Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FBBqZmaYfY1LQJ1duiVb86cAukLfp12bna6p9zBzaPyV/0/323830343a363135383a633030303a3a2f33342d3334203d3e20323639323239.roa
File:                     323830343a363135383a633030303a3a2f33342d3334203d3e20323639323239.roa (raw, json)
Hash identifier:          tFsMv5Cm+MJOrQww9eBu2q3EvYVjsybYZ6BjyWQYBf0=
Subject key identifier:   50:C2:23:F2:4F:AD:B1:62:02:CD:40:47:E6:7A:A9:5B:3B:B6:41:A5
Certificate issuer:       /CN=BAF64A7AE246E8120826948706145A4757D1146D
Certificate serial:       5E09BAE25CDD60B323D48CDAE8FEE1E047271118
Authority key identifier: BA:F6:4A:7A:E2:46:E8:12:08:26:94:87:06:14:5A:47:57:D1:14:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAF64A7AE246E8120826948706145A4757D1146D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FBBqZmaYfY1LQJ1duiVb86cAukLfp12bna6p9zBzaPyV/0/323830343a363135383a633030303a3a2f33342d3334203d3e20323639323239.roa
Signing time:             Thu 28 Nov 2024 17:22:46 +0000
ROA not before:           Thu 28 Nov 2024 17:17:46 +0000
ROA not after:            Thu 27 Nov 2025 17:22:46 +0000
asID:                     269229
IP address blocks:        2804:6158:c000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:09:ba:e2:5c:dd:60:b3:23:d4:8c:da:e8:fe:e1:e0:47:27:11:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAF64A7AE246E8120826948706145A4757D1146D
        Validity
            Not Before: Nov 28 17:17:46 2024 GMT
            Not After : Nov 27 17:22:46 2025 GMT
        Subject: CN=50C223F24FADB16202CD4047E67AA95B3BB641A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b1:50:48:8e:ec:02:44:58:ce:70:bf:75:d8:
                    a6:2a:2f:a0:df:67:24:e8:6e:86:ac:2d:7e:56:ba:
                    3f:1c:80:ec:51:35:f9:65:f3:78:8c:0f:4a:0b:6c:
                    1e:4a:2c:a0:62:75:92:94:44:8f:79:84:24:b8:7d:
                    30:b1:1a:2c:c5:d2:fe:64:30:8b:e7:57:f2:ff:f9:
                    3a:00:b6:00:91:eb:dd:9a:89:37:72:db:19:60:c7:
                    fb:3a:c8:9d:f8:9f:9b:d7:38:7a:e0:e0:dd:a8:1f:
                    10:73:70:85:d6:a8:32:89:33:59:54:b9:f8:c4:19:
                    b1:5e:a6:bf:1b:51:ea:18:a7:8e:9a:66:d8:5c:e5:
                    76:b9:0f:75:fd:95:18:38:df:fb:7f:5f:b5:4b:d3:
                    95:bd:ad:ca:6d:68:59:1d:93:eb:11:59:de:8a:55:
                    df:d6:45:af:43:d3:b6:9e:33:10:55:dd:b7:64:13:
                    20:bf:bb:9e:79:93:09:49:cc:20:0d:98:ab:aa:f0:
                    16:99:57:21:ff:2e:19:cf:8c:93:8d:22:38:03:ef:
                    e2:9d:2e:76:e0:05:db:b4:01:b7:38:63:52:5d:f0:
                    56:ba:f9:ba:51:c5:b4:8e:5c:74:ea:ce:a7:60:7b:
                    b3:52:be:20:8e:e0:33:96:ca:19:59:f6:8f:e1:fc:
                    80:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:C2:23:F2:4F:AD:B1:62:02:CD:40:47:E6:7A:A9:5B:3B:B6:41:A5
            X509v3 Authority Key Identifier:
                keyid:BA:F6:4A:7A:E2:46:E8:12:08:26:94:87:06:14:5A:47:57:D1:14:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FBBqZmaYfY1LQJ1duiVb86cAukLfp12bna6p9zBzaPyV/0/BAF64A7AE246E8120826948706145A4757D1146D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAF64A7AE246E8120826948706145A4757D1146D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBBqZmaYfY1LQJ1duiVb86cAukLfp12bna6p9zBzaPyV/0/323830343a363135383a633030303a3a2f33342d3334203d3e20323639323239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6158:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         02:4b:d1:9c:af:78:e4:75:1c:8d:5a:43:30:e7:66:3b:b3:4c:
         fd:d7:43:0d:54:83:b5:6f:68:39:99:68:ca:20:81:24:37:4a:
         8a:a8:9e:90:bf:6a:3d:cd:65:57:0b:ce:b8:a0:b4:c5:42:39:
         c8:57:a1:ac:25:7f:15:31:d6:17:f7:cb:2d:38:a7:df:c7:32:
         25:6f:05:79:4f:63:22:92:87:1d:2e:ca:4d:36:fd:84:03:2a:
         13:d7:71:f8:e2:93:b4:4e:6c:88:6b:7f:74:7f:eb:3e:8e:ec:
         e3:68:b0:f3:3b:b1:10:f4:12:c7:1b:57:da:c5:8d:8e:19:2b:
         bf:d7:dd:4c:aa:03:18:25:73:44:b4:3a:c9:5d:e7:95:3d:3e:
         ab:c2:3d:51:af:fe:2d:81:91:1b:21:65:7e:a3:c7:76:7a:8c:
         a5:3e:ca:0c:14:84:6f:60:ce:b2:9b:8b:27:b4:db:fe:d7:b8:
         7f:c8:d7:6d:b9:f0:d4:ad:3d:ea:51:54:fb:fb:53:73:32:d1:
         a1:9a:ba:13:07:88:87:8c:f3:53:be:6b:c9:fd:4d:78:72:22:
         a5:3b:11:3b:5a:a5:69:03:7e:aa:03:84:58:5f:ef:7c:21:f2:
         0a:84:98:14:a1:39:cc:15:18:8c:21:0a:9f:39:dc:73:dc:71:
         ff:15:fa:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:24:22 2025 by rpki-client