Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AHnau4FXhx6MhTmFvMJdfmbq2CCaNctnm8P1WAPQzYkc/0/323830343a393061633a3a2f33342d3334203d3e20323734353934.roa
File:                     323830343a393061633a3a2f33342d3334203d3e20323734353934.roa (raw, json)
Hash identifier:          e2qkpZ7DBvOWM4YXzV/w/LObF5mslBTRRQu+xnc51og=
Subject key identifier:   45:5E:53:43:0D:95:F9:A4:6A:C9:A9:83:2F:02:BC:C5:E7:80:21:5A
Certificate issuer:       /CN=CBF052CC17BE549AAF983B0B899F67FF9E8E92D6
Certificate serial:       045721996E78580C02113264E7DD0C8FCC4DEC5C
Authority key identifier: CB:F0:52:CC:17:BE:54:9A:AF:98:3B:0B:89:9F:67:FF:9E:8E:92:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBF052CC17BE549AAF983B0B899F67FF9E8E92D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AHnau4FXhx6MhTmFvMJdfmbq2CCaNctnm8P1WAPQzYkc/0/323830343a393061633a3a2f33342d3334203d3e20323734353934.roa
Signing time:             Mon 02 Sep 2024 19:32:04 +0000
ROA not before:           Mon 02 Sep 2024 19:27:04 +0000
ROA not after:            Mon 01 Sep 2025 19:32:04 +0000
asID:                     274594
IP address blocks:        2804:90ac::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:57:21:99:6e:78:58:0c:02:11:32:64:e7:dd:0c:8f:cc:4d:ec:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBF052CC17BE549AAF983B0B899F67FF9E8E92D6
        Validity
            Not Before: Sep  2 19:27:04 2024 GMT
            Not After : Sep  1 19:32:04 2025 GMT
        Subject: CN=455E53430D95F9A46AC9A9832F02BCC5E780215A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f7:87:bb:2d:8c:44:7d:c8:ab:fe:1c:1d:1a:
                    dd:01:af:34:43:a8:62:a7:38:37:c2:b7:d5:cc:0a:
                    48:7f:28:51:ca:b4:27:65:79:79:05:a3:d3:74:44:
                    3a:31:32:d3:72:18:a8:fb:76:6b:99:03:91:91:81:
                    5b:98:45:7c:c0:36:5f:ad:fe:bc:e1:43:d0:f4:5b:
                    e6:d1:4d:73:4e:3e:29:57:ca:09:e5:9f:a4:fe:23:
                    75:f0:81:ab:53:eb:24:db:06:9c:26:1f:a9:97:92:
                    3b:4d:e1:30:07:9f:08:fb:0d:f3:ce:af:7e:bf:8a:
                    b8:45:60:98:d0:56:60:b1:ab:5b:3c:8b:a2:2b:4c:
                    f4:94:8d:13:02:97:55:73:bf:f2:f9:90:42:d6:6e:
                    31:76:07:a1:73:09:58:fa:de:43:d9:37:a6:61:2c:
                    85:e1:6b:8d:61:98:88:e7:54:d9:88:a0:a2:d0:6d:
                    5d:81:a1:c3:8d:71:9c:65:8a:fe:94:9a:37:4a:55:
                    51:29:ad:31:6a:34:9f:dd:70:94:8b:66:18:17:b9:
                    95:87:c8:ac:bd:bc:f3:93:2e:d4:5e:5a:36:e2:8a:
                    e3:5b:5a:3e:88:2d:7b:83:ad:83:f9:f9:5f:95:34:
                    33:ac:af:3b:82:d2:8f:50:e7:c8:4f:fc:ff:1b:88:
                    42:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:5E:53:43:0D:95:F9:A4:6A:C9:A9:83:2F:02:BC:C5:E7:80:21:5A
            X509v3 Authority Key Identifier:
                keyid:CB:F0:52:CC:17:BE:54:9A:AF:98:3B:0B:89:9F:67:FF:9E:8E:92:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AHnau4FXhx6MhTmFvMJdfmbq2CCaNctnm8P1WAPQzYkc/0/CBF052CC17BE549AAF983B0B899F67FF9E8E92D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBF052CC17BE549AAF983B0B899F67FF9E8E92D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AHnau4FXhx6MhTmFvMJdfmbq2CCaNctnm8P1WAPQzYkc/0/323830343a393061633a3a2f33342d3334203d3e20323734353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:90ac::/34

    Signature Algorithm: sha256WithRSAEncryption
         65:75:52:c4:0d:98:c8:64:55:0c:02:d1:6a:29:fb:4c:0a:65:
         ab:d7:fc:21:04:ee:97:44:ad:ff:73:f3:fd:68:cf:96:4b:00:
         80:33:8c:19:f2:7f:19:ce:aa:34:b2:4f:86:fa:43:92:f3:01:
         3b:be:3b:4f:c1:c7:11:af:4a:c7:7e:28:ff:1c:b1:95:d4:31:
         81:02:57:55:3e:2b:d9:40:08:85:5c:5d:ce:bc:48:10:1e:5c:
         80:35:e1:8b:f7:41:d8:8e:e7:cb:06:d5:c1:aa:2e:bf:33:ae:
         8c:b9:3c:67:75:b9:c0:b9:a7:78:62:42:21:ce:83:a4:3c:84:
         c1:8e:d7:a5:56:a1:66:22:ed:f6:bf:ec:3a:bd:41:b8:35:b2:
         55:e9:1f:57:d4:54:d4:22:57:86:40:f2:de:51:bd:51:7b:d2:
         33:6c:a1:52:2f:df:af:03:e3:25:d5:1e:3e:01:cf:ff:59:dc:
         44:10:41:3d:3a:11:68:4a:02:fa:09:96:50:3f:ca:69:47:db:
         b4:a1:fc:bd:59:01:03:4a:12:23:b9:16:2b:62:d6:e7:80:d8:
         cf:dc:b8:a1:72:16:58:b9:af:f7:85:95:3e:9d:eb:35:9a:7a:
         65:05:8e:cc:f1:90:a9:5f:91:48:69:c2:3e:fe:2a:f6:e7:51:
         b4:1b:53:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 14:11:10 2025 by rpki-client