Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/0/323830343a356639383a3a2f33322d3332203d3e20323639313131.roa
File:                     323830343a356639383a3a2f33322d3332203d3e20323639313131.roa (raw, json)
Hash identifier:          Eb+XMJ1Dau133IEZ9tuB2rznhyEgY5VKYw4VQXAYfjU=
Subject key identifier:   B9:DB:F7:BD:AE:C4:7E:A8:18:55:2C:B6:DD:F3:B1:5D:77:18:C5:AB
Certificate issuer:       /CN=BA7E89727323D83349D5995D267D020FF0260C80
Certificate serial:       7F1EDF96BC6AECBFA4DB3D63B40178BA8A5FE8E6
Authority key identifier: BA:7E:89:72:73:23:D8:33:49:D5:99:5D:26:7D:02:0F:F0:26:0C:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA7E89727323D83349D5995D267D020FF0260C80.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/0/323830343a356639383a3a2f33322d3332203d3e20323639313131.roa
Signing time:             Tue 13 Jun 2023 16:30:33 +0000
ROA not before:           Tue 13 Jun 2023 16:25:33 +0000
ROA not after:            Tue 11 Jun 2024 16:30:33 +0000
asID:                     269111
IP address blocks:        2804:5f98::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:1e:df:96:bc:6a:ec:bf:a4:db:3d:63:b4:01:78:ba:8a:5f:e8:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA7E89727323D83349D5995D267D020FF0260C80
        Validity
            Not Before: Jun 13 16:25:33 2023 GMT
            Not After : Jun 11 16:30:33 2024 GMT
        Subject: CN=B9DBF7BDAEC47EA818552CB6DDF3B15D7718C5AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:3b:09:8b:95:97:0b:8e:5b:e9:bd:40:3c:3e:
                    e3:de:98:c8:dc:7b:75:3d:e1:cd:68:e6:4f:d5:24:
                    ce:4c:19:fc:3e:9d:ae:25:97:34:7b:f5:ba:64:49:
                    97:0b:69:04:33:cf:d5:0e:cb:67:34:f6:b7:bb:45:
                    a5:45:e1:34:ef:be:07:d7:d3:76:fa:d1:de:c5:3d:
                    df:3f:4f:7e:90:30:57:72:8f:4d:23:96:b5:f2:d5:
                    6d:e3:f5:d0:c2:a8:e5:a5:c3:7d:58:63:49:81:d1:
                    67:62:22:89:22:04:d3:db:80:67:bb:5a:0d:d9:48:
                    90:83:99:1e:95:b8:3f:fe:d6:d5:4d:f8:00:ff:fc:
                    1d:bd:72:f0:0f:90:0d:d7:8c:37:ea:bf:91:37:86:
                    5d:d0:04:16:89:eb:80:c5:77:62:82:25:94:02:06:
                    e2:af:1e:47:47:4f:12:79:50:f2:c4:61:bc:30:81:
                    a7:7f:bd:8d:6d:47:b7:06:a2:45:de:25:44:5b:03:
                    92:50:08:c6:72:a4:d2:53:6c:b1:f6:73:4c:e0:99:
                    74:85:9e:33:c0:62:c6:f0:30:17:dd:8c:d4:cd:1a:
                    23:1f:32:42:d3:db:08:6b:fe:d8:cb:f0:a9:40:2c:
                    3c:af:19:5b:41:bd:c9:fa:2d:5c:b4:96:1b:78:5c:
                    bc:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:DB:F7:BD:AE:C4:7E:A8:18:55:2C:B6:DD:F3:B1:5D:77:18:C5:AB
            X509v3 Authority Key Identifier:
                keyid:BA:7E:89:72:73:23:D8:33:49:D5:99:5D:26:7D:02:0F:F0:26:0C:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/0/BA7E89727323D83349D5995D267D020FF0260C80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA7E89727323D83349D5995D267D020FF0260C80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/0/323830343a356639383a3a2f33322d3332203d3e20323639313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f98::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:0f:40:a3:9d:ae:cd:6a:57:77:a4:0e:7d:ef:2a:5a:d1:38:
         ad:fb:89:dd:1c:97:40:43:a7:2c:a6:cb:03:c8:2b:51:8a:dc:
         62:c8:5d:84:de:b3:0d:a6:40:f7:fd:63:c8:43:be:7f:aa:b2:
         d7:16:c2:74:fb:1e:b9:59:d7:60:a6:23:25:bd:6d:33:1e:2b:
         3a:40:f8:4f:c8:1a:d5:ff:05:ca:d0:ec:e1:9a:cc:dc:4f:14:
         91:ad:76:bb:af:df:2e:84:e1:06:64:50:64:1e:c6:4c:ca:21:
         8a:78:7f:a8:29:10:fc:da:b9:25:d9:31:da:b5:fc:2f:95:23:
         f3:34:e1:e6:f7:f3:ba:e4:3a:44:33:ab:ce:0c:d9:7d:9d:4f:
         d4:4c:c2:b3:c3:08:a1:3d:7b:f0:6c:6c:6f:7e:38:a3:d9:13:
         38:6e:09:1e:e1:80:ad:7b:ec:11:6f:cd:df:5d:7f:12:18:93:
         bc:72:ba:a3:33:eb:86:7a:01:a8:f3:4d:21:fe:28:2c:dd:de:
         0f:a1:4b:d1:f7:01:92:d4:9a:af:96:84:e9:00:35:5f:8e:7d:
         a5:ea:63:74:10:68:68:ee:8c:bd:96:ff:e8:40:5a:f7:e6:c2:
         8d:d6:8d:b2:35:c5:d6:b0:e6:72:1e:f0:da:8f:07:a2:0f:28:
         c8:98:6b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:16:18 2025 by rpki-client