Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/323830343a6563383a383030303a3a2f33362d3336203d3e20323632353332.roa
File:                     323830343a6563383a383030303a3a2f33362d3336203d3e20323632353332.roa (raw, json)
Hash identifier:          F3ZcQRAUzsDTbCz00oHqbCl2Jg+9B7ywACrrE1QYFFk=
Subject key identifier:   70:E6:F8:A8:CE:57:13:31:AA:2F:95:8D:E4:CC:91:BF:0D:67:67:79
Certificate issuer:       /CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
Certificate serial:       56D3A5E6942BC1120C674DBEAEE428543B1F6483
Authority key identifier: C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/323830343a6563383a383030303a3a2f33362d3336203d3e20323632353332.roa
Signing time:             Wed 28 Feb 2024 14:11:46 +0000
ROA not before:           Wed 28 Feb 2024 14:06:46 +0000
ROA not after:            Wed 26 Feb 2025 14:11:46 +0000
asID:                     262532
IP address blocks:        2804:ec8:8000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:d3:a5:e6:94:2b:c1:12:0c:67:4d:be:ae:e4:28:54:3b:1f:64:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
        Validity
            Not Before: Feb 28 14:06:46 2024 GMT
            Not After : Feb 26 14:11:46 2025 GMT
        Subject: CN=70E6F8A8CE571331AA2F958DE4CC91BF0D676779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:86:2a:32:b6:88:b7:0f:8c:34:cb:1f:a7:56:
                    38:88:c5:45:6d:23:1c:8c:a4:25:ab:eb:c8:4d:02:
                    f9:99:38:cf:f2:b6:c2:50:b2:8a:ae:1b:1f:2a:1a:
                    11:4a:4d:16:31:38:8a:77:63:3f:95:ff:7c:38:78:
                    df:69:68:37:4b:a1:d8:eb:9f:1b:0a:93:20:b1:fe:
                    4a:8a:84:8a:d2:8d:ba:9f:94:6b:33:21:8a:b2:4b:
                    8a:67:93:d1:d0:2a:15:be:92:86:bd:16:8f:68:30:
                    08:74:68:0d:9f:03:79:49:26:2f:1e:1a:91:bf:c2:
                    a9:3e:4d:19:de:71:fb:a8:83:4a:d8:d4:13:33:e8:
                    03:37:5e:ff:44:25:c0:e1:3c:ed:02:a3:46:a5:d3:
                    aa:a3:a4:38:c9:0e:7c:1f:26:a0:64:b1:76:06:20:
                    0d:a4:49:9e:f0:0b:42:b0:54:8a:34:50:f0:c7:09:
                    d8:74:dd:b3:45:fe:42:13:99:a5:c1:36:a6:be:3d:
                    37:02:53:96:4e:49:00:73:70:bc:8e:a7:a6:f2:d3:
                    d8:50:62:47:8c:f9:d4:40:7b:1f:d5:bc:93:da:6f:
                    f7:73:ee:19:2b:87:8e:69:16:7a:78:cf:7b:33:dc:
                    ad:25:53:2e:fa:83:2c:82:76:14:8d:4e:d2:75:01:
                    34:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:E6:F8:A8:CE:57:13:31:AA:2F:95:8D:E4:CC:91:BF:0D:67:67:79
            X509v3 Authority Key Identifier:
                keyid:C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/323830343a6563383a383030303a3a2f33362d3336203d3e20323632353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ec8:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         11:ce:73:a2:26:10:58:6f:b7:94:de:22:36:cb:79:95:c7:f0:
         8e:03:39:5f:18:5d:ee:a3:71:1f:42:60:c2:d4:16:ed:8e:f7:
         88:03:2e:9a:af:fe:36:b6:21:f0:70:54:3e:3a:1c:47:6b:6b:
         13:ff:b9:c8:b1:2f:eb:d1:b6:92:2d:5b:f0:dd:c8:60:da:b9:
         37:6e:6f:e6:87:b9:9d:ad:3c:da:c1:15:1e:79:39:9a:b9:e0:
         39:86:70:ae:4b:32:a6:29:d0:29:8b:90:19:ef:3d:a5:a2:2e:
         4c:9f:15:23:f8:d8:3b:9f:a6:a6:bd:df:b3:63:9d:2b:a1:1a:
         67:4a:b2:7e:b7:a6:e1:59:49:0a:e7:eb:7c:b7:73:91:74:45:
         f9:e0:c3:b6:d2:cf:d8:cf:91:f8:63:c1:e1:7a:3e:17:2b:94:
         2b:45:13:cf:15:a3:ca:8f:03:cb:6c:a6:10:82:02:ce:1d:3e:
         48:0e:e3:40:dd:15:87:93:33:6e:92:04:56:9f:07:39:a9:d6:
         ed:0d:e0:d5:f1:11:1f:3a:17:15:fd:4b:cd:b6:b5:61:a7:ae:
         9e:23:31:66:cc:20:d3:c6:52:04:85:28:b3:b3:b4:8d:f4:5c:
         8d:e7:3b:2f:90:90:32:c7:46:b0:01:64:35:40:65:e4:db:c3:
         78:fb:ab:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:30:24 2025 by rpki-client