Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/323830343a6563383a3a2f33322d3332203d3e20323632353332.roa
File:                     323830343a6563383a3a2f33322d3332203d3e20323632353332.roa (raw, json)
Hash identifier:          0vji+vSgJnhQJFFHMsAz4BGMiYnqcTovTQLpPvGX8u8=
Subject key identifier:   46:73:48:9F:73:81:41:83:04:84:8E:64:62:77:0F:8C:5E:28:F1:7E
Certificate issuer:       /CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
Certificate serial:       6273603FDF23BD8462F77F1DCA1B83A823376B12
Authority key identifier: C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/323830343a6563383a3a2f33322d3332203d3e20323632353332.roa
Signing time:             Wed 28 Feb 2024 14:11:10 +0000
ROA not before:           Wed 28 Feb 2024 14:06:10 +0000
ROA not after:            Wed 26 Feb 2025 14:11:10 +0000
asID:                     262532
IP address blocks:        2804:ec8::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:73:60:3f:df:23:bd:84:62:f7:7f:1d:ca:1b:83:a8:23:37:6b:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
        Validity
            Not Before: Feb 28 14:06:10 2024 GMT
            Not After : Feb 26 14:11:10 2025 GMT
        Subject: CN=4673489F7381418304848E6462770F8C5E28F17E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:81:88:86:7a:40:a9:13:6f:88:01:be:aa:eb:
                    4b:07:d8:8b:85:e1:de:97:83:8d:28:34:20:05:db:
                    f5:7f:9b:1e:07:96:9c:24:e3:27:3f:7f:7d:f6:98:
                    0f:fd:91:0a:7f:58:72:1e:10:b7:51:fe:38:99:18:
                    27:3f:ba:3e:de:27:30:1b:cd:d0:9f:3b:0f:d7:a8:
                    f4:b4:6e:cb:19:26:af:de:2e:4e:fc:b9:8b:55:da:
                    8e:85:09:c4:a2:dc:59:bc:32:5e:ff:31:3b:e9:8b:
                    b8:d7:05:72:01:25:c4:a9:ab:31:81:12:fc:ab:33:
                    ac:4b:c2:2e:c2:f3:29:0a:f1:e1:74:7c:af:8a:47:
                    a4:91:32:89:9c:7b:ce:e4:37:9b:1b:bd:b0:48:ce:
                    40:b3:04:fd:d1:38:44:b9:21:cb:dd:5c:c2:74:37:
                    1e:c3:2b:5d:53:77:f6:d2:17:2f:95:c1:19:58:ad:
                    48:2d:25:33:dd:1e:20:3d:9b:28:86:a5:60:29:14:
                    a1:f0:b8:c8:f4:e1:dd:32:6a:78:2a:0a:e9:d7:79:
                    3b:e0:c4:fd:88:d6:b6:f9:60:7a:95:4f:d5:56:c9:
                    e4:e3:3d:c2:08:73:cb:a6:55:21:41:f1:68:51:90:
                    ba:10:6f:36:87:8d:83:c5:b6:eb:1c:a8:0e:c6:a5:
                    6e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:73:48:9F:73:81:41:83:04:84:8E:64:62:77:0F:8C:5E:28:F1:7E
            X509v3 Authority Key Identifier:
                keyid:C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/323830343a6563383a3a2f33322d3332203d3e20323632353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ec8::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:2e:75:af:ca:e3:ab:b1:19:6d:9e:26:28:75:44:32:8c:44:
         ea:b9:93:52:0a:5f:77:98:7c:fe:58:06:e1:f9:52:ec:69:7a:
         e1:72:0e:a6:f8:7d:67:54:3c:e4:bf:d6:4f:4c:41:ca:d7:8f:
         d1:b4:bf:3d:6d:f1:1e:1e:92:a0:9d:49:63:0f:c8:fd:f1:3d:
         a4:66:c6:9c:a4:22:bf:88:ac:5a:90:2e:c9:ac:23:74:ec:ae:
         1f:10:7c:71:fa:1e:fa:2d:27:a2:93:fd:1c:81:17:b2:42:a1:
         e5:ee:12:7a:d4:4f:34:94:04:1b:96:7b:51:94:42:dd:48:60:
         9d:e1:36:9d:ae:a4:fb:b5:5c:5e:92:8f:ab:7d:32:41:77:c7:
         7e:75:ca:ed:f6:2f:2e:f5:71:6d:cc:8d:b4:c2:69:25:8a:47:
         9a:d5:e6:3c:12:7a:e3:76:94:3f:4e:26:95:de:b9:e6:30:c9:
         31:f3:6b:83:1e:1d:4f:17:61:3f:5a:7b:c8:21:c4:34:20:da:
         1f:31:80:63:44:44:c6:c0:3c:11:5d:43:f5:0b:9f:b9:aa:99:
         bd:74:29:af:c5:76:bf:80:f4:14:57:71:81:f4:dc:d3:aa:a8:
         32:e2:09:b8:b6:a2:47:5f:db:c9:21:bf:55:16:6c:85:8c:46:
         cb:b4:5d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:47 2025 by rpki-client