Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HZrTqdZtLbWzW1VXHbrAe28K9Kh6k4g7DJejWnPG6T2G/0/323830343a363132383a3161303a3a2f34342d3434203d3e20323639323137.roa
File:                     323830343a363132383a3161303a3a2f34342d3434203d3e20323639323137.roa (raw, json)
Hash identifier:          hpTP2/2+JOTx3RMjiDyKYoSeBiJH+pVEGEXm4dEIVd4=
Subject key identifier:   96:66:E0:47:03:67:16:52:B8:57:52:8B:02:68:2A:AB:23:6E:10:F1
Certificate issuer:       /CN=C2E5547B57F19FE92C11601EAF8DE7B9BC4A9349
Certificate serial:       0FDCFC5B9EC2D33C773720BA3480574C4F11DE48
Authority key identifier: C2:E5:54:7B:57:F1:9F:E9:2C:11:60:1E:AF:8D:E7:B9:BC:4A:93:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2E5547B57F19FE92C11601EAF8DE7B9BC4A9349.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HZrTqdZtLbWzW1VXHbrAe28K9Kh6k4g7DJejWnPG6T2G/0/323830343a363132383a3161303a3a2f34342d3434203d3e20323639323137.roa
Signing time:             Wed 15 Jan 2025 14:53:51 +0000
ROA not before:           Wed 15 Jan 2025 14:48:51 +0000
ROA not after:            Wed 14 Jan 2026 14:53:51 +0000
asID:                     269217
IP address blocks:        2804:6128:1a0::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:dc:fc:5b:9e:c2:d3:3c:77:37:20:ba:34:80:57:4c:4f:11:de:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2E5547B57F19FE92C11601EAF8DE7B9BC4A9349
        Validity
            Not Before: Jan 15 14:48:51 2025 GMT
            Not After : Jan 14 14:53:51 2026 GMT
        Subject: CN=9666E04703671652B857528B02682AAB236E10F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:02:96:ba:72:c5:15:2c:76:4c:72:30:bf:4d:
                    c9:89:3e:4b:cf:05:26:c6:53:bf:58:5e:22:79:c5:
                    f4:cf:ec:1a:40:1e:ea:7c:47:cb:0a:02:ae:80:66:
                    85:c6:de:05:c6:fb:46:47:61:a7:11:17:79:14:94:
                    68:bd:84:07:42:cd:1f:2c:56:7f:0c:7b:62:05:97:
                    46:5a:09:9f:6c:94:57:cb:3a:f6:8f:ce:e9:e0:60:
                    bf:ab:b9:70:54:89:da:51:39:41:c4:b2:f9:8f:20:
                    fc:25:d7:06:e6:cd:b0:8a:4a:42:32:30:cd:86:c1:
                    49:83:5f:57:99:cf:3c:42:ce:5f:ab:a0:17:32:c1:
                    23:ef:79:42:21:7d:75:fb:57:ec:68:72:a5:b0:b9:
                    9a:b0:a7:71:b1:99:35:3f:1b:74:d4:28:b2:ec:35:
                    94:e0:da:58:f8:a3:a8:92:c7:3c:c4:29:09:e7:9e:
                    fb:7d:e3:28:88:d3:f4:f0:fb:da:09:2a:3b:35:e0:
                    d1:22:60:30:d1:1d:68:a2:10:a4:41:58:2c:69:a8:
                    94:87:fa:88:0a:48:4a:3e:bb:a5:e4:19:1f:83:26:
                    f9:ad:f0:b3:f5:7a:25:59:2a:9d:ad:f6:1c:c8:3a:
                    12:e0:70:40:99:a3:cd:7a:64:87:33:1c:4a:b7:58:
                    54:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:66:E0:47:03:67:16:52:B8:57:52:8B:02:68:2A:AB:23:6E:10:F1
            X509v3 Authority Key Identifier:
                keyid:C2:E5:54:7B:57:F1:9F:E9:2C:11:60:1E:AF:8D:E7:B9:BC:4A:93:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HZrTqdZtLbWzW1VXHbrAe28K9Kh6k4g7DJejWnPG6T2G/0/C2E5547B57F19FE92C11601EAF8DE7B9BC4A9349.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2E5547B57F19FE92C11601EAF8DE7B9BC4A9349.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HZrTqdZtLbWzW1VXHbrAe28K9Kh6k4g7DJejWnPG6T2G/0/323830343a363132383a3161303a3a2f34342d3434203d3e20323639323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6128:1a0::/44

    Signature Algorithm: sha256WithRSAEncryption
         46:12:34:45:ee:78:cf:25:ec:1c:6f:ae:2e:e3:66:03:39:7c:
         c5:53:07:2e:7f:64:20:73:c8:b1:57:7d:9d:43:3a:e9:55:e4:
         bd:6f:6a:42:03:de:38:98:9d:c5:79:7a:e7:af:d6:32:f9:44:
         21:37:43:aa:5e:24:bb:42:10:60:fd:4e:b6:64:71:12:bd:60:
         81:f7:05:1a:a8:8c:b2:ff:ab:45:5b:a5:a3:35:ec:f0:3e:be:
         17:7f:ed:59:6c:2d:f0:ac:6d:98:f9:09:e9:cd:d4:7c:78:3f:
         45:bd:de:fb:92:94:aa:71:57:e3:39:d7:7f:02:3d:49:87:84:
         11:63:7d:e4:55:a5:0a:75:97:41:d0:0f:53:38:5f:4f:26:02:
         78:0c:71:31:b1:73:84:61:cc:a6:52:83:5d:4f:c8:42:65:26:
         e9:f5:84:58:b1:b5:0d:87:bd:03:fe:05:53:77:dd:8c:9e:05:
         ab:26:f2:12:98:45:b8:cd:42:3f:18:53:47:70:f2:05:88:a6:
         2e:b4:4b:a4:dc:a3:3b:1e:44:c8:9b:45:7c:ce:dd:0c:14:c3:
         a2:30:99:bb:bf:3d:56:f2:6b:7f:5f:24:4d:4f:af:5c:db:af:
         e2:62:dd:d6:9d:da:28:db:03:9d:57:00:71:b1:58:67:a8:f9:
         60:e4:1d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 21:26:48 2025 by rpki-client