Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/323830343a323430303a3a2f33352d3335203d3e20323634313935.roa
File:                     323830343a323430303a3a2f33352d3335203d3e20323634313935.roa (raw, json)
Hash identifier:          u0jWHnfGK6oRH4i4+/c8I0832LCjYe8WkSfIhcQYqA8=
Subject key identifier:   EA:66:29:30:11:B2:46:82:53:FE:BF:27:31:2D:68:8E:C2:15:21:21
Certificate issuer:       /CN=4DBFC3A65428322E6B8FB82B60B4FC797A3FEDF5
Certificate serial:       66449D83933A6932097BB2BEA7516B957AE9FDEE
Authority key identifier: 4D:BF:C3:A6:54:28:32:2E:6B:8F:B8:2B:60:B4:FC:79:7A:3F:ED:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4DBFC3A65428322E6B8FB82B60B4FC797A3FEDF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/323830343a323430303a3a2f33352d3335203d3e20323634313935.roa
Signing time:             Mon 10 Jul 2023 22:58:37 +0000
ROA not before:           Mon 10 Jul 2023 22:53:37 +0000
ROA not after:            Mon 08 Jul 2024 22:58:37 +0000
asID:                     264195
IP address blocks:        2804:2400::/35 maxlen: 35
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:44:9d:83:93:3a:69:32:09:7b:b2:be:a7:51:6b:95:7a:e9:fd:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DBFC3A65428322E6B8FB82B60B4FC797A3FEDF5
        Validity
            Not Before: Jul 10 22:53:37 2023 GMT
            Not After : Jul  8 22:58:37 2024 GMT
        Subject: CN=EA66293011B2468253FEBF27312D688EC2152121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:96:2d:1e:44:60:ea:16:8e:f6:24:95:14:20:
                    fa:2c:67:ff:bb:42:86:11:95:e6:63:35:a2:79:aa:
                    29:23:64:81:18:b1:a3:90:59:d9:08:e4:df:d1:32:
                    c6:ad:9b:6c:7a:31:aa:2f:67:ac:23:fd:49:e8:11:
                    86:54:93:4e:90:b8:17:27:9b:0d:1c:59:52:f5:71:
                    70:d7:3d:ad:65:6a:d3:79:0d:d2:4b:74:4c:c1:42:
                    79:70:10:a5:87:b6:44:a2:f3:f6:db:d1:a1:a9:46:
                    c5:86:e2:30:bd:d0:35:08:8b:41:cd:04:de:f3:73:
                    a3:de:9e:00:22:69:ce:02:d2:ea:20:75:2b:cc:48:
                    dd:9a:e1:fa:1d:6d:63:2b:13:e2:81:5a:e7:4d:da:
                    d3:78:75:00:df:f1:9e:5d:b9:72:2c:cf:9f:db:68:
                    0f:41:7e:33:92:0a:54:fd:d4:e6:f2:8a:07:5c:48:
                    ca:2c:39:65:57:65:f3:2c:24:18:30:60:ab:d2:9f:
                    29:40:ec:74:32:73:3c:57:80:28:cc:e8:4a:91:13:
                    21:70:24:dd:ec:01:c9:24:13:d4:29:ca:f9:0e:37:
                    f2:d2:83:53:da:e2:83:6c:cf:e7:cb:b7:3e:d3:d5:
                    c2:78:c2:e7:2c:c0:55:00:26:92:30:ee:e3:56:ab:
                    7a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:66:29:30:11:B2:46:82:53:FE:BF:27:31:2D:68:8E:C2:15:21:21
            X509v3 Authority Key Identifier:
                keyid:4D:BF:C3:A6:54:28:32:2E:6B:8F:B8:2B:60:B4:FC:79:7A:3F:ED:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/4DBFC3A65428322E6B8FB82B60B4FC797A3FEDF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4DBFC3A65428322E6B8FB82B60B4FC797A3FEDF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/323830343a323430303a3a2f33352d3335203d3e20323634313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2400::/35

    Signature Algorithm: sha256WithRSAEncryption
         4a:5e:fd:ad:27:74:92:be:19:b6:b4:b7:ad:c1:3d:35:99:12:
         ba:6e:27:db:9d:38:50:8e:b8:b0:38:a1:d7:7a:ef:1c:3e:2c:
         98:22:f9:2b:99:6f:e3:01:bf:ce:12:f3:13:95:e1:71:c7:14:
         c5:b6:2d:5e:1a:f4:4a:e6:ea:f5:09:16:85:d7:da:49:c4:10:
         80:17:c3:12:f8:df:a1:1c:d0:2b:fe:15:36:5d:1d:52:93:a6:
         4d:15:4f:b9:31:db:34:12:93:99:e9:b3:5c:e0:6e:28:96:77:
         e0:8d:8d:b9:a6:80:4d:6c:4a:57:1d:ea:e9:f1:08:69:73:36:
         c6:90:a3:cc:43:86:4f:6f:5a:6b:2d:8a:49:42:25:b6:9c:06:
         0c:e5:4e:d7:b8:3f:e7:a6:88:6d:d2:43:c1:a7:23:51:7f:f5:
         bb:82:8e:6d:c9:37:c3:99:2c:b2:1e:0b:4d:c4:1b:47:d5:d1:
         8d:5a:61:2c:90:86:db:ec:f2:c9:da:29:06:e9:84:bb:53:13:
         7e:f0:fd:3e:b0:f5:67:56:fa:b8:58:21:3a:7b:00:d5:ce:33:
         3d:66:99:af:97:4e:77:73:ec:b0:d9:22:2c:6d:33:a5:bd:ec:
         ce:d0:35:d3:b0:1c:be:2a:eb:ca:1c:10:67:be:28:f3:1d:b3:
         fc:39:a7:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 09:01:33 2025 by rpki-client