Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/323830343a6563383a3a2f33342d3334203d3e20323632353332.roa
File:                     323830343a6563383a3a2f33342d3334203d3e20323632353332.roa (raw, json)
Hash identifier:          TjEVJUW6+THWOcURLSJUvuirq+5XoMHHGGO0O4mFOds=
Subject key identifier:   E8:4F:C1:BE:B6:B7:89:8F:80:6E:55:F2:3C:F5:9A:68:F9:83:C9:E9
Certificate issuer:       /CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
Certificate serial:       02F7CCF39E1399929F9CD1281989B865C7AB6223
Authority key identifier: C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/323830343a6563383a3a2f33342d3334203d3e20323632353332.roa
Signing time:             Wed 28 Feb 2024 14:11:14 +0000
ROA not before:           Wed 28 Feb 2024 14:06:14 +0000
ROA not after:            Wed 26 Feb 2025 14:11:14 +0000
asID:                     262532
IP address blocks:        2804:ec8::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:f7:cc:f3:9e:13:99:92:9f:9c:d1:28:19:89:b8:65:c7:ab:62:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
        Validity
            Not Before: Feb 28 14:06:14 2024 GMT
            Not After : Feb 26 14:11:14 2025 GMT
        Subject: CN=E84FC1BEB6B7898F806E55F23CF59A68F983C9E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:69:37:69:9b:a2:df:c5:e6:e1:76:24:74:5d:
                    65:a6:ec:9a:b6:82:8c:48:38:c6:48:c1:28:10:7d:
                    de:2e:ac:bf:fe:45:57:f0:a6:0b:64:aa:55:57:e3:
                    b5:5f:7e:a9:84:44:75:ea:b0:25:9d:c3:bc:d8:fd:
                    2b:7d:5b:46:a5:6f:19:ce:47:83:99:89:3c:10:8e:
                    f5:e0:4d:96:44:b2:d2:36:42:08:06:81:e4:9a:50:
                    43:b8:d5:76:cf:11:fe:ef:87:ef:c3:c4:71:ea:61:
                    ba:99:3a:ff:30:a1:98:a6:aa:08:70:ad:7c:02:d7:
                    b2:57:83:b3:3b:b1:54:6c:89:06:69:cb:2e:13:8b:
                    93:de:e4:6f:52:13:9b:83:a1:9c:95:de:6a:ee:4d:
                    ab:5e:e4:0a:5a:78:02:77:8f:14:2a:89:9d:41:2c:
                    5b:0d:ce:16:bd:c9:d0:4c:01:f1:54:bb:cf:62:5d:
                    93:d2:dd:11:49:78:95:07:20:4a:e8:70:58:8e:07:
                    de:68:ac:40:7a:62:c0:82:c9:db:fd:83:7f:63:3e:
                    e3:48:96:1a:41:a4:2d:41:e6:1d:b8:4b:e6:13:91:
                    0b:ca:7d:35:c4:20:dc:f9:dd:04:08:7a:a7:ef:f2:
                    08:65:f4:6a:70:c4:89:99:0a:c2:e0:22:01:96:f1:
                    05:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:4F:C1:BE:B6:B7:89:8F:80:6E:55:F2:3C:F5:9A:68:F9:83:C9:E9
            X509v3 Authority Key Identifier:
                keyid:C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/323830343a6563383a3a2f33342d3334203d3e20323632353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ec8::/34

    Signature Algorithm: sha256WithRSAEncryption
         5f:c8:8e:5b:82:89:de:a7:45:9a:e4:ac:17:2d:6b:b9:cf:52:
         d4:7a:b9:c5:78:a4:f1:82:20:7e:3a:4e:c1:2b:f4:2f:dc:fe:
         3a:87:c8:1f:6d:39:45:f8:02:46:50:db:1d:f4:28:3b:e7:44:
         9d:aa:00:86:94:e1:b5:29:44:36:f6:5c:13:b5:7d:be:44:cd:
         53:d7:d4:3a:c4:ff:ed:b1:03:bd:27:66:58:e7:57:3f:be:c8:
         30:cb:b5:59:15:f0:b2:84:5e:fc:7c:9f:d3:29:9d:51:0d:47:
         f4:ae:34:5c:6b:83:90:29:bd:aa:c9:43:d2:a0:fb:42:65:f9:
         52:bf:2d:38:7c:a9:18:71:a5:70:26:0b:1a:22:2a:1d:39:b1:
         dd:b6:f1:b6:6c:cc:b5:79:1a:e0:b8:28:fe:5a:27:df:ba:71:
         5a:ca:6f:ff:50:52:10:5a:a2:73:ea:f1:54:86:32:a5:e9:1c:
         9c:4e:29:f2:9f:36:ca:65:8b:91:b4:ec:cb:e2:31:eb:ab:53:
         a1:81:16:36:bc:02:b1:d7:5d:20:64:79:0f:dc:71:ef:71:20:
         6a:34:c5:9d:04:a6:02:bd:d2:22:46:34:a2:2d:6b:26:56:61:
         91:c8:58:f9:b8:be:34:97:f3:a8:6a:e7:56:8e:d4:85:0c:53:
         09:7b:cc:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:37:52 2025 by rpki-client