Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/323830343a393061303a3a2f33322d3438203d3e20323733353634.roa
File:                     323830343a393061303a3a2f33322d3438203d3e20323733353634.roa (raw, json)
Hash identifier:          VKwHUW52Tl+SoRYm/rzZLyTzNjAQePN/baiH3vGoNc4=
Subject key identifier:   72:97:D1:EF:54:B4:0B:F9:39:08:F7:F3:77:49:09:FA:7F:9E:66:4C
Certificate issuer:       /CN=6677A855E1295ADD8D6E69EE881A99F6D5DD6D8C
Certificate serial:       02B189375C1DBD5A541851A4E86A9AADC01091B2
Authority key identifier: 66:77:A8:55:E1:29:5A:DD:8D:6E:69:EE:88:1A:99:F6:D5:DD:6D:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6677A855E1295ADD8D6E69EE881A99F6D5DD6D8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/323830343a393061303a3a2f33322d3438203d3e20323733353634.roa
Signing time:             Sun 04 Aug 2024 19:30:57 +0000
ROA not before:           Sun 04 Aug 2024 19:25:57 +0000
ROA not after:            Sun 03 Aug 2025 19:30:57 +0000
asID:                     273564
IP address blocks:        2804:90a0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:b1:89:37:5c:1d:bd:5a:54:18:51:a4:e8:6a:9a:ad:c0:10:91:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6677A855E1295ADD8D6E69EE881A99F6D5DD6D8C
        Validity
            Not Before: Aug  4 19:25:57 2024 GMT
            Not After : Aug  3 19:30:57 2025 GMT
        Subject: CN=7297D1EF54B40BF93908F7F3774909FA7F9E664C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7a:0f:89:67:c4:ac:1e:dc:85:c2:9c:2c:6c:
                    c8:f6:01:dd:77:fa:7a:da:56:c4:c3:45:41:71:56:
                    bb:fc:d8:08:59:c4:51:f1:f0:6e:ef:f2:81:2e:97:
                    29:24:cf:5d:e4:20:2a:66:d6:81:9f:65:39:26:a6:
                    65:e3:fe:f3:52:cf:20:5e:21:2c:fa:f5:5c:8a:a3:
                    60:ee:93:32:b4:bb:bc:24:5a:03:e0:ae:52:55:e4:
                    46:25:0a:cf:a6:06:c1:fa:9e:8b:ba:a1:9f:5b:ac:
                    42:3a:74:16:0f:51:5a:13:67:05:a7:77:6f:74:bd:
                    ba:12:37:26:31:02:ff:0d:db:45:14:ba:35:17:32:
                    ee:28:69:11:be:e0:dc:e0:2d:08:94:59:5c:be:3a:
                    e3:a4:9e:b0:16:c8:b9:78:a3:6f:4a:b7:b8:9d:4c:
                    d6:1c:a8:92:48:3b:c7:d8:35:21:67:d5:08:63:ab:
                    2f:d2:c4:0a:e0:fc:1b:2f:60:36:a6:b5:1c:b1:83:
                    9d:4c:28:0f:c9:cd:8a:ad:19:5d:88:57:9b:c8:d6:
                    bd:73:39:55:37:af:14:6b:86:d5:41:f4:c1:bd:a8:
                    ec:2a:42:53:c7:95:38:e6:1c:82:eb:b3:d2:e0:4d:
                    cf:1d:e6:0d:de:19:53:f4:29:52:79:18:4c:ee:df:
                    8d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:97:D1:EF:54:B4:0B:F9:39:08:F7:F3:77:49:09:FA:7F:9E:66:4C
            X509v3 Authority Key Identifier:
                keyid:66:77:A8:55:E1:29:5A:DD:8D:6E:69:EE:88:1A:99:F6:D5:DD:6D:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/6677A855E1295ADD8D6E69EE881A99F6D5DD6D8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6677A855E1295ADD8D6E69EE881A99F6D5DD6D8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/323830343a393061303a3a2f33322d3438203d3e20323733353634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:90a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:e0:25:36:46:ae:a4:a1:a2:63:b2:fd:69:70:26:aa:9e:79:
         fc:36:32:47:8e:84:70:87:df:1c:a8:67:00:43:f9:cc:7a:3a:
         b1:61:ad:37:58:f3:97:73:db:72:2c:4d:92:ea:98:ac:93:cf:
         51:0a:f5:e2:4b:af:b0:ae:73:8e:65:39:a9:8f:9d:f7:6e:e1:
         76:6d:bf:84:31:6d:fe:14:6b:1c:99:89:9c:6b:4e:48:fb:5f:
         01:41:cc:3a:fd:39:43:62:d9:a5:95:0a:c3:9e:18:cd:43:7e:
         0c:4a:ad:88:be:a1:ed:98:91:0c:0a:5e:df:b3:97:f4:67:9c:
         01:0b:04:04:5f:4d:a7:a3:30:f9:b7:33:a0:44:ad:29:3b:03:
         e3:ec:c7:a2:47:52:df:38:9a:7d:1c:b8:77:c4:86:c4:6b:52:
         8c:0b:ea:18:f8:13:04:31:73:02:8a:b0:e0:a0:be:9b:77:05:
         73:3f:33:f1:7d:12:bf:c2:79:07:2c:10:ec:be:d9:5b:c4:02:
         90:e9:7e:12:1d:69:3a:9c:5d:8d:45:da:f0:ea:d1:c4:07:41:
         3f:c3:57:89:d4:1b:95:0b:f3:4e:88:11:de:34:3d:9e:88:b4:
         c6:35:ef:2e:78:1a:8d:48:2e:c6:72:73:a3:fb:82:9b:45:7c:
         ac:e3:3c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:25:37 2025 by rpki-client