Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HWeYQ2gHEs3pFH8bemsMtqu7v76LgWYFXwNQGz7SAMWu/0/323830343a386362343a3a2f33342d3334203d3e20323733383136.roa
File:                     323830343a386362343a3a2f33342d3334203d3e20323733383136.roa (raw, json)
Hash identifier:          z3YCaXTaEeo1PM5+kK489Sl/kM6HnSwJy3CQncxeWwU=
Subject key identifier:   87:7C:0E:65:56:6D:07:EC:EE:95:4D:BB:A5:6A:CB:E4:F7:C6:B6:52
Certificate issuer:       /CN=BAF68C193144B8DD53B0312AA8ACCD5BB59350E0
Certificate serial:       117C657AF362B0B789BBD11A633249C31DA78593
Authority key identifier: BA:F6:8C:19:31:44:B8:DD:53:B0:31:2A:A8:AC:CD:5B:B5:93:50:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAF68C193144B8DD53B0312AA8ACCD5BB59350E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HWeYQ2gHEs3pFH8bemsMtqu7v76LgWYFXwNQGz7SAMWu/0/323830343a386362343a3a2f33342d3334203d3e20323733383136.roa
Signing time:             Mon 09 Dec 2024 14:34:20 +0000
ROA not before:           Mon 09 Dec 2024 14:29:20 +0000
ROA not after:            Mon 08 Dec 2025 14:34:20 +0000
asID:                     273816
IP address blocks:        2804:8cb4::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:7c:65:7a:f3:62:b0:b7:89:bb:d1:1a:63:32:49:c3:1d:a7:85:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAF68C193144B8DD53B0312AA8ACCD5BB59350E0
        Validity
            Not Before: Dec  9 14:29:20 2024 GMT
            Not After : Dec  8 14:34:20 2025 GMT
        Subject: CN=877C0E65566D07ECEE954DBBA56ACBE4F7C6B652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:67:14:7f:0f:12:62:c0:8f:5b:39:c2:7c:ae:
                    2b:c1:58:a6:3a:68:f5:25:b3:49:c7:ec:cf:bc:e3:
                    92:69:e9:bc:67:1d:24:e7:e8:af:09:cc:40:b9:46:
                    d3:46:ba:a0:47:ea:5d:0c:53:54:c4:44:76:bb:d5:
                    b1:f5:32:4c:68:ac:ea:38:61:a5:7f:4f:c8:71:8e:
                    7f:de:5f:1f:6f:c5:60:b8:fc:67:06:8a:a4:90:4e:
                    a2:ca:e8:10:d8:2b:73:1a:c7:29:9c:fc:89:f7:6b:
                    b1:f6:d8:09:62:13:a1:60:00:96:46:70:a6:56:1f:
                    52:c5:6c:4e:e4:b8:ac:59:41:6f:da:44:79:42:78:
                    1f:11:e2:4e:b1:33:ba:bf:c6:c0:9c:e0:d9:62:69:
                    bf:4c:6f:50:81:9a:d7:73:4e:3b:b5:e2:6f:37:c2:
                    87:36:3b:db:5f:a7:98:7d:8b:79:4e:bf:94:cd:47:
                    27:17:f7:12:b3:3c:ab:22:5f:bc:01:45:22:b2:eb:
                    3d:eb:ae:17:08:21:be:17:af:cd:ed:81:50:ef:44:
                    16:54:d8:a7:bb:13:cb:0c:ce:b4:68:ce:73:d7:ee:
                    14:7b:35:7e:51:a2:7a:b7:cb:92:2a:48:01:aa:7d:
                    aa:08:16:d7:2c:72:1b:8c:c1:13:52:75:28:77:01:
                    8b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:7C:0E:65:56:6D:07:EC:EE:95:4D:BB:A5:6A:CB:E4:F7:C6:B6:52
            X509v3 Authority Key Identifier:
                keyid:BA:F6:8C:19:31:44:B8:DD:53:B0:31:2A:A8:AC:CD:5B:B5:93:50:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HWeYQ2gHEs3pFH8bemsMtqu7v76LgWYFXwNQGz7SAMWu/0/BAF68C193144B8DD53B0312AA8ACCD5BB59350E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAF68C193144B8DD53B0312AA8ACCD5BB59350E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HWeYQ2gHEs3pFH8bemsMtqu7v76LgWYFXwNQGz7SAMWu/0/323830343a386362343a3a2f33342d3334203d3e20323733383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8cb4::/34

    Signature Algorithm: sha256WithRSAEncryption
         d9:ce:ed:17:a9:fe:9c:7a:4e:91:29:8c:e8:33:fd:03:df:4f:
         c3:29:44:ff:1c:82:14:fa:45:91:a4:f2:7f:f7:4e:cf:2d:48:
         03:36:44:0f:a5:59:81:9f:fb:5e:e6:da:8f:22:8e:f5:7f:6a:
         b9:e4:c9:c9:b9:3c:36:51:e6:a9:e7:29:ad:b4:8e:30:ee:e6:
         4e:7d:72:e1:9c:d1:05:7c:2d:bf:42:25:92:4b:10:51:a4:0f:
         2f:72:3e:e3:3f:16:19:de:2f:69:75:4d:90:43:eb:1d:39:02:
         d6:e9:39:32:88:48:c8:5a:aa:c3:d5:05:78:0d:ff:d8:98:b4:
         b9:d9:a7:c7:f1:29:0c:75:1f:a3:5d:62:c8:41:e0:8b:7a:de:
         c3:83:32:36:30:72:97:ec:51:4d:2e:f2:94:24:fd:eb:fe:26:
         fa:f7:8d:76:6d:77:84:51:53:67:51:02:86:57:77:ea:37:2e:
         d6:c9:66:a9:12:4a:85:fa:9c:ef:66:dd:b6:8c:d1:6c:54:63:
         79:1b:de:a0:e7:10:ab:66:78:7e:38:eb:ba:fb:77:c8:2d:7c:
         ca:b5:40:0b:fb:53:d9:c5:75:bf:57:9b:c9:9e:b4:53:1e:3e:
         81:c5:ce:72:ba:79:17:92:22:45:a2:87:6e:d7:7c:82:16:bd:
         2c:27:81:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:47:41 2025 by rpki-client on console.sobornost.net