Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fpxw2eWUwiQM8j8SLsUcKKVZ4FCTi9fXsD2K4tohJegi/0/323830343a6336303a343030303a3a2f33342d3334203d3e203532363936.roa
File:                     323830343a6336303a343030303a3a2f33342d3334203d3e203532363936.roa (raw, json)
Hash identifier:          djm+ZqjJDX82MRkXN2OuE9QXbvMI1eA9wxfo3oduZ9w=
Subject key identifier:   BB:CB:5E:62:63:92:1A:F9:47:8D:E9:B3:6A:82:F0:FD:FB:F5:02:6F
Certificate issuer:       /CN=759FD53741DAAEF6CE6410013C127C1B23331A7B
Certificate serial:       032056D5656BA2AA4FF3810ECB6F5ECEE18DFB20
Authority key identifier: 75:9F:D5:37:41:DA:AE:F6:CE:64:10:01:3C:12:7C:1B:23:33:1A:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759FD53741DAAEF6CE6410013C127C1B23331A7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fpxw2eWUwiQM8j8SLsUcKKVZ4FCTi9fXsD2K4tohJegi/0/323830343a6336303a343030303a3a2f33342d3334203d3e203532363936.roa
Signing time:             Tue 06 Aug 2024 00:02:56 +0000
ROA not before:           Mon 05 Aug 2024 23:57:56 +0000
ROA not after:            Tue 05 Aug 2025 00:02:56 +0000
asID:                     52696
IP address blocks:        2804:c60:4000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:20:56:d5:65:6b:a2:aa:4f:f3:81:0e:cb:6f:5e:ce:e1:8d:fb:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=759FD53741DAAEF6CE6410013C127C1B23331A7B
        Validity
            Not Before: Aug  5 23:57:56 2024 GMT
            Not After : Aug  5 00:02:56 2025 GMT
        Subject: CN=BBCB5E6263921AF9478DE9B36A82F0FDFBF5026F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ed:df:94:3b:8e:b4:16:82:67:87:b4:d9:51:
                    9f:1e:4b:e7:74:f3:2f:d4:d8:15:83:97:49:73:63:
                    7a:e3:98:80:b9:02:d6:7e:27:e3:6d:6d:16:6c:81:
                    c2:7d:54:fd:31:08:d4:33:ed:a0:d0:52:cf:eb:ae:
                    29:0c:92:e5:17:c6:ec:16:dd:59:50:35:89:ef:29:
                    a4:c9:5c:e5:cf:d2:a5:ef:2d:b4:29:b1:22:d3:0a:
                    07:56:c7:ce:03:ee:e0:50:f0:d0:90:0e:c5:99:76:
                    bd:f5:77:d4:91:ab:64:36:90:4f:92:c3:73:0d:dc:
                    ec:22:38:68:00:eb:ef:69:11:29:2b:59:28:ba:f7:
                    b5:10:9d:1b:3a:06:08:ef:5b:f5:c0:6b:4e:2c:3e:
                    7b:7e:ef:2d:e8:38:46:f6:76:86:d5:df:56:b6:c6:
                    90:f4:ea:3e:35:16:b9:f4:ca:a5:78:2d:07:1d:6e:
                    68:2f:4f:2f:f5:55:11:56:99:7c:31:cd:71:0a:ef:
                    f6:db:79:fc:ad:0e:9b:40:bd:45:e5:da:97:3c:82:
                    ed:29:c5:86:15:11:82:98:61:f0:d6:76:b9:25:32:
                    ac:f3:66:a6:f8:55:1e:3e:c0:91:04:99:1c:e1:1e:
                    25:9e:0b:39:01:dc:63:82:ba:d8:e7:8b:29:10:02:
                    85:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:CB:5E:62:63:92:1A:F9:47:8D:E9:B3:6A:82:F0:FD:FB:F5:02:6F
            X509v3 Authority Key Identifier:
                keyid:75:9F:D5:37:41:DA:AE:F6:CE:64:10:01:3C:12:7C:1B:23:33:1A:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fpxw2eWUwiQM8j8SLsUcKKVZ4FCTi9fXsD2K4tohJegi/0/759FD53741DAAEF6CE6410013C127C1B23331A7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759FD53741DAAEF6CE6410013C127C1B23331A7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fpxw2eWUwiQM8j8SLsUcKKVZ4FCTi9fXsD2K4tohJegi/0/323830343a6336303a343030303a3a2f33342d3334203d3e203532363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c60:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         53:5e:31:53:83:9e:7a:cd:6b:b7:4d:81:83:b3:62:e4:b6:3b:
         db:28:58:ef:12:18:11:b9:0c:44:37:ed:d5:5a:75:f0:77:c5:
         a8:74:06:4b:2d:36:82:9a:8c:d6:2e:cb:1f:28:b5:20:1e:4d:
         ed:fc:54:ce:a6:5e:04:ec:f1:3d:b7:fc:90:cc:37:13:83:24:
         a1:80:67:0d:72:9f:fb:c5:96:34:ed:6a:27:44:dc:4c:43:da:
         e2:f7:a2:81:2e:2f:b5:89:09:be:0b:c9:c5:4a:bf:b9:c4:77:
         30:bc:a2:73:0a:cc:39:8e:d6:ea:e8:03:3f:cf:a1:09:a0:73:
         b0:d5:fb:c6:f5:3e:5b:76:89:ef:22:36:51:87:06:8f:f6:fd:
         48:45:55:36:61:9e:e5:35:cc:f5:ca:5c:10:61:3c:96:0c:f4:
         7d:de:03:a0:17:0e:be:ab:77:90:67:de:e2:54:cc:b5:5c:39:
         b6:8e:1a:60:44:38:f9:a7:c0:a1:5f:c6:1f:99:27:83:6e:23:
         1d:35:1d:19:d4:9b:fb:69:b0:f1:da:b6:7c:91:99:3c:c0:9b:
         92:b9:5b:84:c5:05:cd:04:73:f8:df:ca:2c:b2:fd:7c:6b:bf:
         43:73:3a:d7:34:ea:3c:d0:5f:43:69:e9:7a:b5:e2:b3:a5:87:
         f9:3e:db:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:13:52 2025 by rpki-client