Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/323830343a6563383a363030303a3a2f33352d3335203d3e20323632353332.roa
File:                     323830343a6563383a363030303a3a2f33352d3335203d3e20323632353332.roa (raw, json)
Hash identifier:          h59ap6ArvJqjwNuYHHu9icIjnGAGx9H3C7huaqooOJM=
Subject key identifier:   74:BF:6E:2C:3A:D8:85:E8:9E:1F:5E:50:C9:61:26:6E:DE:59:3E:32
Certificate issuer:       /CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
Certificate serial:       7BAA7A5B2B62AB5D83BBF1070C96F992978D5A87
Authority key identifier: C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/323830343a6563383a363030303a3a2f33352d3335203d3e20323632353332.roa
Signing time:             Wed 28 Feb 2024 14:11:38 +0000
ROA not before:           Wed 28 Feb 2024 14:06:38 +0000
ROA not after:            Wed 26 Feb 2025 14:11:38 +0000
asID:                     262532
IP address blocks:        2804:ec8:6000::/35 maxlen: 35
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:aa:7a:5b:2b:62:ab:5d:83:bb:f1:07:0c:96:f9:92:97:8d:5a:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
        Validity
            Not Before: Feb 28 14:06:38 2024 GMT
            Not After : Feb 26 14:11:38 2025 GMT
        Subject: CN=74BF6E2C3AD885E89E1F5E50C961266EDE593E32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:db:78:ff:cb:f9:ba:47:69:84:eb:d5:f3:95:
                    67:ac:be:39:f6:e9:e0:6a:76:19:18:1b:61:21:70:
                    c9:c9:a5:3b:86:44:e6:f0:6b:0c:cf:65:53:f8:d0:
                    49:fa:3c:7e:a3:ee:c6:3d:69:85:3b:c2:ec:f8:17:
                    89:8e:d3:05:67:b1:56:76:40:e0:19:75:0e:23:c9:
                    d7:f5:81:8b:6b:25:f0:40:62:9f:b9:e5:53:e3:b0:
                    80:c7:e7:05:88:7d:dc:7f:2a:e6:58:e6:79:d3:8b:
                    7d:d6:77:79:e8:9e:6e:60:5a:01:15:80:1e:1f:2a:
                    78:47:f9:95:b1:cb:24:8c:3a:b9:51:9c:c1:1f:58:
                    5c:9b:ce:2c:80:29:da:da:7a:52:74:f7:2c:91:98:
                    02:b0:73:4d:c1:4f:87:43:e9:4c:a8:e4:fc:b9:73:
                    33:e6:ac:e8:ff:c0:c8:0b:ac:2d:fa:d5:37:5d:5a:
                    1a:22:16:2e:43:6f:e7:fc:52:97:87:ea:e2:bf:a1:
                    c8:ea:68:fd:8f:e0:80:c0:be:26:8a:99:c7:7f:07:
                    50:3e:15:bc:fb:11:a2:c4:14:e3:79:c3:9c:96:6d:
                    14:2a:92:3b:37:07:ac:46:5a:87:38:7e:7c:db:d0:
                    6d:75:8a:e5:ff:08:82:f3:79:89:62:2c:ba:0e:30:
                    19:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:BF:6E:2C:3A:D8:85:E8:9E:1F:5E:50:C9:61:26:6E:DE:59:3E:32
            X509v3 Authority Key Identifier:
                keyid:C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/323830343a6563383a363030303a3a2f33352d3335203d3e20323632353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ec8:6000::/35

    Signature Algorithm: sha256WithRSAEncryption
         8a:57:99:68:a9:bb:4e:9b:2c:cb:7d:bd:cf:58:d6:55:a8:73:
         5e:6d:fc:b3:b4:52:3a:d1:fd:74:b8:85:c1:ab:bf:d5:5f:f5:
         b0:8f:00:a8:35:61:1a:ef:4a:8a:40:c4:30:0c:58:c7:38:e1:
         e0:6c:76:19:59:28:c0:65:4c:2c:82:39:80:1a:73:42:15:04:
         3f:c5:ad:b9:08:cb:04:5c:b8:68:d5:57:78:78:d9:03:83:9b:
         02:77:2d:0b:65:f8:cb:81:01:e5:19:cc:b6:92:19:b4:d9:b2:
         dc:12:b5:41:59:1d:6f:2b:af:2d:79:8d:9f:f7:00:c6:8e:cb:
         81:c1:35:69:09:ba:da:ed:17:f0:5c:dd:d2:2a:45:98:60:8e:
         f9:e4:73:e8:60:c2:2c:e6:b4:65:47:08:b8:16:28:0b:d5:d9:
         cf:09:c8:fc:dc:51:88:2d:29:4c:02:bd:d1:04:9c:0e:aa:2b:
         8e:7e:c0:e9:d1:ea:8e:b4:03:f8:0f:2f:25:10:99:11:16:35:
         0b:55:be:37:73:1c:e3:64:02:3f:e5:10:24:00:41:e1:51:bc:
         93:1c:1d:5b:45:dd:29:f5:f4:4d:53:eb:0c:b3:5b:80:9b:e5:
         e2:99:d8:28:3a:27:c2:63:ec:98:cc:8e:a2:42:9f:73:37:e4:
         99:6a:4d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:26:09 2025 by rpki-client