Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H3DFxouR7EKGTRz3ZbfSBuhy24PPqubYwrXeQT6GURG5/0/323830343a373638303a383030303a3a2f33332d3333203d3e20323731313136.roa
File:                     323830343a373638303a383030303a3a2f33332d3333203d3e20323731313136.roa (raw, json)
Hash identifier:          qeXJLkSLViifhIXOY+XDaBc579wFFP3K6q2mqEs8kHk=
Subject key identifier:   16:54:20:A5:C5:94:53:73:9A:32:CC:AB:ED:24:0B:85:AE:E7:54:45
Certificate issuer:       /CN=BFA24157A827C97984C7CAFBEA2076F6E728252D
Certificate serial:       0C0CCD4066428A60587E2AD1FAB5F9242909C361
Authority key identifier: BF:A2:41:57:A8:27:C9:79:84:C7:CA:FB:EA:20:76:F6:E7:28:25:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFA24157A827C97984C7CAFBEA2076F6E728252D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3DFxouR7EKGTRz3ZbfSBuhy24PPqubYwrXeQT6GURG5/0/323830343a373638303a383030303a3a2f33332d3333203d3e20323731313136.roa
Signing time:             Tue 21 May 2024 17:12:54 +0000
ROA not before:           Tue 21 May 2024 17:07:54 +0000
ROA not after:            Tue 20 May 2025 17:12:54 +0000
asID:                     271116
IP address blocks:        2804:7680:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:0c:cd:40:66:42:8a:60:58:7e:2a:d1:fa:b5:f9:24:29:09:c3:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BFA24157A827C97984C7CAFBEA2076F6E728252D
        Validity
            Not Before: May 21 17:07:54 2024 GMT
            Not After : May 20 17:12:54 2025 GMT
        Subject: CN=165420A5C59453739A32CCABED240B85AEE75445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f3:de:67:cc:95:2e:00:0a:8c:74:5f:60:6f:
                    89:cd:3c:27:a7:6c:33:57:18:92:c9:72:93:88:fb:
                    6f:69:5e:7c:5d:6e:3d:5e:42:56:d2:f9:65:42:3e:
                    0a:4c:3c:f6:6b:3d:0a:b0:17:b0:25:4a:4c:32:d5:
                    bd:69:d9:37:0d:74:1d:8d:98:f9:28:49:54:21:77:
                    c9:ff:51:92:f6:18:dc:53:90:e4:00:32:f1:7e:6b:
                    a0:1b:05:f1:bc:a4:10:b0:38:2e:1b:c4:6e:77:ac:
                    4e:42:3e:ca:ff:17:81:3e:0b:5b:2e:b6:95:87:4a:
                    0c:a1:3f:0c:99:5a:a3:fb:9d:a4:03:86:24:57:ad:
                    6f:60:c0:78:83:c7:ae:be:23:65:fe:e0:f8:b0:45:
                    84:db:90:e6:37:a8:1d:b2:d0:4e:62:86:89:e8:4a:
                    1e:a0:a4:8f:0c:32:a3:9d:d4:87:9d:2d:ea:b1:a9:
                    9c:76:10:ed:34:3a:1e:63:40:d4:87:ef:c0:17:89:
                    0f:56:51:d7:ff:69:57:c1:2c:f4:2e:c0:1a:4f:cb:
                    2c:1c:d3:c5:c1:11:16:98:a3:92:2c:58:46:9b:cd:
                    f9:73:95:41:c7:ef:f2:66:09:b9:0d:6d:84:34:56:
                    06:47:49:61:d0:77:0a:14:c4:05:76:4e:56:5f:36:
                    9f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:54:20:A5:C5:94:53:73:9A:32:CC:AB:ED:24:0B:85:AE:E7:54:45
            X509v3 Authority Key Identifier:
                keyid:BF:A2:41:57:A8:27:C9:79:84:C7:CA:FB:EA:20:76:F6:E7:28:25:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3DFxouR7EKGTRz3ZbfSBuhy24PPqubYwrXeQT6GURG5/0/BFA24157A827C97984C7CAFBEA2076F6E728252D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFA24157A827C97984C7CAFBEA2076F6E728252D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3DFxouR7EKGTRz3ZbfSBuhy24PPqubYwrXeQT6GURG5/0/323830343a373638303a383030303a3a2f33332d3333203d3e20323731313136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7680:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         09:aa:de:71:f8:d1:c2:9b:2e:b0:ff:84:ea:4d:34:e5:5e:bb:
         4d:a5:b8:86:85:4d:e4:39:47:50:87:9e:17:6a:62:de:f0:86:
         9f:ef:85:5f:78:b7:09:37:40:36:5a:7a:b1:7d:a0:51:da:65:
         4f:1a:f2:bc:18:43:e3:83:2f:57:72:10:e0:c1:25:4b:73:40:
         c4:d4:64:18:e9:73:e2:8e:87:a1:cd:f4:a3:13:cb:98:40:4e:
         ba:87:93:1d:c1:6d:eb:75:bb:70:0e:bf:7f:43:a7:27:42:ff:
         6d:64:a9:9e:0f:f5:8a:b8:32:34:95:f9:ff:29:b5:97:7e:43:
         e9:4e:7c:47:0b:a4:22:48:9e:22:7f:aa:a0:e1:51:8d:4d:3c:
         e8:46:95:06:e5:48:be:ec:cb:54:bd:47:ea:a4:b2:67:18:15:
         5c:df:84:cb:08:a1:23:96:33:b9:4e:94:0f:5d:b4:51:cb:6e:
         fc:dd:94:fa:9f:01:a4:c4:ea:47:c9:4a:c3:fb:74:80:bf:40:
         14:10:01:12:66:e3:3c:bd:98:ee:f5:44:f7:cc:d0:cd:df:8b:
         8f:f6:04:69:4d:fd:18:48:78:ff:2f:9b:e0:0d:7d:1d:2d:7b:
         54:f4:fe:4a:46:54:77:cd:a5:68:ed:76:ed:8c:f7:c6:15:44:
         86:27:3b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:47:34 2025 by rpki-client