Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AHENi3DBehDtMTmBMS1yRA33AiVRP5MkiKz9wMe5Qqn7/1/323830343a363931383a3a2f33322d313238203d3e20323730323438.roa
File:                     323830343a363931383a3a2f33322d313238203d3e20323730323438.roa (raw, json)
Hash identifier:          7oWUQh93zNmh1UbCHIDOgzn+/c9d+5hY14Ck//FVDSE=
Subject key identifier:   C8:B7:B3:6F:83:C2:9D:47:02:F8:A2:6F:82:F7:44:78:30:DA:99:FD
Certificate issuer:       /CN=E2E37F67D2EE63A12224C15B9AD15A60A6BF0B43
Certificate serial:       58D90879BB1BAD90AA94D03C8E002CF3A39C251F
Authority key identifier: E2:E3:7F:67:D2:EE:63:A1:22:24:C1:5B:9A:D1:5A:60:A6:BF:0B:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2E37F67D2EE63A12224C15B9AD15A60A6BF0B43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AHENi3DBehDtMTmBMS1yRA33AiVRP5MkiKz9wMe5Qqn7/1/323830343a363931383a3a2f33322d313238203d3e20323730323438.roa
Signing time:             Sat 06 Jan 2024 14:38:38 +0000
ROA not before:           Sat 06 Jan 2024 14:33:38 +0000
ROA not after:            Sat 04 Jan 2025 14:38:38 +0000
asID:                     270248
IP address blocks:        2804:6918::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:d9:08:79:bb:1b:ad:90:aa:94:d0:3c:8e:00:2c:f3:a3:9c:25:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2E37F67D2EE63A12224C15B9AD15A60A6BF0B43
        Validity
            Not Before: Jan  6 14:33:38 2024 GMT
            Not After : Jan  4 14:38:38 2025 GMT
        Subject: CN=C8B7B36F83C29D4702F8A26F82F7447830DA99FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f7:b4:d9:52:ed:57:cc:bc:e6:35:76:35:cd:
                    03:fb:44:50:d9:71:17:47:06:6c:6b:5a:4f:52:85:
                    b6:d4:dc:ac:2c:22:39:78:6a:1d:df:c7:0b:0a:bb:
                    33:a4:c3:ed:d3:50:eb:01:d7:2c:2d:04:eb:63:43:
                    01:09:02:2c:68:89:65:3b:58:6c:8c:78:f3:df:da:
                    66:2e:32:ad:47:db:32:dd:c4:2b:90:d4:93:78:7c:
                    1d:3b:47:95:28:14:ee:e3:01:f9:34:3e:05:6f:00:
                    fe:c2:4b:3d:49:72:40:2b:4b:99:cd:c2:5b:71:7f:
                    5c:10:62:c3:ef:95:0d:76:10:06:7f:a2:04:02:93:
                    92:0d:00:76:4a:f4:9f:fe:8e:0d:8f:98:7e:e8:32:
                    37:4e:50:a6:e4:f9:0e:14:dd:05:50:3a:4d:79:33:
                    6c:72:8d:c2:18:bd:b3:40:90:91:b4:30:6b:c9:6f:
                    00:c1:c1:9c:fd:71:2c:e7:c6:b5:5f:15:bf:92:53:
                    c4:83:8d:a8:51:10:a1:fd:fc:94:aa:41:4b:46:8d:
                    d4:b2:37:0b:dd:a6:0d:30:de:e0:b9:c7:18:46:2e:
                    04:9e:7c:2b:0f:56:62:67:c7:ea:bf:1a:e1:54:0a:
                    f0:19:14:ce:43:44:ec:ff:d8:13:8a:39:1b:9a:84:
                    c3:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:B7:B3:6F:83:C2:9D:47:02:F8:A2:6F:82:F7:44:78:30:DA:99:FD
            X509v3 Authority Key Identifier:
                keyid:E2:E3:7F:67:D2:EE:63:A1:22:24:C1:5B:9A:D1:5A:60:A6:BF:0B:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AHENi3DBehDtMTmBMS1yRA33AiVRP5MkiKz9wMe5Qqn7/1/E2E37F67D2EE63A12224C15B9AD15A60A6BF0B43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2E37F67D2EE63A12224C15B9AD15A60A6BF0B43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AHENi3DBehDtMTmBMS1yRA33AiVRP5MkiKz9wMe5Qqn7/1/323830343a363931383a3a2f33322d313238203d3e20323730323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6918::/32

    Signature Algorithm: sha256WithRSAEncryption
         bc:09:63:75:14:a3:74:68:68:39:99:08:0e:91:ad:6b:7b:6a:
         ff:d1:f1:e0:36:06:32:c6:0c:61:37:0b:cc:42:b5:c9:74:c4:
         5b:f0:c6:9d:df:3f:72:7d:87:72:13:ac:fd:ea:dd:70:64:0a:
         fa:a9:6d:54:c6:6a:3b:ec:21:e4:c4:b1:96:5b:46:35:b8:d0:
         99:b2:4b:42:74:ca:5e:47:f6:67:fc:3b:92:a8:07:a9:48:8b:
         55:c4:40:00:e3:26:01:dc:02:77:57:b4:3e:ff:0b:c6:47:ac:
         c2:62:8f:4e:c1:56:90:7f:4d:aa:0e:11:31:b0:a2:3f:7b:47:
         ce:57:eb:0c:f4:31:10:c0:f0:5b:df:21:e5:6c:1f:b5:57:74:
         c1:d6:9a:d9:c9:ac:2c:06:2c:f5:b7:8b:d8:6c:4e:e7:19:58:
         d7:dc:6a:dd:f4:41:64:b5:d8:77:3d:04:e5:81:93:2b:1e:f9:
         2b:98:3e:82:ee:b3:9a:03:5d:26:51:e2:45:21:bd:13:dc:65:
         1f:7e:69:95:3b:74:fd:d5:95:53:6e:68:88:f2:e7:1b:76:9f:
         cf:0d:67:d2:04:c2:2e:e8:f0:40:c0:6a:9f:bf:05:ca:9c:b9:
         c9:c2:9a:7c:5e:b3:92:f7:fc:00:9b:20:94:aa:2b:20:4e:46:
         3e:93:0c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:29:49 2025 by rpki-client