Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HmAZBWJZihigumcTjh3JSHbh62Wd9eWkw4qM1v2PepB4/0/323830343a373836343a3a2f33322d3332203d3e20323731323339.roa
File:                     323830343a373836343a3a2f33322d3332203d3e20323731323339.roa (raw, json)
Hash identifier:          Oruyc8hnJP+7UqKIpQOhnIi8wjQ21v42uquDGXBFXao=
Subject key identifier:   99:AF:4E:2A:4D:B4:B1:67:CB:89:60:60:3A:90:3A:45:77:3F:D8:8E
Certificate issuer:       /CN=85B44C89427FA1CFB8491F84467C58597CE25783
Certificate serial:       0EA13AE3D9ED1427034A3100591351FE41F73F10
Authority key identifier: 85:B4:4C:89:42:7F:A1:CF:B8:49:1F:84:46:7C:58:59:7C:E2:57:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85B44C89427FA1CFB8491F84467C58597CE25783.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HmAZBWJZihigumcTjh3JSHbh62Wd9eWkw4qM1v2PepB4/0/323830343a373836343a3a2f33322d3332203d3e20323731323339.roa
Signing time:             Tue 30 Jul 2024 19:51:36 +0000
ROA not before:           Tue 30 Jul 2024 19:46:36 +0000
ROA not after:            Tue 29 Jul 2025 19:51:36 +0000
asID:                     271239
IP address blocks:        2804:7864::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:a1:3a:e3:d9:ed:14:27:03:4a:31:00:59:13:51:fe:41:f7:3f:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85B44C89427FA1CFB8491F84467C58597CE25783
        Validity
            Not Before: Jul 30 19:46:36 2024 GMT
            Not After : Jul 29 19:51:36 2025 GMT
        Subject: CN=99AF4E2A4DB4B167CB8960603A903A45773FD88E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:73:0c:6b:4c:f2:98:ea:76:01:f3:cc:01:1e:
                    0e:8c:3c:fa:a2:d8:91:5c:f2:25:7c:b5:ea:35:37:
                    61:db:f2:f0:55:88:d4:f6:65:41:09:17:dd:f2:54:
                    2e:87:ab:44:24:30:fd:1b:f4:0d:c8:00:b4:f0:fd:
                    7f:00:f1:4a:49:28:07:af:a1:e4:b4:09:7a:2e:1a:
                    9e:75:e3:d3:6b:5b:c9:bc:65:72:d6:e0:d7:7d:09:
                    4b:29:f4:ea:68:20:4f:53:86:98:d6:67:aa:9f:a0:
                    94:c6:b4:15:c9:cf:f4:0f:0b:2a:46:82:a6:81:db:
                    85:36:5b:0c:e0:4c:38:4d:e5:08:4c:42:70:80:3c:
                    5a:f7:6d:74:5a:72:e5:9a:0d:56:c6:cd:51:69:68:
                    84:62:e8:3a:0a:f6:01:5b:98:cc:08:e3:d1:b8:85:
                    47:42:20:33:66:ed:08:98:88:02:28:6e:09:f8:bd:
                    5f:ea:a3:13:77:b0:35:11:c6:58:ba:ab:7b:87:75:
                    29:ca:a4:ee:36:78:44:57:71:ae:5c:ea:36:56:15:
                    39:53:d7:97:dd:fd:4c:40:28:42:f5:3f:37:58:8a:
                    39:19:17:e1:1c:95:a3:74:d6:92:49:d6:c8:59:4e:
                    8c:38:02:42:57:b6:5f:34:08:c3:dc:76:49:bc:8e:
                    a1:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:AF:4E:2A:4D:B4:B1:67:CB:89:60:60:3A:90:3A:45:77:3F:D8:8E
            X509v3 Authority Key Identifier:
                keyid:85:B4:4C:89:42:7F:A1:CF:B8:49:1F:84:46:7C:58:59:7C:E2:57:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HmAZBWJZihigumcTjh3JSHbh62Wd9eWkw4qM1v2PepB4/0/85B44C89427FA1CFB8491F84467C58597CE25783.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85B44C89427FA1CFB8491F84467C58597CE25783.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmAZBWJZihigumcTjh3JSHbh62Wd9eWkw4qM1v2PepB4/0/323830343a373836343a3a2f33322d3332203d3e20323731323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7864::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:e2:27:38:8d:18:a3:69:3a:94:1c:ed:e8:42:51:95:72:20:
         72:cb:fa:4e:68:a5:86:2f:c8:36:dc:a6:71:a1:16:b0:3e:68:
         2d:5a:a3:13:69:ef:b5:35:d1:1f:9f:e2:35:ff:07:78:05:87:
         7d:fd:82:d7:f3:68:77:0b:48:d4:6c:92:85:8e:0d:68:3e:f5:
         11:fc:82:d8:b5:2a:93:e9:0c:7f:6d:28:49:76:94:1e:32:bb:
         94:37:12:b7:57:7a:14:63:7b:f7:2d:50:f2:d2:81:b8:06:3e:
         6b:22:11:7f:da:7a:44:8e:f8:d1:99:d5:a7:d3:dc:1a:0a:d6:
         67:84:e7:1e:05:0a:9f:e4:25:93:8e:a4:05:91:3c:5d:72:3e:
         3e:84:9b:ff:ac:8d:7f:8c:09:de:96:f5:32:f4:df:f3:05:c2:
         65:41:e1:35:85:ae:38:33:27:28:d3:d8:64:9d:eb:34:94:24:
         f7:fc:99:b5:53:57:70:ef:72:96:ca:c7:24:cb:61:a4:31:bb:
         81:3d:1b:0f:9e:57:47:35:66:c8:03:7f:fd:92:3a:32:36:9c:
         ee:74:5e:2b:97:09:2e:2e:cb:23:f1:08:bf:6d:1c:21:48:01:
         48:12:14:c8:7a:88:e8:27:58:84:cd:6c:a9:12:06:eb:03:39:
         cf:f0:86:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:21:53 2025 by rpki-client