Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiWJLKQk4sg3bCc2y4XQc6WUaGi3kfAhnW47XdJBXEft/0/323830343a356361343a3a2f33322d3332203d3e20323638393231.roa
File:                     323830343a356361343a3a2f33322d3332203d3e20323638393231.roa (raw, json)
Hash identifier:          mG3uS2IPJj70W5EC0ArD2ZNELm/p5L9YsKjHLUhMJb8=
Subject key identifier:   31:82:74:2C:7C:B0:7D:BF:A3:A9:22:80:91:10:E9:4F:AF:EC:BB:39
Certificate issuer:       /CN=BA4115F10F57B5ED0D0885E19BE03B776A14AF61
Certificate serial:       68FF078F257D4A23E9A21D8050D19E7FDFFAF888
Authority key identifier: BA:41:15:F1:0F:57:B5:ED:0D:08:85:E1:9B:E0:3B:77:6A:14:AF:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA4115F10F57B5ED0D0885E19BE03B776A14AF61.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiWJLKQk4sg3bCc2y4XQc6WUaGi3kfAhnW47XdJBXEft/0/323830343a356361343a3a2f33322d3332203d3e20323638393231.roa
Signing time:             Wed 28 Feb 2024 19:20:20 +0000
ROA not before:           Wed 28 Feb 2024 19:15:20 +0000
ROA not after:            Wed 26 Feb 2025 19:20:20 +0000
asID:                     268921
IP address blocks:        2804:5ca4::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:ff:07:8f:25:7d:4a:23:e9:a2:1d:80:50:d1:9e:7f:df:fa:f8:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA4115F10F57B5ED0D0885E19BE03B776A14AF61
        Validity
            Not Before: Feb 28 19:15:20 2024 GMT
            Not After : Feb 26 19:20:20 2025 GMT
        Subject: CN=3182742C7CB07DBFA3A922809110E94FAFECBB39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d6:58:de:14:ec:00:ea:f8:9a:3b:26:a9:3f:
                    86:09:5f:5d:8c:18:75:56:a0:a6:08:31:ac:82:34:
                    86:a9:7e:7e:b4:0f:5f:db:c3:a1:77:b9:7b:42:4f:
                    ac:2f:9d:cc:5f:ce:d7:63:f9:7d:96:16:34:9b:6d:
                    39:69:a4:ec:ed:f9:4d:44:0c:69:db:4a:13:83:87:
                    2c:fb:d4:b3:5c:8a:f4:07:53:c3:40:e8:a2:d6:89:
                    d8:a9:f4:bf:9e:d0:42:0d:de:70:8e:5c:65:5e:50:
                    10:a9:31:39:7a:7c:a6:a3:f0:38:59:82:41:13:f0:
                    c0:df:f8:ca:a5:bb:d3:2a:8d:3a:ac:ac:54:c4:aa:
                    26:52:2b:f8:07:ef:49:17:05:38:8f:31:2b:90:14:
                    f2:14:90:62:5f:b9:f6:87:08:fe:49:8f:a5:b8:7c:
                    83:01:5b:65:db:57:26:72:19:c6:4b:e8:1e:7e:5c:
                    b0:41:b3:1e:e7:5e:7c:51:5d:0c:7c:6b:b8:39:58:
                    a5:22:ca:6c:7c:f4:67:78:b1:19:41:a8:8a:7f:d6:
                    25:76:69:97:b0:dc:7e:0e:82:be:27:7e:3d:ec:50:
                    91:90:ce:2d:be:4d:32:91:2a:83:8a:13:e6:8e:7b:
                    17:c6:0f:1c:90:89:0f:8d:b9:ea:07:5d:6f:f1:6b:
                    14:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:82:74:2C:7C:B0:7D:BF:A3:A9:22:80:91:10:E9:4F:AF:EC:BB:39
            X509v3 Authority Key Identifier:
                keyid:BA:41:15:F1:0F:57:B5:ED:0D:08:85:E1:9B:E0:3B:77:6A:14:AF:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiWJLKQk4sg3bCc2y4XQc6WUaGi3kfAhnW47XdJBXEft/0/BA4115F10F57B5ED0D0885E19BE03B776A14AF61.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA4115F10F57B5ED0D0885E19BE03B776A14AF61.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiWJLKQk4sg3bCc2y4XQc6WUaGi3kfAhnW47XdJBXEft/0/323830343a356361343a3a2f33322d3332203d3e20323638393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ca4::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:f2:f6:07:95:26:59:38:28:85:60:0a:2f:b8:7a:e1:be:7c:
         22:d4:1b:7e:a7:fd:11:8c:91:3d:ba:0a:00:9f:17:cb:19:ac:
         c4:5e:b5:63:9b:dc:33:44:2f:ba:1a:8a:87:c5:bd:0b:f2:53:
         71:9a:77:bd:92:c5:a7:7f:59:14:5f:29:d6:cf:4e:ed:67:31:
         77:9e:c4:6a:33:8f:2b:60:6e:d0:56:21:5c:a4:76:20:a9:2e:
         d3:ef:95:12:b0:7b:fe:ae:ab:4c:d0:93:b9:b3:6c:b5:dc:95:
         59:84:67:99:e5:18:e5:55:8e:45:24:52:e0:96:8b:ed:d0:2d:
         dd:72:8c:cf:cb:51:1f:0e:07:cc:da:22:b2:9e:05:97:48:b5:
         56:01:58:56:c8:ba:38:25:4b:a0:99:ef:6b:a3:34:f6:13:47:
         9d:57:4c:ad:e7:c4:ad:fc:85:e5:71:de:37:f9:50:5c:bb:bf:
         ce:44:0c:4d:b4:94:17:30:d6:7d:28:5d:e5:43:59:23:fc:4e:
         a0:62:65:34:d7:fb:83:5a:b2:ba:e2:f7:87:63:69:7e:72:bf:
         00:46:49:94:07:1e:c0:60:c3:73:e3:a8:bd:56:03:cb:0a:53:
         ec:af:68:eb:36:5d:a4:1d:e3:90:7f:c1:22:19:3e:30:20:75:
         61:39:8f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:33:31 2025 by rpki-client