Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H1tkFASNJPv4qCtBrZHJTuoc1KW4uaqPtxsqLddjpjdw/0/323830343a363032633a3a2f33322d313238203d3e20323639313530.roa
File:                     323830343a363032633a3a2f33322d313238203d3e20323639313530.roa (raw, json)
Hash identifier:          nkMfz2sYc5/tmk8+QR7y2vz/tymcx2BqjH3x7MoGOyU=
Subject key identifier:   E0:A4:5A:AB:A8:9B:B9:18:97:73:EE:88:61:52:8F:F7:8D:79:A5:2C
Certificate issuer:       /CN=647BE817F76A58B8110B464E406EBB9FF62FF5F2
Certificate serial:       5504151D04CB45173CA08E31FE9E6202AF02D5C6
Authority key identifier: 64:7B:E8:17:F7:6A:58:B8:11:0B:46:4E:40:6E:BB:9F:F6:2F:F5:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/647BE817F76A58B8110B464E406EBB9FF62FF5F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H1tkFASNJPv4qCtBrZHJTuoc1KW4uaqPtxsqLddjpjdw/0/323830343a363032633a3a2f33322d313238203d3e20323639313530.roa
Signing time:             Fri 15 Mar 2024 17:56:05 +0000
ROA not before:           Fri 15 Mar 2024 17:51:05 +0000
ROA not after:            Fri 14 Mar 2025 17:56:05 +0000
asID:                     269150
IP address blocks:        2804:602c::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:04:15:1d:04:cb:45:17:3c:a0:8e:31:fe:9e:62:02:af:02:d5:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=647BE817F76A58B8110B464E406EBB9FF62FF5F2
        Validity
            Not Before: Mar 15 17:51:05 2024 GMT
            Not After : Mar 14 17:56:05 2025 GMT
        Subject: CN=E0A45AABA89BB9189773EE8861528FF78D79A52C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:88:86:4a:04:2a:5e:fb:31:4e:82:85:63:a9:
                    a5:d1:00:c2:3c:e2:41:16:94:75:4f:a8:dc:9c:e9:
                    5a:9b:b4:80:39:3b:5a:84:f7:38:75:ec:ab:a9:e1:
                    98:23:b1:c6:0d:06:c6:3f:8a:69:e0:15:52:fd:39:
                    16:29:d1:23:c0:c2:3d:73:3d:38:0f:f9:f3:9b:39:
                    0f:0b:77:fb:ea:3c:9d:b7:45:ea:74:27:8c:77:b1:
                    77:9b:cf:fa:74:2f:de:70:a7:4e:19:14:fb:fd:34:
                    78:09:9e:dc:9a:97:48:c1:fd:6a:4c:c4:b9:62:94:
                    6f:1d:8a:8b:f6:83:9c:24:35:71:ff:72:9d:2d:42:
                    06:f1:cd:0d:b1:16:a5:f0:64:f6:c6:3e:42:f4:03:
                    9b:80:de:1a:75:50:43:fb:d6:06:fb:85:a2:42:6e:
                    94:4e:2b:29:3a:e4:1a:b2:c9:18:ae:eb:7f:51:f4:
                    d1:89:09:a7:d1:96:53:cc:29:7e:dc:a2:09:ba:af:
                    9c:50:ee:ff:78:5c:ca:37:cd:e0:a6:89:ab:56:13:
                    64:22:9c:a9:09:7b:4d:b2:f3:2f:b6:72:9a:7a:7e:
                    b4:90:04:3d:02:bb:d8:08:ac:b5:d6:9b:34:77:f8:
                    38:3d:18:c5:86:cf:d0:d7:d5:e5:76:37:55:8d:6c:
                    4f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:A4:5A:AB:A8:9B:B9:18:97:73:EE:88:61:52:8F:F7:8D:79:A5:2C
            X509v3 Authority Key Identifier:
                keyid:64:7B:E8:17:F7:6A:58:B8:11:0B:46:4E:40:6E:BB:9F:F6:2F:F5:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H1tkFASNJPv4qCtBrZHJTuoc1KW4uaqPtxsqLddjpjdw/0/647BE817F76A58B8110B464E406EBB9FF62FF5F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/647BE817F76A58B8110B464E406EBB9FF62FF5F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1tkFASNJPv4qCtBrZHJTuoc1KW4uaqPtxsqLddjpjdw/0/323830343a363032633a3a2f33322d313238203d3e20323639313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:602c::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:c7:37:04:88:00:54:ba:c5:a4:41:31:e9:54:6a:49:ba:b6:
         32:7e:d0:0d:16:ff:53:9b:ac:7a:94:dd:ea:d8:5b:cb:b7:3c:
         bf:a7:d2:40:9b:f6:73:ae:72:da:6a:f8:92:1e:38:32:6f:27:
         ec:b1:54:0d:34:7c:50:61:5d:c1:91:d2:41:d9:10:c7:a9:c6:
         77:d1:c4:b8:b6:8f:de:35:d5:da:75:58:d9:dc:64:a9:ef:42:
         01:6f:fa:a6:10:fc:83:4e:98:cc:bf:48:09:c2:2d:fb:d7:0e:
         d7:59:08:d8:92:87:a1:28:23:5b:70:cb:b8:43:1f:52:4d:ef:
         18:3e:af:1b:40:af:fa:ab:86:f8:84:77:61:79:7d:e1:4b:c4:
         7e:99:4a:16:5a:b0:fb:67:68:26:dd:99:cd:0b:ea:78:b7:e5:
         fe:fe:f9:81:44:f0:fa:dd:a8:a6:70:06:c8:b2:1a:5c:9d:31:
         3a:fa:2c:8d:67:f2:22:0a:e9:01:ac:c7:d1:3d:54:52:c1:f2:
         ba:51:bb:95:a8:cb:16:1d:d9:ef:cb:06:8d:cb:7a:25:1b:d3:
         68:71:47:31:12:8a:0e:b1:cb:f9:8c:c8:f1:20:71:eb:5d:3c:
         de:f4:96:74:24:77:e0:80:ec:69:40:93:06:0e:43:83:aa:15:
         b7:a5:6e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:13 2025 by rpki-client