Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/323830343a6563383a383030303a3a2f33332d3333203d3e20323632353332.roa
File:                     323830343a6563383a383030303a3a2f33332d3333203d3e20323632353332.roa (raw, json)
Hash identifier:          2P+YaEMHKtVgm+Yl5OaXydFlhn/CetOcXEb3CTqOfh8=
Subject key identifier:   2C:7C:72:19:14:3A:E1:71:56:25:03:0F:4C:9A:7F:31:D6:FA:DC:26
Certificate issuer:       /CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
Certificate serial:       2A754009C0C1CDD71436C98109D4B9EA445CFD36
Authority key identifier: C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/323830343a6563383a383030303a3a2f33332d3333203d3e20323632353332.roa
Signing time:             Wed 28 Feb 2024 14:11:41 +0000
ROA not before:           Wed 28 Feb 2024 14:06:41 +0000
ROA not after:            Wed 26 Feb 2025 14:11:41 +0000
asID:                     262532
IP address blocks:        2804:ec8:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:75:40:09:c0:c1:cd:d7:14:36:c9:81:09:d4:b9:ea:44:5c:fd:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
        Validity
            Not Before: Feb 28 14:06:41 2024 GMT
            Not After : Feb 26 14:11:41 2025 GMT
        Subject: CN=2C7C7219143AE1715625030F4C9A7F31D6FADC26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c1:c9:be:9f:f4:c7:3b:9a:97:3a:d9:b4:d8:
                    73:6d:81:13:78:56:29:aa:a3:d8:6d:fc:a6:21:a0:
                    91:3a:df:ae:43:f8:24:07:f6:0d:2c:0d:fb:f5:3c:
                    a2:c1:0b:40:1d:d7:9f:53:1f:c5:b9:38:08:7f:4e:
                    05:fd:ab:07:7f:48:6f:5f:20:64:fc:bf:b7:d9:fe:
                    50:f4:c2:56:b4:0f:e9:dd:4c:74:51:20:42:6d:50:
                    4f:9d:c9:34:e3:cc:bd:88:29:5a:f2:74:5b:17:c9:
                    d9:56:39:6e:3b:52:43:dd:a5:f3:89:9a:8d:50:02:
                    15:74:77:cc:01:f5:1e:32:f9:30:6e:1c:d0:5f:43:
                    9e:32:84:65:0c:df:51:ce:b0:66:bc:59:e7:e3:77:
                    31:04:2d:c6:a5:13:31:d1:c3:af:81:6b:c6:3f:ab:
                    05:c1:7d:b0:06:8e:d6:56:1c:96:7d:0e:78:1d:b0:
                    90:fe:59:c1:ff:ec:2e:76:03:07:61:da:bf:68:31:
                    80:d7:f2:09:99:f7:15:40:1d:36:40:fb:7f:16:8b:
                    a7:22:71:74:31:ae:7a:49:d9:e7:9d:c8:12:c4:a8:
                    e4:0e:e9:e8:7b:c0:7d:ef:74:6c:d2:5e:59:a3:de:
                    b4:f3:2e:5a:ce:a4:73:8d:a1:c7:1f:c9:e6:c8:98:
                    69:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:7C:72:19:14:3A:E1:71:56:25:03:0F:4C:9A:7F:31:D6:FA:DC:26
            X509v3 Authority Key Identifier:
                keyid:C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/323830343a6563383a383030303a3a2f33332d3333203d3e20323632353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ec8:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         09:c5:68:97:99:b0:8f:e9:34:fd:59:f6:d6:d5:78:6f:d7:b9:
         ce:a6:b4:5e:8d:02:2d:40:de:c8:e6:50:cf:af:d1:8f:ff:a5:
         27:fc:a2:df:1a:ba:ca:14:8f:3c:0a:7e:be:97:4d:de:cf:c2:
         32:05:ed:c7:6b:fe:a3:c2:0a:e1:8f:bc:99:75:72:ef:54:9d:
         a2:12:80:bd:2a:1d:f6:69:9c:70:56:41:67:f2:1f:a0:c0:e5:
         b4:04:05:d4:0f:53:3a:76:bb:86:74:a7:67:95:b8:28:1d:92:
         c6:a8:52:76:9f:f5:03:1e:66:aa:c1:59:f0:c4:06:ad:9f:1b:
         a3:87:4b:59:2c:3c:d0:61:41:a0:15:12:7b:fd:2d:f2:83:22:
         fa:5c:e8:fe:5f:da:10:1e:3c:42:83:3f:17:d8:b6:23:1d:2f:
         f6:a3:89:1c:eb:d4:20:63:01:7e:20:0c:6f:70:62:3b:7c:d5:
         91:48:53:df:7b:a8:f2:5d:d5:e0:a9:3b:1d:8f:47:c0:c6:e3:
         12:5f:03:38:62:99:15:e7:72:56:f1:1a:2b:55:77:e3:5e:c6:
         bb:63:68:8f:0c:22:16:b1:7f:a8:43:c4:fc:3e:ed:6a:5e:83:
         c5:e7:b8:d9:da:68:ba:fa:90:2a:d9:49:2f:5d:90:13:92:5b:
         26:8d:75:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:35:01 2025 by rpki-client