Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/323830343a6563383a313030303a3a2f33362d3336203d3e20323632353332.roa
File:                     323830343a6563383a313030303a3a2f33362d3336203d3e20323632353332.roa (raw, json)
Hash identifier:          n3Z65Ogxnq3rlUuo/lSJFoE8nwAQCKn/G9m2lFBCTuI=
Subject key identifier:   0D:D7:75:45:2B:EF:27:92:52:A6:65:DC:BF:A7:97:96:00:27:47:62
Certificate issuer:       /CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
Certificate serial:       7F99A6CBAF11DACCA53EDFCD3DC7122E35F74AD4
Authority key identifier: C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/323830343a6563383a313030303a3a2f33362d3336203d3e20323632353332.roa
Signing time:             Wed 28 Feb 2024 14:11:19 +0000
ROA not before:           Wed 28 Feb 2024 14:06:19 +0000
ROA not after:            Wed 26 Feb 2025 14:11:19 +0000
asID:                     262532
IP address blocks:        2804:ec8:1000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:99:a6:cb:af:11:da:cc:a5:3e:df:cd:3d:c7:12:2e:35:f7:4a:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
        Validity
            Not Before: Feb 28 14:06:19 2024 GMT
            Not After : Feb 26 14:11:19 2025 GMT
        Subject: CN=0DD775452BEF279252A665DCBFA7979600274762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8e:8a:1d:b8:43:6b:cc:9e:af:8f:76:4d:05:
                    a7:13:56:2d:ed:9d:6b:2b:36:2a:e8:91:13:07:a8:
                    78:fd:34:59:24:b2:5c:0a:96:d3:bf:f9:d7:0d:71:
                    54:34:81:15:3b:dd:91:e3:ab:ed:47:37:45:15:38:
                    25:0f:a3:ec:f0:74:6b:09:62:bf:94:c5:a3:13:21:
                    8b:96:e7:a0:bc:d1:f0:24:35:66:86:0e:bc:74:94:
                    db:c1:ba:2f:63:4d:73:15:21:b1:35:50:c6:50:77:
                    42:c7:50:01:24:7e:61:b4:f6:e3:66:d0:0e:35:dd:
                    bd:6c:57:37:c9:20:6b:ea:34:4f:62:17:b1:8b:bc:
                    ac:c9:18:4f:32:12:0b:ac:fe:d2:4d:be:f0:7a:da:
                    60:52:1d:60:29:a5:95:3a:4f:89:b9:5b:6c:63:76:
                    eb:5b:bd:9b:bd:ac:1e:5b:64:4b:a7:5a:cf:cc:23:
                    d3:0b:d6:24:5e:82:e0:b4:3a:55:f6:43:bd:d9:b4:
                    39:2c:2f:5d:20:4e:49:94:8a:66:d8:79:5d:ea:eb:
                    54:f6:68:6c:82:d1:c5:76:26:00:5d:d8:17:a7:4a:
                    e2:97:4f:dd:31:4a:f2:72:81:40:f2:74:9a:77:2b:
                    32:97:ee:c0:14:25:22:74:15:17:ee:d1:b8:81:78:
                    2f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:D7:75:45:2B:EF:27:92:52:A6:65:DC:BF:A7:97:96:00:27:47:62
            X509v3 Authority Key Identifier:
                keyid:C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/323830343a6563383a313030303a3a2f33362d3336203d3e20323632353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ec8:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         2f:1f:9e:98:ad:9e:a3:ca:f8:cb:24:8c:fd:21:83:1d:17:95:
         53:bd:70:59:b0:21:85:82:15:c1:6d:6b:23:e0:42:7f:f1:34:
         f2:4b:4e:96:99:af:2a:9f:aa:08:38:e3:fd:28:ff:cd:23:b8:
         e6:fc:c4:02:19:3d:e7:d7:db:1e:0e:9e:02:81:92:c1:92:3a:
         cb:07:21:51:67:9e:19:52:09:e7:2f:01:9c:fb:be:cc:23:19:
         5c:97:29:b9:f6:e9:3b:23:06:68:6b:c1:27:f5:7f:6b:c0:be:
         3d:e5:88:95:1a:82:1d:a8:2f:45:03:48:69:8b:fa:0a:a1:23:
         cb:f0:f4:f3:05:b1:23:ca:51:22:47:2a:b0:6e:33:c7:02:cc:
         88:0c:49:e9:56:67:fe:81:86:44:1d:d9:f5:e7:a8:7d:c4:17:
         be:7b:3d:5d:52:19:6f:e8:7b:ca:82:fc:eb:6b:dc:a3:c3:aa:
         7e:27:9c:a8:d9:27:1d:2b:91:83:28:b8:7f:0f:f4:71:6b:ef:
         cd:71:3f:49:2a:00:ae:48:f5:d6:e3:d0:eb:9d:c7:e1:4a:13:
         2a:ce:10:8b:f1:ea:89:c7:39:3e:26:f2:64:30:47:1b:8e:6a:
         9e:8c:4d:51:a1:bf:3b:b9:5d:98:22:cc:5e:54:b5:96:fa:b5:
         3b:ed:54:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:08:44 2025 by rpki-client