Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BSdyo9MmBpqhibd585BgzLy1s4fCWL27Q3PdjBLgmAu1/0/323830343a363538633a383030303a3a2f33342d3334203d3e20323639343939.roa
File:                     323830343a363538633a383030303a3a2f33342d3334203d3e20323639343939.roa (raw, json)
Hash identifier:          l4VcP+Uc04qxjwU3/vSznK/aFEVWWrSoe0RP0zXTX4o=
Subject key identifier:   FB:F5:AE:43:C7:3F:AE:38:35:EF:0A:3E:B2:D3:03:09:D5:70:8C:A7
Certificate issuer:       /CN=A0086FD21CF6CD26003723997398968937DC3452
Certificate serial:       5E687DDBF5252FF956D2AD05645647448A85362A
Authority key identifier: A0:08:6F:D2:1C:F6:CD:26:00:37:23:99:73:98:96:89:37:DC:34:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0086FD21CF6CD26003723997398968937DC3452.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSdyo9MmBpqhibd585BgzLy1s4fCWL27Q3PdjBLgmAu1/0/323830343a363538633a383030303a3a2f33342d3334203d3e20323639343939.roa
Signing time:             Thu 05 Sep 2024 18:20:18 +0000
ROA not before:           Thu 05 Sep 2024 18:15:18 +0000
ROA not after:            Thu 04 Sep 2025 18:20:18 +0000
asID:                     269499
IP address blocks:        2804:658c:8000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:68:7d:db:f5:25:2f:f9:56:d2:ad:05:64:56:47:44:8a:85:36:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0086FD21CF6CD26003723997398968937DC3452
        Validity
            Not Before: Sep  5 18:15:18 2024 GMT
            Not After : Sep  4 18:20:18 2025 GMT
        Subject: CN=FBF5AE43C73FAE3835EF0A3EB2D30309D5708CA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ec:84:ff:33:2c:99:6f:bb:d0:b6:ee:ba:8c:
                    bf:df:b1:fd:e1:2e:8b:8e:4a:0b:69:be:ff:1a:a3:
                    b4:21:6c:12:fe:be:b5:d5:63:d8:81:b9:0c:e9:90:
                    f9:47:ae:51:72:73:fc:20:62:06:b0:69:cd:18:8e:
                    75:cb:7c:87:63:90:de:5c:e1:a0:d4:df:b1:47:17:
                    6e:32:77:b7:d7:4a:0e:a7:6a:0d:f0:54:17:eb:e3:
                    d1:05:13:93:23:de:92:a0:4d:19:a6:d8:c7:5a:55:
                    51:f3:0d:77:01:19:3f:f7:23:d6:fa:8f:3f:ce:af:
                    85:3c:19:37:d4:06:1c:55:21:56:49:06:6b:54:9d:
                    b5:26:89:95:60:2a:7a:9d:47:ec:f0:aa:c4:2d:8b:
                    5d:6c:2c:2e:c1:60:be:47:0d:ea:59:12:60:e1:b6:
                    2b:15:6f:f7:d9:c9:18:d7:a0:a1:79:cd:40:ea:db:
                    46:53:1d:68:6f:83:0a:5d:1f:40:da:b7:a3:d9:4b:
                    cd:95:82:98:c6:54:83:f6:d8:36:18:31:d4:6c:53:
                    ff:98:0c:c0:6c:62:ab:b0:d1:d3:29:e8:86:cd:d6:
                    2e:68:ca:d0:5b:70:76:15:89:f9:c3:f9:71:3c:87:
                    a9:a1:ff:a5:24:01:3b:70:fa:96:18:89:c6:ee:31:
                    5c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:F5:AE:43:C7:3F:AE:38:35:EF:0A:3E:B2:D3:03:09:D5:70:8C:A7
            X509v3 Authority Key Identifier:
                keyid:A0:08:6F:D2:1C:F6:CD:26:00:37:23:99:73:98:96:89:37:DC:34:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSdyo9MmBpqhibd585BgzLy1s4fCWL27Q3PdjBLgmAu1/0/A0086FD21CF6CD26003723997398968937DC3452.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0086FD21CF6CD26003723997398968937DC3452.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSdyo9MmBpqhibd585BgzLy1s4fCWL27Q3PdjBLgmAu1/0/323830343a363538633a383030303a3a2f33342d3334203d3e20323639343939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:658c:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         0c:af:11:ca:92:ae:f4:fe:5f:3a:8d:99:f6:a9:c0:4e:9b:d0:
         0f:48:65:e6:24:3f:a9:07:dd:b2:ef:7a:e5:0f:2b:6a:20:88:
         93:cf:d5:a7:4d:d1:3b:a7:af:f0:0f:64:eb:76:1b:15:3e:97:
         e2:fa:9f:1f:48:ac:37:24:91:80:6e:ad:62:0c:8f:66:bf:a7:
         1a:b2:95:57:b0:9a:30:6d:fa:c8:a7:b7:0b:e1:26:77:04:7c:
         0a:ab:8e:73:d7:9c:f9:2b:d0:3a:b8:d3:8f:06:65:08:89:d0:
         53:60:18:c1:4f:cc:d9:f6:82:bf:2b:95:68:b2:d2:01:c2:4d:
         55:47:7d:cc:52:67:72:57:d8:18:21:83:06:20:1e:76:ba:ac:
         4a:a4:f5:51:20:15:08:45:1d:cf:96:13:5d:e9:2c:68:18:43:
         f9:9f:c1:e9:e9:4f:ca:23:56:82:4a:91:82:e7:58:c1:f0:96:
         86:bd:c5:7b:4e:23:42:93:22:be:44:37:18:09:2f:f8:8f:66:
         e9:91:fa:7e:a6:88:fa:c5:a6:bf:b2:e7:6e:ea:d3:92:8a:22:
         8a:1b:ce:11:4a:9b:f4:41:af:17:0a:91:2a:08:6f:e2:04:46:
         c8:46:a0:59:ce:00:66:6a:f6:da:da:d0:73:f6:75:00:6a:aa:
         90:c0:95:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 08:59:40 2025 by rpki-client