Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/323830343a6563383a3a2f33362d3336203d3e20323632353332.roa
File:                     323830343a6563383a3a2f33362d3336203d3e20323632353332.roa (raw, json)
Hash identifier:          2Q7J1melPji9+yiQr0psKPaDgr+wQlr5/dBuccm7u80=
Subject key identifier:   45:8F:9F:65:27:A4:BF:0D:70:19:8E:A7:8D:0D:19:67:95:4D:E6:6B
Certificate issuer:       /CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
Certificate serial:       391004CEB640EB99857F0DC41AA66E1A41F05FA5
Authority key identifier: C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/323830343a6563383a3a2f33362d3336203d3e20323632353332.roa
Signing time:             Wed 28 Feb 2024 14:11:17 +0000
ROA not before:           Wed 28 Feb 2024 14:06:17 +0000
ROA not after:            Wed 26 Feb 2025 14:11:17 +0000
asID:                     262532
IP address blocks:        2804:ec8::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:10:04:ce:b6:40:eb:99:85:7f:0d:c4:1a:a6:6e:1a:41:f0:5f:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
        Validity
            Not Before: Feb 28 14:06:17 2024 GMT
            Not After : Feb 26 14:11:17 2025 GMT
        Subject: CN=458F9F6527A4BF0D70198EA78D0D1967954DE66B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:cc:cd:0f:45:c2:18:23:f1:9b:47:83:74:bd:
                    74:d8:58:c2:77:ec:34:43:0b:a1:0c:dd:24:27:26:
                    f5:ec:d4:ac:91:75:fc:5d:1c:c6:4e:5b:4b:52:12:
                    7f:eb:68:fe:ca:c7:02:49:33:80:8d:eb:fc:54:69:
                    6f:49:6b:75:c5:ab:e7:7a:c2:36:ee:67:fd:c3:fe:
                    01:8e:85:d1:54:33:5e:64:5f:f3:2d:ad:89:77:7d:
                    d5:88:75:a2:03:ad:d9:e0:45:6e:7b:19:54:2d:36:
                    d7:9f:b5:5f:66:bf:89:b1:f3:f0:c7:31:e1:0b:7d:
                    34:6a:df:2d:57:85:d2:70:56:ff:60:af:cd:aa:a6:
                    42:74:67:79:4c:6e:fa:4c:c1:7b:3a:6f:1e:f7:69:
                    5c:dc:f0:1e:31:0a:ff:04:6e:80:20:e1:f8:b6:ce:
                    32:b5:4b:4b:21:8a:c8:91:90:5e:73:b6:f4:4a:ea:
                    a7:97:8a:c5:8f:35:75:9a:22:8a:58:1b:ca:15:84:
                    d4:8c:37:ce:5b:8d:65:06:a5:8c:a2:c9:ba:53:44:
                    c8:ab:69:0a:44:f9:f3:ba:52:9a:32:d5:30:a3:74:
                    67:a5:ef:50:db:b7:b3:76:30:44:e5:3b:4a:35:79:
                    89:04:d1:af:5a:63:41:db:34:4c:9d:4d:4c:f1:3e:
                    8d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:8F:9F:65:27:A4:BF:0D:70:19:8E:A7:8D:0D:19:67:95:4D:E6:6B
            X509v3 Authority Key Identifier:
                keyid:C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/323830343a6563383a3a2f33362d3336203d3e20323632353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ec8::/36

    Signature Algorithm: sha256WithRSAEncryption
         04:72:1f:6f:8a:76:47:e3:bb:4c:9d:f5:f8:ce:27:7f:06:89:
         64:e1:87:d9:8c:34:d0:77:65:31:7a:39:d1:54:e0:a3:70:09:
         7e:a6:fc:5c:96:fd:d6:76:91:57:30:49:c3:10:a3:08:a1:19:
         ee:85:0a:41:16:90:7c:65:5f:8e:0e:ae:22:a4:63:35:e2:d3:
         86:26:76:16:11:2a:8e:2b:0e:b6:a7:bf:a3:47:5b:11:4e:3f:
         11:73:df:4d:2a:03:d2:f7:71:3b:e7:73:73:3e:78:62:6c:a0:
         33:78:fb:9c:15:45:03:35:f1:b9:8c:3a:c2:14:69:dd:1e:ac:
         2e:07:0f:07:c1:50:fa:6d:da:14:eb:4f:7c:25:2e:1c:d9:ab:
         39:23:1e:ad:dd:9a:5a:0c:2d:30:7a:bf:c7:94:fa:fe:66:94:
         c1:f1:ed:33:f3:b3:fd:50:13:da:7d:8e:b7:dc:29:5a:f1:7d:
         c4:64:a3:4b:f3:ed:ae:a3:e3:a2:aa:62:43:f0:87:d8:59:a8:
         66:f0:4f:8d:67:5e:0f:6d:85:d0:2d:d8:37:8a:75:16:2a:87:
         14:1c:5a:ec:05:62:ec:72:29:ea:cd:c1:bb:28:d9:ef:68:ad:
         09:2f:de:65:5b:f8:68:b2:64:45:34:6a:d7:2e:8a:ca:e0:7b:
         78:04:21:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 04:14:11 2025 by rpki-client