Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HZrTqdZtLbWzW1VXHbrAe28K9Kh6k4g7DJejWnPG6T2G/0/323830343a363132383a39303a3a2f34342d3434203d3e20323639323137.roa
File:                     323830343a363132383a39303a3a2f34342d3434203d3e20323639323137.roa (raw, json)
Hash identifier:          4qYwPi3EOJj42t32QxMVKP4NJyBzl2Rb+5/3xf+yTjY=
Subject key identifier:   26:38:13:28:74:98:8E:0D:BE:C4:0C:DB:82:A5:FB:0C:15:0E:D2:FC
Certificate issuer:       /CN=C2E5547B57F19FE92C11601EAF8DE7B9BC4A9349
Certificate serial:       413025A85A2D2CC8DA01206A8DF401E14B9B5385
Authority key identifier: C2:E5:54:7B:57:F1:9F:E9:2C:11:60:1E:AF:8D:E7:B9:BC:4A:93:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2E5547B57F19FE92C11601EAF8DE7B9BC4A9349.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HZrTqdZtLbWzW1VXHbrAe28K9Kh6k4g7DJejWnPG6T2G/0/323830343a363132383a39303a3a2f34342d3434203d3e20323639323137.roa
Signing time:             Wed 15 Jan 2025 14:53:54 +0000
ROA not before:           Wed 15 Jan 2025 14:48:54 +0000
ROA not after:            Wed 14 Jan 2026 14:53:54 +0000
asID:                     269217
IP address blocks:        2804:6128:90::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:30:25:a8:5a:2d:2c:c8:da:01:20:6a:8d:f4:01:e1:4b:9b:53:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2E5547B57F19FE92C11601EAF8DE7B9BC4A9349
        Validity
            Not Before: Jan 15 14:48:54 2025 GMT
            Not After : Jan 14 14:53:54 2026 GMT
        Subject: CN=2638132874988E0DBEC40CDB82A5FB0C150ED2FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0c:e1:a2:2f:aa:f4:b9:50:95:19:dd:3d:9b:
                    cb:c9:3c:6a:33:e8:2c:ba:aa:3a:29:eb:b9:1a:5b:
                    54:92:4b:93:b7:b8:71:4d:df:1e:d1:fb:75:44:fe:
                    c6:93:61:e1:79:42:94:f6:c9:60:29:18:7a:fb:08:
                    48:de:4f:bb:07:0a:df:e1:3b:31:c9:36:f6:70:cf:
                    9f:16:63:a3:41:43:3b:eb:be:5e:51:fc:e7:b0:dd:
                    5e:44:c9:16:10:13:37:74:18:ad:c8:bc:b0:54:73:
                    f1:f8:a2:6c:ca:7e:35:99:cd:19:d0:e0:36:ed:b5:
                    09:41:69:7d:a7:d3:57:0b:b2:f4:8d:65:13:4b:94:
                    05:5b:b8:fb:b3:dd:28:bb:fa:16:1f:d9:07:9d:a2:
                    4d:fa:fb:cc:a3:da:2e:35:2c:fc:a3:fc:ae:b5:68:
                    05:55:5c:5d:93:4f:fb:68:93:aa:c4:cb:2c:a3:09:
                    93:37:f9:7f:91:66:49:94:a1:0c:ed:1d:7c:38:de:
                    09:44:9e:a9:05:7f:f3:b5:74:12:d5:62:87:fb:9a:
                    8c:50:74:64:d9:86:12:85:24:28:94:af:3f:72:c3:
                    92:a4:b0:d7:37:92:77:ee:25:a0:83:c7:92:7f:df:
                    00:83:d8:5c:0b:99:4b:b5:75:bb:8b:0b:a0:be:b8:
                    04:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:38:13:28:74:98:8E:0D:BE:C4:0C:DB:82:A5:FB:0C:15:0E:D2:FC
            X509v3 Authority Key Identifier:
                keyid:C2:E5:54:7B:57:F1:9F:E9:2C:11:60:1E:AF:8D:E7:B9:BC:4A:93:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HZrTqdZtLbWzW1VXHbrAe28K9Kh6k4g7DJejWnPG6T2G/0/C2E5547B57F19FE92C11601EAF8DE7B9BC4A9349.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2E5547B57F19FE92C11601EAF8DE7B9BC4A9349.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HZrTqdZtLbWzW1VXHbrAe28K9Kh6k4g7DJejWnPG6T2G/0/323830343a363132383a39303a3a2f34342d3434203d3e20323639323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6128:90::/44

    Signature Algorithm: sha256WithRSAEncryption
         4a:8f:6e:0f:e9:42:af:0d:66:46:b2:5a:29:32:d1:c1:f9:4b:
         4b:de:82:bf:91:74:46:71:8a:d6:43:09:9e:0a:d5:35:c6:54:
         8c:a2:77:ba:f4:c5:86:a6:fc:c8:b3:85:74:9d:b7:39:0d:97:
         1c:7a:6c:95:d0:b5:f6:5e:43:b2:de:16:69:f8:6d:9b:fb:95:
         fc:8d:ed:b4:49:ac:33:af:07:79:0b:6b:76:e0:a4:56:e7:20:
         41:32:a6:81:68:2c:09:44:3e:53:99:f8:39:c2:cc:81:20:ae:
         e2:09:35:85:a1:3f:95:c5:c2:73:67:eb:fd:9c:5e:48:23:62:
         76:e6:24:93:bc:96:f3:d8:8e:bb:13:34:d1:ba:f5:4b:fd:f5:
         2f:56:62:4e:85:fa:81:20:e8:f7:18:6e:de:3a:87:b0:c5:00:
         75:c8:32:03:30:ae:f0:6c:8c:0b:bf:0a:90:0f:c9:05:8d:3d:
         4a:c1:a1:72:be:58:32:b7:56:6f:e7:58:0c:24:c6:d9:d2:2b:
         1c:bf:5d:64:57:b2:47:74:d5:85:35:37:ff:5f:e8:6c:fb:52:
         fc:d2:e0:bd:b0:a5:e2:19:c3:99:82:c5:80:85:b7:15:d8:61:
         99:33:01:09:01:4d:3c:28:04:d8:c0:b1:ab:09:d1:7d:87:77:
         93:3a:75:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 21:26:52 2025 by rpki-client