Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HZrTqdZtLbWzW1VXHbrAe28K9Kh6k4g7DJejWnPG6T2G/0/323830343a363132383a313330303a3a2f34302d3430203d3e20323639323137.roa
File:                     323830343a363132383a313330303a3a2f34302d3430203d3e20323639323137.roa (raw, json)
Hash identifier:          RR5QvGsOtSG/lRulfKNV6ECAZ+TJt8CdMDFnHEG/RxE=
Subject key identifier:   17:ED:88:EE:FF:36:99:17:AA:A5:6E:C8:DA:99:6A:FB:16:4B:2B:A4
Certificate issuer:       /CN=C2E5547B57F19FE92C11601EAF8DE7B9BC4A9349
Certificate serial:       3E1639FF75CB9F5FD01F412B2E383E457B82B106
Authority key identifier: C2:E5:54:7B:57:F1:9F:E9:2C:11:60:1E:AF:8D:E7:B9:BC:4A:93:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2E5547B57F19FE92C11601EAF8DE7B9BC4A9349.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HZrTqdZtLbWzW1VXHbrAe28K9Kh6k4g7DJejWnPG6T2G/0/323830343a363132383a313330303a3a2f34302d3430203d3e20323639323137.roa
Signing time:             Wed 15 Jan 2025 14:53:51 +0000
ROA not before:           Wed 15 Jan 2025 14:48:51 +0000
ROA not after:            Wed 14 Jan 2026 14:53:51 +0000
asID:                     269217
IP address blocks:        2804:6128:1300::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:16:39:ff:75:cb:9f:5f:d0:1f:41:2b:2e:38:3e:45:7b:82:b1:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2E5547B57F19FE92C11601EAF8DE7B9BC4A9349
        Validity
            Not Before: Jan 15 14:48:51 2025 GMT
            Not After : Jan 14 14:53:51 2026 GMT
        Subject: CN=17ED88EEFF369917AAA56EC8DA996AFB164B2BA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f2:b3:13:06:59:02:c7:79:a3:64:50:9f:55:
                    90:15:06:16:d6:ab:17:be:ba:eb:a3:43:6a:6b:44:
                    26:eb:0c:6a:97:80:19:b3:b2:c6:16:47:df:89:58:
                    31:86:dc:47:13:42:e2:d7:a8:f1:40:0c:e8:a1:bd:
                    0c:88:5a:ff:32:6a:0d:f8:d5:db:b9:0c:ec:bf:31:
                    7b:c0:81:73:a3:2a:27:57:52:3c:d0:57:4c:9f:cb:
                    05:20:b2:ae:bc:ab:f8:61:bf:4a:c0:e8:95:da:c2:
                    38:5e:9e:59:d9:24:6d:2b:46:46:be:a4:9c:89:e3:
                    c9:a7:fa:58:db:19:79:4a:37:76:63:9b:af:33:71:
                    bb:e3:ab:d8:37:a4:c0:24:e6:76:0b:27:a4:5c:14:
                    82:42:08:e7:1b:6a:c1:fb:96:fe:99:b0:c7:0c:0c:
                    ea:26:d0:63:82:4b:d9:27:84:61:c3:c7:99:4c:8c:
                    ad:b9:49:57:30:eb:88:9e:f6:c5:40:70:b9:c7:40:
                    88:b8:58:e0:7a:4c:fc:91:dc:f4:9b:57:02:18:3f:
                    47:a9:db:94:5a:21:da:e4:02:ee:ec:3a:10:50:d2:
                    a1:0d:a4:d9:af:2b:76:74:83:da:4a:44:d0:f4:9f:
                    00:47:5d:fa:36:c9:a2:35:d4:4f:2e:11:df:78:ab:
                    ce:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:ED:88:EE:FF:36:99:17:AA:A5:6E:C8:DA:99:6A:FB:16:4B:2B:A4
            X509v3 Authority Key Identifier:
                keyid:C2:E5:54:7B:57:F1:9F:E9:2C:11:60:1E:AF:8D:E7:B9:BC:4A:93:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HZrTqdZtLbWzW1VXHbrAe28K9Kh6k4g7DJejWnPG6T2G/0/C2E5547B57F19FE92C11601EAF8DE7B9BC4A9349.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2E5547B57F19FE92C11601EAF8DE7B9BC4A9349.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HZrTqdZtLbWzW1VXHbrAe28K9Kh6k4g7DJejWnPG6T2G/0/323830343a363132383a313330303a3a2f34302d3430203d3e20323639323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6128:1300::/40

    Signature Algorithm: sha256WithRSAEncryption
         2c:6f:49:46:91:92:b6:a7:b1:22:79:4d:ec:bd:b6:e2:fa:55:
         a8:5e:c4:fa:20:5d:c6:45:a3:c0:30:27:be:94:c7:d7:2e:a0:
         46:5e:55:90:77:1c:60:24:4b:73:38:57:13:44:aa:ec:78:9b:
         7f:6d:c8:70:64:dc:ce:2e:f2:4d:43:5f:3e:c3:a8:14:8d:9c:
         2a:5b:78:d4:62:28:3d:cf:de:c5:3a:37:02:43:41:59:98:e4:
         a9:5d:40:6b:5a:93:2a:f3:c9:3f:7d:fe:5d:f6:6d:52:2a:f4:
         77:62:34:76:1e:f8:ea:2e:ec:e4:67:25:a5:cb:fa:69:60:fb:
         57:3d:ee:11:b1:46:e3:32:d6:91:6e:aa:9f:47:59:0c:db:99:
         02:15:6b:e4:f8:c2:60:b9:6b:26:e0:d4:b7:90:ec:d8:cc:cc:
         51:e0:d7:56:59:51:ac:65:38:37:24:ab:e2:2c:53:ac:68:9f:
         55:ce:97:f2:2d:55:f1:a1:9b:f5:d0:24:e6:7d:81:52:13:be:
         bc:96:ec:70:93:6a:fd:ff:e1:db:55:d3:02:75:95:5c:33:38:
         df:ac:cf:e6:60:6c:3f:88:61:27:8f:10:4d:24:04:c0:32:29:
         ba:36:d3:be:c3:44:d9:84:24:15:32:6b:72:3e:db:7e:04:cb:
         7d:42:20:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 21:29:37 2025 by rpki-client