Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/323830343a313332343a3a2f33322d3438203d3e20323633353138.roa
File:                     323830343a313332343a3a2f33322d3438203d3e20323633353138.roa (raw, json)
Hash identifier:          2Gg9CfAdFbC7QsJ85AHHn/7bkg7iQJIS1a3ZEGd5V/I=
Subject key identifier:   AB:5C:61:C2:41:F3:04:6E:06:51:77:B1:65:7F:B2:29:31:FE:ED:13
Certificate issuer:       /CN=52F62125E0CDCD64A0D0791C05D300437071B38B
Certificate serial:       149E469841C9CD76908B893DF80380F33491B639
Authority key identifier: 52:F6:21:25:E0:CD:CD:64:A0:D0:79:1C:05:D3:00:43:70:71:B3:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/52F62125E0CDCD64A0D0791C05D300437071B38B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/323830343a313332343a3a2f33322d3438203d3e20323633353138.roa
Signing time:             Thu 22 Jun 2023 20:15:08 +0000
ROA not before:           Thu 22 Jun 2023 20:10:08 +0000
ROA not after:            Thu 20 Jun 2024 20:15:08 +0000
asID:                     263518
IP address blocks:        2804:1324::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:9e:46:98:41:c9:cd:76:90:8b:89:3d:f8:03:80:f3:34:91:b6:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52F62125E0CDCD64A0D0791C05D300437071B38B
        Validity
            Not Before: Jun 22 20:10:08 2023 GMT
            Not After : Jun 20 20:15:08 2024 GMT
        Subject: CN=AB5C61C241F3046E065177B1657FB22931FEED13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:aa:8f:fa:c0:f4:f8:9a:e7:31:ac:36:74:15:
                    50:0d:c1:fe:22:d8:e5:14:a1:f0:be:d0:50:90:b3:
                    2a:28:dd:c6:db:c4:7e:73:36:ea:b8:23:02:8a:60:
                    0e:af:2b:83:de:3e:74:d7:0a:19:31:44:87:32:18:
                    e0:bf:8d:5e:40:ff:1c:19:32:57:76:9b:61:9e:d1:
                    58:f5:ac:10:ef:c9:48:d0:0b:f5:b3:a1:aa:5e:4a:
                    b1:0e:7d:03:ab:37:aa:62:df:97:6e:04:8e:0c:95:
                    d6:db:18:ce:27:bc:93:8b:18:d7:78:3b:79:56:7c:
                    f0:3c:c1:e2:88:7f:23:f0:1e:81:8a:f3:ad:bf:29:
                    a5:ef:16:99:55:fd:05:43:1f:97:fb:b0:da:16:5a:
                    23:df:c4:e0:9e:6e:41:34:e6:13:60:c2:5d:05:a5:
                    17:20:d3:f7:38:13:5d:7d:08:a1:ee:14:34:10:bd:
                    57:ef:cd:e9:b1:88:b0:0b:a8:3c:a4:ea:8d:93:63:
                    d8:9e:16:5b:56:81:32:95:08:23:95:06:82:2c:61:
                    c2:ee:2a:16:74:2c:4b:22:b4:b4:10:1c:cb:bb:23:
                    31:81:b2:6a:15:97:b0:0d:61:a7:d3:3c:fe:ff:37:
                    e1:01:21:e5:bb:d3:ed:42:9c:f2:f5:4a:45:f8:45:
                    2b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:5C:61:C2:41:F3:04:6E:06:51:77:B1:65:7F:B2:29:31:FE:ED:13
            X509v3 Authority Key Identifier:
                keyid:52:F6:21:25:E0:CD:CD:64:A0:D0:79:1C:05:D3:00:43:70:71:B3:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/52F62125E0CDCD64A0D0791C05D300437071B38B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/52F62125E0CDCD64A0D0791C05D300437071B38B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/323830343a313332343a3a2f33322d3438203d3e20323633353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1324::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:73:03:a9:56:be:1c:ce:ee:da:3d:4c:80:75:c4:e1:ef:f8:
         f6:45:e4:82:5c:63:0b:3e:f6:19:bb:1c:56:ce:1a:c7:78:54:
         7d:69:bc:59:80:9e:3d:2e:3b:a2:1b:82:d4:48:16:d8:fc:26:
         2f:ad:2f:93:16:32:a3:6a:e1:0f:55:2c:c2:59:4d:8a:8c:45:
         34:a8:f1:e0:bf:b3:95:bb:0b:7a:75:91:3b:1c:dd:97:4a:64:
         c8:2d:ee:a9:e1:99:0c:0a:ef:2f:0d:8a:6b:d5:4b:67:5d:e8:
         0a:d3:54:f7:db:cf:48:de:47:55:ee:af:7f:97:f0:9e:52:45:
         f6:c5:60:86:02:b6:1c:0f:f4:59:97:0e:b3:2a:07:24:70:9e:
         c2:69:29:a4:85:53:17:0c:57:f6:8d:cf:39:ba:7e:fa:22:88:
         b0:59:17:36:d0:fc:aa:86:e7:1e:6e:22:52:03:94:de:97:80:
         ef:ad:f5:a9:b7:e4:7f:e0:14:19:29:f9:19:e6:3b:75:df:31:
         b1:dd:e8:be:dc:57:16:93:f4:d7:97:11:bb:ee:14:e6:ff:62:
         35:46:85:3e:09:c8:e6:f2:07:18:9e:05:27:e5:6b:53:aa:b0:
         52:fe:8d:cb:19:8a:4c:ee:30:0f:14:42:b6:d0:17:cf:b1:7d:
         3f:b3:d2:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:41:08 2025 by rpki-client