Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/323830343a6563383a633030303a3a2f33352d3335203d3e20323632353332.roa
File:                     323830343a6563383a633030303a3a2f33352d3335203d3e20323632353332.roa (raw, json)
Hash identifier:          EgxhrXN46FQGrPkA+bvi4lxmSVst8gb3kBEFCZXlyVU=
Subject key identifier:   83:A6:3A:78:51:F6:F0:15:E6:C9:6C:5D:74:BC:86:12:4F:11:10:34
Certificate issuer:       /CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
Certificate serial:       6081CC4B1B6BAC37369966BC50E5CF8F3CCD93D0
Authority key identifier: C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/323830343a6563383a633030303a3a2f33352d3335203d3e20323632353332.roa
Signing time:             Wed 28 Feb 2024 14:12:55 +0000
ROA not before:           Wed 28 Feb 2024 14:07:55 +0000
ROA not after:            Wed 26 Feb 2025 14:12:55 +0000
asID:                     262532
IP address blocks:        2804:ec8:c000::/35 maxlen: 35
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:81:cc:4b:1b:6b:ac:37:36:99:66:bc:50:e5:cf:8f:3c:cd:93:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
        Validity
            Not Before: Feb 28 14:07:55 2024 GMT
            Not After : Feb 26 14:12:55 2025 GMT
        Subject: CN=83A63A7851F6F015E6C96C5D74BC86124F111034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:29:ad:e5:d8:a2:45:18:f0:5f:a7:84:0e:7f:
                    1f:69:10:56:42:41:bc:00:3a:ff:6e:10:f7:02:0e:
                    13:bf:25:fe:2d:7d:80:c7:eb:2a:07:e2:d4:bf:f8:
                    bf:a5:94:49:08:3d:e5:b7:be:6d:42:aa:99:f6:e9:
                    9a:53:33:1e:1a:65:cf:83:ca:2c:be:86:d0:ac:d8:
                    72:76:ab:75:bf:70:33:ab:3f:21:5c:c2:10:db:6d:
                    7d:2d:77:a9:71:3a:70:23:47:68:cf:a4:b0:be:06:
                    90:da:90:0b:81:2e:34:7b:dc:d4:7d:03:35:a0:08:
                    4b:8f:aa:93:a4:ea:f6:0b:27:6c:c0:4d:21:10:98:
                    06:ca:24:58:ee:83:f0:de:22:d0:61:3d:2e:f3:e6:
                    a2:e0:99:86:5a:ea:a7:fd:5d:4f:19:5d:06:23:e2:
                    42:2c:e0:ed:78:76:cc:8b:02:07:35:44:b5:01:dd:
                    f2:4e:1b:fa:ee:09:62:7b:25:82:fc:18:22:56:85:
                    73:04:b0:46:68:93:87:8a:f8:35:e6:d7:7e:28:ba:
                    6d:13:67:a6:27:5b:ab:d3:3a:8f:67:11:9c:66:77:
                    24:20:3a:2c:77:19:e3:2b:74:da:ee:1c:3f:72:d7:
                    04:2c:8a:f6:5e:e5:10:f6:c9:51:d3:ab:f5:34:48:
                    ef:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A6:3A:78:51:F6:F0:15:E6:C9:6C:5D:74:BC:86:12:4F:11:10:34
            X509v3 Authority Key Identifier:
                keyid:C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/323830343a6563383a633030303a3a2f33352d3335203d3e20323632353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ec8:c000::/35

    Signature Algorithm: sha256WithRSAEncryption
         46:ba:b9:8f:d9:2e:b4:33:4c:8c:04:7a:06:30:7a:b8:92:54:
         77:bf:c4:dd:21:26:dd:d8:a9:fd:73:3d:f3:c1:a7:24:e3:f4:
         fe:79:66:de:2b:86:97:c5:92:e6:49:6b:c2:e5:a3:8b:57:db:
         ee:94:34:5c:ba:f4:d3:34:da:48:66:ef:c7:dc:a1:ab:e0:3c:
         b5:c8:20:5c:37:7f:c9:e9:ca:9e:c9:3f:24:07:b1:85:ea:cd:
         cd:a7:d0:85:5b:71:5d:08:54:70:7e:95:01:71:35:5b:f8:78:
         e4:0a:89:5f:14:53:7b:fc:f9:fb:2a:8a:c7:86:df:60:b0:75:
         de:b9:8b:95:36:85:c7:02:a8:b2:40:10:67:cd:22:d0:a0:f1:
         26:35:ee:db:97:48:0a:13:47:61:60:3c:b0:66:1c:b9:c0:67:
         0f:3f:5a:7d:b8:74:83:88:b4:97:d3:56:89:be:d0:cc:af:20:
         c3:ae:36:ba:9e:91:3d:d8:78:1f:55:eb:de:1c:c1:ff:2a:2e:
         11:26:24:db:29:64:d7:6e:0a:56:c2:8a:43:9f:bb:bc:3a:1d:
         63:32:e5:5e:b7:12:4d:8c:54:48:20:58:26:16:df:b7:9a:32:
         7a:71:f5:fe:3a:8d:dc:b9:6c:49:2f:e4:dc:37:0f:01:a3:ea:
         db:8d:fc:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:53:48 2025 by rpki-client