Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/R5Uux39wmqd4u3xaBGhDikspkREWYkTjQLB5oc39rKz/0/323830343a336630633a3230303a3a2f34302d3430203d3e20323636363336.roa
File:                     323830343a336630633a3230303a3a2f34302d3430203d3e20323636363336.roa (raw, json)
Hash identifier:          1Kw/wU8Y8OadG6vC+llNHGuxXwdiPMOKqVzvFwH5RfU=
Subject key identifier:   14:52:F9:3F:DF:3D:30:9D:1B:A5:E3:75:25:23:20:02:59:37:DF:5E
Certificate issuer:       /CN=01BB812570793F27C1E5A61B45140B6550487AB2
Certificate serial:       270192F1073E70E6E4B56A34F7626D9A683482B1
Authority key identifier: 01:BB:81:25:70:79:3F:27:C1:E5:A6:1B:45:14:0B:65:50:48:7A:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01BB812570793F27C1E5A61B45140B6550487AB2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/R5Uux39wmqd4u3xaBGhDikspkREWYkTjQLB5oc39rKz/0/323830343a336630633a3230303a3a2f34302d3430203d3e20323636363336.roa
Signing time:             Tue 05 Dec 2023 03:38:39 +0000
ROA not before:           Tue 05 Dec 2023 03:33:39 +0000
ROA not after:            Tue 03 Dec 2024 03:38:39 +0000
asID:                     266636
IP address blocks:        2804:3f0c:200::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:01:92:f1:07:3e:70:e6:e4:b5:6a:34:f7:62:6d:9a:68:34:82:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01BB812570793F27C1E5A61B45140B6550487AB2
        Validity
            Not Before: Dec  5 03:33:39 2023 GMT
            Not After : Dec  3 03:38:39 2024 GMT
        Subject: CN=1452F93FDF3D309D1BA5E375252320025937DF5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:16:ae:a5:c3:a5:f0:43:e1:44:56:1e:dc:e3:
                    95:99:20:84:b0:11:0d:7a:8a:83:dc:c2:24:5b:1c:
                    a4:ee:89:9f:c8:5f:8a:be:c4:c9:91:65:28:13:97:
                    fd:2e:d4:18:03:c5:d9:b6:31:31:f3:76:97:87:ee:
                    9a:b5:d1:e6:c7:a6:55:ee:34:f0:1a:59:ef:81:e9:
                    b1:8f:d3:1a:b3:a2:8d:4b:4f:fe:b0:1d:4b:42:ac:
                    46:80:53:5b:3b:aa:53:dc:40:30:00:47:30:c9:3a:
                    b2:4a:26:8a:0b:26:b8:8d:50:0b:d4:0e:a5:9e:15:
                    9f:88:32:8b:c9:da:d9:22:de:4d:22:0e:a1:1f:7e:
                    72:84:d9:60:9e:0f:28:70:d7:b2:c2:18:b7:0a:7e:
                    a4:81:80:34:c0:c9:98:15:63:22:fc:46:c7:ef:e6:
                    c6:8b:58:49:2b:97:81:b5:3c:33:04:af:e6:11:eb:
                    76:7f:8a:0a:ea:03:a9:70:9a:3d:0b:26:83:c0:84:
                    98:5c:68:10:9e:1b:1b:8b:40:c2:41:57:00:4e:f6:
                    95:a8:84:4b:a1:37:68:2b:04:44:20:3c:d0:95:f4:
                    bb:08:58:b3:38:24:7a:1e:40:43:0c:4a:e5:d0:bd:
                    8d:d1:f3:e5:3c:6e:f9:88:6e:a5:e5:e6:1a:f2:89:
                    46:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:52:F9:3F:DF:3D:30:9D:1B:A5:E3:75:25:23:20:02:59:37:DF:5E
            X509v3 Authority Key Identifier:
                keyid:01:BB:81:25:70:79:3F:27:C1:E5:A6:1B:45:14:0B:65:50:48:7A:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/R5Uux39wmqd4u3xaBGhDikspkREWYkTjQLB5oc39rKz/0/01BB812570793F27C1E5A61B45140B6550487AB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01BB812570793F27C1E5A61B45140B6550487AB2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/R5Uux39wmqd4u3xaBGhDikspkREWYkTjQLB5oc39rKz/0/323830343a336630633a3230303a3a2f34302d3430203d3e20323636363336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3f0c:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         34:1b:30:60:a5:6c:fb:19:08:af:d7:c9:2c:99:d0:ff:e2:29:
         e5:32:3e:36:58:b6:9e:5d:04:6c:ed:21:f3:74:c7:9b:0d:87:
         19:ae:93:91:2d:d4:58:3b:01:75:94:58:d6:3c:47:8d:3a:1e:
         6c:22:c6:15:3d:bc:b6:2d:8b:cc:bd:91:4c:fc:0a:74:67:c7:
         d3:b4:5d:f2:fa:a6:23:1d:ca:f1:cc:59:de:04:55:b0:d2:9d:
         14:a9:26:94:b5:e7:b2:18:8a:c9:3c:30:9e:53:f5:d6:16:70:
         61:50:ac:62:41:ab:18:48:83:e8:77:e4:1f:33:69:d7:b5:26:
         be:9d:2f:6f:35:42:1b:ea:b6:f9:2c:51:7e:6c:da:97:f9:99:
         d1:27:13:05:2f:df:85:14:12:0b:77:f7:70:dc:19:82:bb:f8:
         07:91:51:0b:bf:a8:d7:a7:34:9b:82:51:c1:02:bc:11:f1:ac:
         97:88:fb:80:bd:bd:60:2a:ee:6e:f9:91:40:82:e3:2e:77:22:
         d7:e8:f8:74:c4:72:37:72:d2:70:0a:46:10:91:e8:1b:b8:f5:
         81:e9:16:49:6e:2b:3c:df:15:43:df:78:7e:61:33:a7:24:de:
         29:8c:27:a0:31:3b:b7:52:e2:88:b6:85:d7:0a:50:8e:aa:a4:
         88:18:88:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:36:52 2025 by rpki-client