Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HZrTqdZtLbWzW1VXHbrAe28K9Kh6k4g7DJejWnPG6T2G/0/323830343a363132383a38303a3a2f34342d3434203d3e20323639323137.roa
File:                     323830343a363132383a38303a3a2f34342d3434203d3e20323639323137.roa (raw, json)
Hash identifier:          eM+HBnibX+psBMWLFpyBKzOkyo1PB1s5KuvfVw0OP/w=
Subject key identifier:   19:3A:03:2F:AD:C6:E8:AF:9E:5A:77:7D:2A:BB:EA:8B:0B:A4:3E:BE
Certificate issuer:       /CN=C2E5547B57F19FE92C11601EAF8DE7B9BC4A9349
Certificate serial:       617D2F03EB727D6EBDAB4C0B7E556A4205C0148F
Authority key identifier: C2:E5:54:7B:57:F1:9F:E9:2C:11:60:1E:AF:8D:E7:B9:BC:4A:93:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2E5547B57F19FE92C11601EAF8DE7B9BC4A9349.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HZrTqdZtLbWzW1VXHbrAe28K9Kh6k4g7DJejWnPG6T2G/0/323830343a363132383a38303a3a2f34342d3434203d3e20323639323137.roa
Signing time:             Wed 15 Jan 2025 14:53:52 +0000
ROA not before:           Wed 15 Jan 2025 14:48:52 +0000
ROA not after:            Wed 14 Jan 2026 14:53:52 +0000
asID:                     269217
IP address blocks:        2804:6128:80::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:7d:2f:03:eb:72:7d:6e:bd:ab:4c:0b:7e:55:6a:42:05:c0:14:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2E5547B57F19FE92C11601EAF8DE7B9BC4A9349
        Validity
            Not Before: Jan 15 14:48:52 2025 GMT
            Not After : Jan 14 14:53:52 2026 GMT
        Subject: CN=193A032FADC6E8AF9E5A777D2ABBEA8B0BA43EBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:eb:0d:73:75:48:53:14:32:54:5a:a0:b9:65:
                    f8:a9:50:2d:19:bb:0c:1c:25:38:ba:ab:99:a1:0f:
                    9c:94:94:41:10:07:96:5b:fa:99:c2:c4:a5:06:96:
                    08:4c:6b:d4:95:06:9a:ec:1c:1b:7b:7e:0b:9a:b3:
                    6a:e4:11:c0:e0:a7:38:45:59:f0:14:4c:be:e8:37:
                    0e:7a:f6:36:90:b3:79:73:a2:64:42:b5:b4:2d:2e:
                    8b:55:85:a5:05:07:da:48:3f:f3:9e:a9:68:99:04:
                    8c:06:0e:ab:05:fd:81:0a:18:f4:3f:95:86:31:98:
                    2f:4d:ad:13:3b:c4:4f:9c:31:5c:6e:0d:7c:f8:2c:
                    b3:34:b0:fe:6c:83:ac:c4:64:ef:27:9a:55:7f:20:
                    4e:6d:43:72:16:3f:17:ad:38:ac:c5:4b:e4:4f:4e:
                    4b:61:80:81:5d:c7:ee:26:dd:3e:ef:e8:06:55:9a:
                    bd:61:5d:8f:7e:71:09:28:12:95:d8:fd:fc:42:70:
                    2a:2d:33:86:f7:ca:bc:c7:90:8f:24:06:d4:ed:fc:
                    ff:75:ed:72:48:b8:b6:1e:1d:3e:01:ea:d8:31:51:
                    2f:e3:fe:a8:9f:48:7f:50:ef:8a:7e:63:d3:01:f0:
                    38:12:3e:f7:7c:59:43:be:2a:d7:16:c3:85:fe:28:
                    fa:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:3A:03:2F:AD:C6:E8:AF:9E:5A:77:7D:2A:BB:EA:8B:0B:A4:3E:BE
            X509v3 Authority Key Identifier:
                keyid:C2:E5:54:7B:57:F1:9F:E9:2C:11:60:1E:AF:8D:E7:B9:BC:4A:93:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HZrTqdZtLbWzW1VXHbrAe28K9Kh6k4g7DJejWnPG6T2G/0/C2E5547B57F19FE92C11601EAF8DE7B9BC4A9349.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2E5547B57F19FE92C11601EAF8DE7B9BC4A9349.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HZrTqdZtLbWzW1VXHbrAe28K9Kh6k4g7DJejWnPG6T2G/0/323830343a363132383a38303a3a2f34342d3434203d3e20323639323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6128:80::/44

    Signature Algorithm: sha256WithRSAEncryption
         5a:42:88:5b:3c:97:cf:af:a3:1a:ad:1f:79:f4:a1:f8:23:31:
         c0:e1:b5:f5:a7:bf:03:a1:1f:c7:2b:50:00:2a:30:bc:9a:71:
         f0:02:3c:d0:ff:e5:09:4f:18:71:2b:b6:bf:9c:fd:e4:75:6d:
         2e:f2:f1:20:b9:66:55:35:d0:4f:62:83:c1:02:50:00:19:ae:
         b2:36:3f:e9:aa:b6:ce:e7:ab:13:f5:92:f8:36:5c:65:44:dd:
         ca:41:ce:f5:96:67:a9:b6:fd:2e:cb:c6:63:0d:f0:60:5b:42:
         df:6e:af:9c:60:a3:ca:94:cd:11:7c:28:c9:53:e8:a6:9b:68:
         82:f8:29:c3:ec:34:d2:4d:f6:89:32:ff:02:95:58:b1:e6:21:
         ec:a1:89:86:40:da:da:71:07:ca:bf:43:4a:5d:08:ec:f5:f1:
         48:5c:42:81:2c:d5:24:90:72:33:70:01:0d:98:b8:4f:42:5a:
         bd:70:06:68:7e:1b:94:38:b8:d5:7a:60:3b:46:47:1b:dc:55:
         07:e4:7a:bc:d9:4f:fd:44:41:c9:d5:a2:b7:c1:17:cf:36:74:
         79:4a:cc:e9:a2:86:3c:59:9c:3c:39:f8:3b:89:4b:96:8c:a5:
         6c:ed:82:fd:84:29:bb:77:dd:60:90:73:9d:54:a5:d4:63:22:
         3e:51:c7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 03:05:54 2025 by rpki-client