Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/1/323830343a346638343a3a2f33342d3334203d3e20323638333331.roa
File:                     323830343a346638343a3a2f33342d3334203d3e20323638333331.roa (raw, json)
Hash identifier:          veVfjh5kPY/DwpR6E2fqtLuwYAJmAFFS7/zJXLlkJ6c=
Subject key identifier:   E8:DD:7E:7E:34:FA:5B:73:E4:C2:21:0A:76:D3:91:49:4A:BC:DF:77
Certificate issuer:       /CN=BF9D09185198062395625CCDCA55DA0C823BC527
Certificate serial:       7AD28BC7BE538A0A45AC9C3A2BE7B0B0DB81FBDD
Authority key identifier: BF:9D:09:18:51:98:06:23:95:62:5C:CD:CA:55:DA:0C:82:3B:C5:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF9D09185198062395625CCDCA55DA0C823BC527.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/1/323830343a346638343a3a2f33342d3334203d3e20323638333331.roa
Signing time:             Fri 07 Mar 2025 00:00:55 +0000
ROA not before:           Thu 06 Mar 2025 23:55:55 +0000
ROA not after:            Fri 06 Mar 2026 00:00:55 +0000
asID:                     268331
IP address blocks:        2804:4f84::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:d2:8b:c7:be:53:8a:0a:45:ac:9c:3a:2b:e7:b0:b0:db:81:fb:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF9D09185198062395625CCDCA55DA0C823BC527
        Validity
            Not Before: Mar  6 23:55:55 2025 GMT
            Not After : Mar  6 00:00:55 2026 GMT
        Subject: CN=E8DD7E7E34FA5B73E4C2210A76D391494ABCDF77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:54:92:85:26:16:3f:49:61:29:11:9f:d6:6b:
                    a9:5c:d0:b8:aa:46:c6:08:a5:98:bc:4b:35:14:7a:
                    35:ac:dd:ea:c7:c8:67:d7:29:eb:7c:d0:f1:d8:fe:
                    0e:8f:25:6f:32:f1:80:0f:a9:05:0d:58:dd:b3:38:
                    75:68:9e:c8:d8:1c:f4:84:84:2f:61:79:a7:05:54:
                    21:1d:2f:1c:c7:d3:e9:e2:28:b1:89:a3:7c:79:df:
                    39:8b:68:2d:ea:58:8b:25:6b:5d:10:58:49:d4:b6:
                    55:1c:4b:b2:a2:18:99:30:c9:17:96:a6:de:04:c8:
                    95:21:1a:06:97:94:00:35:1b:84:a7:75:99:a0:98:
                    3c:ef:cd:1e:c0:bb:b2:83:6f:17:0e:21:ab:f8:aa:
                    30:03:53:04:c9:85:96:e3:5f:ab:40:1d:90:45:fe:
                    dc:95:b1:d9:ba:4d:85:2c:9b:89:fa:a8:dc:33:f4:
                    c7:b6:04:74:c1:75:80:1c:a7:57:c5:0e:78:22:05:
                    33:9d:65:67:17:a7:97:69:31:b2:d1:cc:27:f4:8b:
                    13:a8:1b:16:db:b5:18:12:8d:7e:89:f7:8c:b4:6c:
                    bc:9f:81:bb:23:6b:6d:10:ab:12:13:24:ac:36:19:
                    4a:f9:45:97:e3:94:a6:53:a9:1b:4d:2b:ee:a0:b4:
                    b5:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:DD:7E:7E:34:FA:5B:73:E4:C2:21:0A:76:D3:91:49:4A:BC:DF:77
            X509v3 Authority Key Identifier:
                keyid:BF:9D:09:18:51:98:06:23:95:62:5C:CD:CA:55:DA:0C:82:3B:C5:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/1/BF9D09185198062395625CCDCA55DA0C823BC527.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF9D09185198062395625CCDCA55DA0C823BC527.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/1/323830343a346638343a3a2f33342d3334203d3e20323638333331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4f84::/34

    Signature Algorithm: sha256WithRSAEncryption
         cb:34:14:6e:95:b2:ce:de:67:d1:42:68:8d:20:76:7d:af:6a:
         3e:43:60:4a:0b:a5:33:05:89:ef:46:b2:e7:d3:c9:90:bd:99:
         27:a1:d3:df:0d:22:5e:59:31:da:85:3a:7e:b7:ce:16:5b:a3:
         40:e6:58:67:42:86:03:84:51:5d:a1:d8:3b:86:bc:41:26:27:
         c4:b4:cc:f1:b1:00:de:fd:b1:f5:b5:53:04:f8:da:16:84:89:
         d3:93:ce:98:0b:7a:d1:44:21:09:c2:e9:22:d0:a0:2b:77:bb:
         e0:33:db:51:63:64:c4:38:4d:f6:17:1f:f2:d7:e9:2c:a3:14:
         c5:76:1c:97:bb:cd:62:db:43:78:ef:ad:fc:f0:fa:23:14:f5:
         c6:4c:fe:f1:f3:c6:15:90:6c:b3:e2:8c:9c:38:57:2d:c4:dc:
         49:42:3f:9c:f1:8c:63:32:9f:a1:b1:08:6b:89:4e:a3:90:c8:
         2b:f1:57:fb:24:cc:c2:d2:09:94:60:72:a6:7c:4d:a0:68:1f:
         6a:ea:12:c4:99:22:9e:61:4d:7a:8e:e8:85:51:22:b2:73:d6:
         89:12:c1:f9:e3:16:78:73:88:b5:42:86:b2:a0:da:c0:52:41:
         3c:90:6b:3b:24:74:72:e9:63:42:fe:67:49:85:17:88:7f:0e:
         d4:72:1a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:38:51 2025 by rpki-client