Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HWeYQ2gHEs3pFH8bemsMtqu7v76LgWYFXwNQGz7SAMWu/0/323830343a386362343a3a2f33332d3333203d3e20323733383136.roa
File:                     323830343a386362343a3a2f33332d3333203d3e20323733383136.roa (raw, json)
Hash identifier:          MJb1JDIczLyP6PoweqfidWkdeXdgXZBFgIRCkdqmO5o=
Subject key identifier:   7A:C5:54:E3:8F:4C:A6:C6:B2:9F:B2:93:BD:7B:AB:3A:AB:21:5C:F7
Certificate issuer:       /CN=BAF68C193144B8DD53B0312AA8ACCD5BB59350E0
Certificate serial:       7A8E161C6E9E5A208D2E452F010CD1860F46CFD3
Authority key identifier: BA:F6:8C:19:31:44:B8:DD:53:B0:31:2A:A8:AC:CD:5B:B5:93:50:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAF68C193144B8DD53B0312AA8ACCD5BB59350E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HWeYQ2gHEs3pFH8bemsMtqu7v76LgWYFXwNQGz7SAMWu/0/323830343a386362343a3a2f33332d3333203d3e20323733383136.roa
Signing time:             Mon 09 Dec 2024 14:34:22 +0000
ROA not before:           Mon 09 Dec 2024 14:29:22 +0000
ROA not after:            Mon 08 Dec 2025 14:34:22 +0000
asID:                     273816
IP address blocks:        2804:8cb4::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:8e:16:1c:6e:9e:5a:20:8d:2e:45:2f:01:0c:d1:86:0f:46:cf:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAF68C193144B8DD53B0312AA8ACCD5BB59350E0
        Validity
            Not Before: Dec  9 14:29:22 2024 GMT
            Not After : Dec  8 14:34:22 2025 GMT
        Subject: CN=7AC554E38F4CA6C6B29FB293BD7BAB3AAB215CF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:68:6d:7b:da:d9:f7:c4:d6:9a:98:cd:9e:dc:
                    b4:3f:c9:66:a4:a5:81:b9:04:3d:d0:ee:88:80:31:
                    42:12:58:04:98:77:ec:83:fc:32:54:92:57:58:84:
                    9e:8a:cb:f7:18:3b:c6:a8:fb:21:11:e7:ed:2f:0c:
                    cd:12:51:80:12:2f:e9:b4:b5:b9:06:d1:ac:f8:1a:
                    e2:91:a7:94:29:ed:73:3c:81:7f:38:39:d2:00:08:
                    79:c2:59:ac:f1:97:08:e6:db:1e:7c:6f:fd:02:6e:
                    ea:78:71:b1:b4:22:49:15:78:78:45:5a:dc:3d:cd:
                    1e:d5:b5:e8:8c:50:98:1e:63:60:aa:b1:e9:05:8a:
                    ca:c8:2d:fb:22:0b:93:ca:f5:8e:f3:85:a0:52:59:
                    58:32:3e:00:63:0e:21:ae:41:1b:59:c4:be:80:8c:
                    53:73:20:54:9e:9f:88:99:21:cb:1a:91:1b:c8:b2:
                    8a:ef:fb:e1:ba:6e:93:4b:4e:30:76:ee:92:81:8a:
                    3d:f4:4a:b5:b9:a6:21:5a:4c:77:f9:7c:19:31:c5:
                    20:49:f9:2d:b8:8a:a7:f8:f1:af:6f:c7:74:d5:af:
                    98:c2:df:98:c9:c8:90:e1:f5:2f:c4:6b:62:6e:13:
                    41:70:1e:7d:c1:f5:34:19:b5:ab:cc:70:0e:8e:a7:
                    e0:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:C5:54:E3:8F:4C:A6:C6:B2:9F:B2:93:BD:7B:AB:3A:AB:21:5C:F7
            X509v3 Authority Key Identifier:
                keyid:BA:F6:8C:19:31:44:B8:DD:53:B0:31:2A:A8:AC:CD:5B:B5:93:50:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HWeYQ2gHEs3pFH8bemsMtqu7v76LgWYFXwNQGz7SAMWu/0/BAF68C193144B8DD53B0312AA8ACCD5BB59350E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAF68C193144B8DD53B0312AA8ACCD5BB59350E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HWeYQ2gHEs3pFH8bemsMtqu7v76LgWYFXwNQGz7SAMWu/0/323830343a386362343a3a2f33332d3333203d3e20323733383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8cb4::/33

    Signature Algorithm: sha256WithRSAEncryption
         b7:b3:55:16:ad:c0:94:a2:a7:fa:29:a7:89:87:19:78:98:07:
         e1:cb:bb:75:72:7a:ad:19:e0:01:35:8c:e4:6c:66:22:ca:ec:
         02:f1:4a:be:65:e5:18:3f:1d:2b:2d:58:d8:ef:2e:42:e3:03:
         06:86:9a:b3:ca:a7:bb:8c:07:28:c0:bc:f0:ac:fb:26:5b:b4:
         f3:90:03:2d:c4:93:a4:76:10:f9:97:26:8f:ee:c6:15:e3:cd:
         66:b4:bb:60:b7:53:c3:e1:f6:cf:99:72:00:c8:ee:0f:95:87:
         90:4d:81:c3:77:af:16:79:50:84:63:43:60:e1:88:67:1b:eb:
         93:20:b4:59:2a:e2:d8:75:89:b1:72:f8:71:c0:c9:df:a7:fa:
         22:58:7e:20:9f:f5:d9:f4:d5:ad:09:66:0d:22:df:31:52:85:
         dc:c0:cb:e7:c8:dd:aa:ae:23:48:8e:23:f5:ca:d7:d6:b5:06:
         58:f4:7d:ec:f2:8c:6b:b5:bd:68:cd:4b:0b:8a:51:f6:20:99:
         b2:46:9f:58:9b:4a:39:f1:66:1c:d9:01:d5:72:c1:ab:38:3b:
         01:41:5d:84:a9:3e:06:75:f3:f9:04:20:e6:7c:55:fb:90:a1:
         82:cb:c5:91:d8:fb:7a:5e:c6:27:09:e7:8a:bf:f2:f6:30:26:
         45:4a:18:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:47:41 2025 by rpki-client on console.sobornost.net