Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FBBqZmaYfY1LQJ1duiVb86cAukLfp12bna6p9zBzaPyV/0/323830343a363135383a383030303a3a2f33342d3334203d3e20323639323239.roa
File:                     323830343a363135383a383030303a3a2f33342d3334203d3e20323639323239.roa (raw, json)
Hash identifier:          jY9eXZCVOZd5egq1D2JL5YnMO2OdHdPeCEf36t/0IJs=
Subject key identifier:   2B:C3:B2:CF:BA:CF:6C:10:F9:CE:58:E2:68:88:83:43:1F:44:9E:DD
Certificate issuer:       /CN=BAF64A7AE246E8120826948706145A4757D1146D
Certificate serial:       1B4041D7A3D3556CA80698E10BDF40B0C6639787
Authority key identifier: BA:F6:4A:7A:E2:46:E8:12:08:26:94:87:06:14:5A:47:57:D1:14:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAF64A7AE246E8120826948706145A4757D1146D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FBBqZmaYfY1LQJ1duiVb86cAukLfp12bna6p9zBzaPyV/0/323830343a363135383a383030303a3a2f33342d3334203d3e20323639323239.roa
Signing time:             Thu 28 Nov 2024 17:22:49 +0000
ROA not before:           Thu 28 Nov 2024 17:17:49 +0000
ROA not after:            Thu 27 Nov 2025 17:22:49 +0000
asID:                     269229
IP address blocks:        2804:6158:8000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:40:41:d7:a3:d3:55:6c:a8:06:98:e1:0b:df:40:b0:c6:63:97:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAF64A7AE246E8120826948706145A4757D1146D
        Validity
            Not Before: Nov 28 17:17:49 2024 GMT
            Not After : Nov 27 17:22:49 2025 GMT
        Subject: CN=2BC3B2CFBACF6C10F9CE58E2688883431F449EDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3e:f4:09:8f:dc:a5:52:4c:8b:2a:eb:52:7f:
                    b0:b3:ab:db:96:f3:c8:5f:e3:43:b2:5e:75:33:2b:
                    43:90:64:a8:cb:00:dc:a9:38:84:97:2c:76:ab:a0:
                    42:0b:95:16:b6:c3:07:15:d5:b4:d0:82:82:27:98:
                    25:22:22:1e:3e:34:a2:7f:c6:44:1c:c1:ec:94:de:
                    0d:34:d0:14:50:46:ad:2a:c0:e9:88:e5:9f:0f:ca:
                    76:ad:ad:55:80:2f:92:30:ff:a8:fe:cf:ee:da:5e:
                    d2:90:db:d0:3a:09:4d:c2:80:b7:e3:14:39:f4:24:
                    aa:d9:78:5c:7d:89:ae:5f:98:4c:73:01:0b:0b:9e:
                    69:37:d7:28:44:89:2a:85:1e:a3:6c:15:7b:80:ff:
                    e9:bf:b9:90:92:aa:e3:af:f7:07:d6:af:48:ad:d5:
                    59:34:53:b6:b8:1f:cc:53:1d:25:a5:eb:2b:df:3c:
                    0d:52:ae:35:1f:31:43:ef:3c:bb:19:43:e5:db:a9:
                    1d:32:bb:05:cc:7d:f1:04:04:f4:e5:6e:75:f9:e5:
                    f3:ea:ac:5c:ca:71:99:0a:6b:4f:75:41:48:88:82:
                    59:38:94:0b:16:a2:10:35:65:ed:31:d8:58:2f:56:
                    5d:4d:a9:47:a3:db:67:72:d5:15:8f:23:94:1e:90:
                    8f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:C3:B2:CF:BA:CF:6C:10:F9:CE:58:E2:68:88:83:43:1F:44:9E:DD
            X509v3 Authority Key Identifier:
                keyid:BA:F6:4A:7A:E2:46:E8:12:08:26:94:87:06:14:5A:47:57:D1:14:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FBBqZmaYfY1LQJ1duiVb86cAukLfp12bna6p9zBzaPyV/0/BAF64A7AE246E8120826948706145A4757D1146D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAF64A7AE246E8120826948706145A4757D1146D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBBqZmaYfY1LQJ1duiVb86cAukLfp12bna6p9zBzaPyV/0/323830343a363135383a383030303a3a2f33342d3334203d3e20323639323239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6158:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         33:c3:b6:ad:33:d4:03:b6:84:7a:2b:1c:59:1c:58:7b:10:a3:
         e0:f4:3a:ad:e9:ea:c6:1f:12:50:69:b0:c5:9c:38:19:8d:1c:
         07:07:16:b6:f4:b1:88:a5:f2:f8:27:03:41:60:be:fe:f7:af:
         fb:75:0c:75:00:90:bc:a7:b2:ea:e1:1e:11:91:31:f2:56:2d:
         59:a0:30:4a:a1:59:77:4d:76:d0:20:b2:53:8f:4c:de:5f:5d:
         90:7e:b6:70:dc:10:86:31:00:84:0a:28:60:ae:53:28:b8:c1:
         da:b9:db:c8:dd:6a:6c:f4:1a:0e:e9:9e:05:f9:8d:7c:8a:94:
         d4:95:a4:96:f6:9f:04:4c:86:15:6e:46:0b:8e:99:c3:fc:ed:
         b6:b6:fc:01:f3:0e:6e:94:52:64:eb:7d:4b:a5:d3:ae:29:c0:
         0b:08:db:7b:81:2c:ea:35:7d:fc:61:30:5c:f2:4d:13:82:4a:
         54:79:f8:3b:17:05:69:93:06:07:41:48:69:7b:ed:bf:64:78:
         c5:f9:76:91:6b:5a:ed:36:1c:62:b9:71:72:f1:e0:02:93:6b:
         a7:c5:c0:c3:79:59:e1:6d:ea:50:95:42:a0:6f:18:b6:9f:cc:
         cd:21:46:47:ac:e8:ee:5b:21:3a:4e:5f:42:20:d2:f8:b8:26:
         be:f0:6c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:55:22 2025 by rpki-client