Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HYUHERJsUAGNNZza4YuYZ1eCqizGa8dcwtFxPpnzE5sV/0/323830343a366230343a3a2f33322d3438203d3e20323730333732.roa
File:                     323830343a366230343a3a2f33322d3438203d3e20323730333732.roa (raw, json)
Hash identifier:          7vf408rOItju9vI3hzhk6EpkSAu1l8O40Rm0A75Zt64=
Subject key identifier:   E7:10:29:FB:73:C3:D2:C8:E2:6F:1C:C4:DA:72:4B:51:62:5E:0E:B9
Certificate issuer:       /CN=01F8E3015A4729970183E3B84166535838F115FA
Certificate serial:       601C132D7C7DD28D62A31D92B2009DB53BE02BCF
Authority key identifier: 01:F8:E3:01:5A:47:29:97:01:83:E3:B8:41:66:53:58:38:F1:15:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01F8E3015A4729970183E3B84166535838F115FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HYUHERJsUAGNNZza4YuYZ1eCqizGa8dcwtFxPpnzE5sV/0/323830343a366230343a3a2f33322d3438203d3e20323730333732.roa
Signing time:             Thu 03 Nov 2022 16:00:00 +0000
ROA not before:           Thu 03 Nov 2022 15:55:00 +0000
ROA not after:            Thu 02 Nov 2023 16:00:00 +0000
asID:                     270372
IP address blocks:        2804:6b04::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:1c:13:2d:7c:7d:d2:8d:62:a3:1d:92:b2:00:9d:b5:3b:e0:2b:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01F8E3015A4729970183E3B84166535838F115FA
        Validity
            Not Before: Nov  3 15:55:00 2022 GMT
            Not After : Nov  2 16:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:15:90:8c:81:2a:8a:24:fa:ec:58:ca:85:be:
                    3e:07:f7:f5:ea:01:15:1f:4d:19:9b:cd:85:1c:03:
                    f0:ec:26:f1:92:51:52:a6:26:f1:c4:15:63:2b:af:
                    8a:e6:26:b7:a8:2e:06:3f:0e:86:e5:c9:4f:82:74:
                    05:43:4b:ae:ee:a0:f5:1d:d3:2d:a9:3f:8b:8f:11:
                    f1:62:8b:51:d2:77:c6:ef:71:9e:cb:38:10:b8:1b:
                    88:f4:02:64:9b:e0:67:85:57:5d:d4:10:9d:79:0e:
                    d4:96:0f:40:e4:3f:b2:3a:a3:f5:f5:ad:c8:54:29:
                    b6:c2:83:71:2b:d5:f6:7c:8f:14:fe:08:0f:81:a4:
                    b5:23:b9:ef:83:13:9a:46:96:7c:37:e4:3c:80:4b:
                    51:0b:4b:14:8c:68:e0:a3:b5:3c:9e:e7:88:35:cd:
                    d7:37:13:d1:8d:33:8b:bd:49:55:e0:e3:7d:19:82:
                    d6:0a:5d:88:02:a3:cd:c7:46:96:f9:a9:0f:e6:00:
                    f4:c8:15:b7:53:ad:66:f6:ce:92:06:5d:ef:72:af:
                    74:8c:27:16:3a:43:7b:45:72:41:7c:ab:5f:89:49:
                    33:91:f9:1c:fd:79:15:00:ef:a1:16:71:79:5e:15:
                    7d:78:0f:bc:e5:61:7d:16:c7:c4:15:23:e3:c1:f8:
                    4e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:10:29:FB:73:C3:D2:C8:E2:6F:1C:C4:DA:72:4B:51:62:5E:0E:B9
            X509v3 Authority Key Identifier:
                keyid:01:F8:E3:01:5A:47:29:97:01:83:E3:B8:41:66:53:58:38:F1:15:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HYUHERJsUAGNNZza4YuYZ1eCqizGa8dcwtFxPpnzE5sV/0/01F8E3015A4729970183E3B84166535838F115FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01F8E3015A4729970183E3B84166535838F115FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HYUHERJsUAGNNZza4YuYZ1eCqizGa8dcwtFxPpnzE5sV/0/323830343a366230343a3a2f33322d3438203d3e20323730333732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6b04::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:b2:ab:9d:d3:01:34:7c:5b:5b:c3:44:5e:0f:db:a0:77:4b:
         35:e1:cb:49:44:45:43:7c:2a:2e:e7:3a:87:c6:0c:c7:d2:38:
         c1:db:f9:cc:f8:ed:8f:22:6a:ec:ca:8d:f5:59:9e:0c:00:c9:
         9f:78:bd:af:ca:73:bc:d1:65:31:0a:d0:37:63:2d:f9:4e:0c:
         c0:ac:3e:9d:7a:39:48:f4:6b:3f:a9:c6:58:25:10:8b:7a:f7:
         b4:ab:5a:85:79:5e:26:08:0e:55:ff:bb:55:10:65:83:ab:f2:
         5e:42:49:2f:69:62:b6:cc:bf:e1:de:07:c8:01:02:4f:21:d9:
         5c:1a:f3:be:b7:e7:93:a1:c6:6f:11:d7:5e:0a:63:80:9d:11:
         cc:d9:2b:5a:ae:3b:08:19:ec:eb:00:2d:a3:c6:60:64:04:44:
         83:58:77:27:5f:1a:14:65:71:b0:e2:09:91:3b:20:c9:48:f9:
         fc:6c:20:30:27:a3:3b:b6:14:42:fa:41:6a:2b:c4:3e:c4:25:
         49:82:a3:a9:6a:6f:4a:d9:23:ab:13:e3:6c:3a:b1:64:51:c9:
         19:c3:fa:87:86:0f:0e:b4:37:2c:e9:33:6b:c4:7e:be:aa:d6:
         a4:25:67:ff:0e:2a:59:9f:a1:fd:f6:ca:41:11:52:7f:5a:6a:
         46:30:02:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:16:02 2025 by rpki-client