:59 2026 GMT
        Subject: CN=9C667D02D72193F036AD58C7B0862B92F58E9E12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b8:c2:e5:90:54:18:07:ba:4a:f9:c6:63:cb:
                    f2:1c:8b:be:e8:8c:92:03:8b:f1:83:c6:df:51:a0:
                    4a:07:08:4f:fc:75:f3:36:44:16:9a:5e:5a:09:0e:
                    29:e2:18:04:2a:ca:f4:ff:51:82:2e:a7:cd:06:ed:
                    94:11:76:e2:5f:25:b1:85:61:87:f2:37:9e:d6:1d:
                    af:92:d6:e2:2c:c4:c0:07:31:50:af:1e:96:37:e5:
                    b1:ab:e3:b2:27:0f:87:c4:f4:34:12:66:25:51:29:
                    8a:f2:16:88:a7:70:aa:b3:f7:2e:db:eb:86:42:af:
                    f7:5c:da:e8:3a:28:34:57:f8:e0:b4:c8:b9:55:85:
                    c0:66:6f:8c:20:f7:f1:48:7e:49:da:f7:f8:48:c1:
                    8b:09:50:56:a4:79:b6:fd:34:aa:be:54:bb:ee:f3:
                    9e:fe:21:0f:73:84:80:31:f7:1e:6c:70:79:72:ac:
                    bb:e7:f5:7a:d0:c4:42:8e:91:29:22:ae:d2:ee:34:
                    0e:57:37:6d:28:96:e9:7a:7b:22:35:85:ef:1b:87:
                    89:33:84:cf:2a:2e:d6:70:1b:b3:f3:67:ff:3c:0e:
                    54:c6:34:30:71:30:7b:13:25:83:83:c7:cf:da:fb:
                    7d:86:31:27:ae:82:08:dc:5a:4a:6a:ea:45:c3:31:
                    54:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:66:7D:02:D7:21:93:F0:36:AD:58:C7:B0:86:2B:92:F5:8E:9E:12
            X509v3 Authority Key Identifier:
                keyid:BE:C2:FF:1E:C8:AC:86:D3:B2:25:2C:93:7D:13:CB:8E:9D:51:FF:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EennRTSYfwGuDgSRTw2tFLKSMbE7e6MXh8WehGCE9Ta/0/BEC2FF1EC8AC86D3B2252C937D13CB8E9D51FF33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEC2FF1EC8AC86D3B2252C937D13CB8E9D51FF33.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EennRTSYfwGuDgSRTw2tFLKSMbE7e6MXh8WehGCE9Ta/0/323830343a323436383a3a2f33322d3438203d3e20323634323231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2468::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:a6:20:d7:5c:98:65:a5:be:28:f3:13:e3:59:22:16:59:f8:
         ea:20:97:a9:55:37:85:26:d2:fb:e9:5c:7f:f9:38:58:49:1b:
         ae:a2:fa:d4:7a:70:bd:12:db:16:9c:c5:f1:81:bc:97:e2:3b:
         e7:18:ec:16:e5:6b:37:6b:85:f5:1c:f8:e1:65:bd:82:b9:62:
         e7:09:69:77:1f:1d:8f:5a:a4:7e:90:23:d5:99:3d:c5:fe:50:
         44:10:5b:b5:e8:1e:02:46:12:dd:df:6e:65:c1:f9:6e:8d:0d:
         d5:42:89:59:b3:c4:27:7e:f4:a8:a2:1d:0a:31:93:d9:77:ba:
         0d:ed:2c:f6:a8:6d:d6:30:d4:02:e0:25:68:4f:7f:28:73:1d:
         01:0f:89:45:84:cc:fc:35:66:74:11:53:9b:1d:a4:6a:f4:63:
         40:2f:e0:9e:a6:eb:eb:d2:b5:ec:70:68:a7:da:28:67:80:d4:
         e8:bf:09:22:75:00:20:9e:1a:52:ba:5a:a9:b3:10:0e:4d:e5:
         64:4a:f1:b6:f8:37:47:0f:9f:90:a1:71:c6:34:68:6a:3a:a2:
         2f:d0:44:f3:7d:49:83:b5:7c:70:9e:bd:c4:f5:1c:f6:3b:41:
         34:55:36:0c:cd:9a:f8:c4:12:08:cc:e2:74:11:29:e3:84:de:
         2c:e1:c7:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:04:22 2025 by rpki-client