Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/323830343a6563383a623030303a3a2f33362d3336203d3e20323632353332.roa
File:                     323830343a6563383a623030303a3a2f33362d3336203d3e20323632353332.roa (raw, json)
Hash identifier:          280TTgAFFWzhuVBMrasOLBpdu1nbkt+5muyNW1pBb2c=
Subject key identifier:   4F:6F:3D:F5:17:D8:55:1A:E2:E0:C9:44:33:B8:F7:02:DB:A6:49:88
Certificate issuer:       /CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
Certificate serial:       61142F39457D17666B960B1904D6F35006B7EA5F
Authority key identifier: C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/323830343a6563383a623030303a3a2f33362d3336203d3e20323632353332.roa
Signing time:             Wed 28 Feb 2024 14:11:28 +0000
ROA not before:           Wed 28 Feb 2024 14:06:28 +0000
ROA not after:            Wed 26 Feb 2025 14:11:28 +0000
asID:                     262532
IP address blocks:        2804:ec8:b000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:14:2f:39:45:7d:17:66:6b:96:0b:19:04:d6:f3:50:06:b7:ea:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
        Validity
            Not Before: Feb 28 14:06:28 2024 GMT
            Not After : Feb 26 14:11:28 2025 GMT
        Subject: CN=4F6F3DF517D8551AE2E0C94433B8F702DBA64988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1e:77:29:13:df:9c:d9:a7:32:37:0a:60:c7:
                    c8:f3:b8:c8:67:d0:b7:d7:44:37:3b:cc:71:82:17:
                    6c:fa:36:1f:d1:4c:eb:ef:79:db:fa:a7:62:6f:6f:
                    9d:74:71:59:0e:2d:66:9f:d1:5f:1a:80:be:65:a7:
                    b5:2c:29:25:6e:19:8f:a8:01:31:ac:4a:d0:75:a5:
                    05:64:86:26:d3:30:af:e3:48:71:47:93:5a:2d:f4:
                    13:67:aa:b6:eb:61:f6:6f:6c:24:c0:e0:e6:8d:95:
                    15:21:e7:5e:0f:32:25:c8:c5:77:a3:57:0c:b4:5e:
                    1a:57:fd:5f:19:b4:c3:8b:5b:61:51:52:4d:a3:6b:
                    be:67:d1:9d:98:b0:ce:56:6d:63:77:54:87:c5:ce:
                    c1:b5:28:2b:e3:70:85:dd:f8:90:21:79:6c:86:69:
                    01:ac:0e:48:5c:77:69:73:99:36:04:58:87:71:1c:
                    61:92:ec:9b:9f:ab:45:b5:74:0f:c7:b8:e1:3d:50:
                    51:0f:c1:7d:cc:de:a1:05:cd:05:07:6e:92:da:f9:
                    df:9c:46:73:da:c3:b9:ee:01:11:e9:33:f3:95:57:
                    07:0d:a6:7d:a7:d6:ae:13:01:74:9b:b4:c4:32:62:
                    14:5d:fa:8f:7f:a8:d7:ea:26:1d:2a:ec:84:f9:7c:
                    33:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:6F:3D:F5:17:D8:55:1A:E2:E0:C9:44:33:B8:F7:02:DB:A6:49:88
            X509v3 Authority Key Identifier:
                keyid:C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/323830343a6563383a623030303a3a2f33362d3336203d3e20323632353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ec8:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         04:7d:67:6f:6d:ce:a8:25:23:2b:68:01:b1:a6:4d:7e:b2:02:
         18:c7:c1:7a:5a:39:ba:ed:7c:c7:5a:24:83:20:2a:29:cb:d6:
         d8:26:3e:d1:0a:e3:76:e5:cb:0c:20:3c:b9:9b:17:e7:c9:60:
         6e:c2:f4:19:19:31:ef:d4:2e:24:d9:d5:0e:40:9d:b0:5e:0e:
         53:70:56:47:3c:63:68:16:69:e8:98:dc:5a:58:58:57:a4:c9:
         b6:8f:1e:e0:52:f1:cc:ee:26:5f:d7:4f:ad:de:11:05:7b:a3:
         ee:89:c4:c6:00:cf:25:f5:c2:5d:9e:86:70:a7:fc:8e:e1:6c:
         48:3c:c3:c3:4e:5c:62:2b:95:e0:ec:1b:53:3e:97:40:ff:2a:
         1f:21:7c:b4:4c:fa:68:65:46:fd:d1:d8:3d:3b:a5:51:f0:5e:
         22:ac:05:54:4c:f8:46:4e:80:97:28:67:52:3f:5c:28:fb:cf:
         2c:6f:99:ce:49:0e:75:24:42:1c:0f:6e:03:71:ba:bb:2e:4e:
         46:d0:b9:53:70:f4:62:45:aa:9f:8d:09:3d:fd:d4:b5:fd:35:
         c3:a0:15:c6:08:65:13:2c:6d:45:9e:c6:ec:7c:2b:35:f3:6e:
         a2:82:71:65:5e:b7:cc:81:e1:8d:ed:2c:40:b4:60:53:59:d9:
         3e:7c:e7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:56 2025 by rpki-client