Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hmi7PRGu5nBm5y4tSzdwsJnfsc6NkxrcGu6LtxeSXxo5/0/323830343a6331633a3a2f33322d313238203d3e203532363739.roa
File:                     323830343a6331633a3a2f33322d313238203d3e203532363739.roa (raw, json)
Hash identifier:          cdeYHax6fgvu1aXW0zFj5zJEunUZS+H9/7z3LOT51js=
Subject key identifier:   1B:C1:B9:06:99:C8:AC:4D:A1:3D:EA:0F:71:D0:B7:61:72:12:01:43
Certificate issuer:       /CN=908579108D7A183795A3DE9DEB22E3F17A2ECACF
Certificate serial:       739903B785C78B57B1CF98D3ADE197856D6485A2
Authority key identifier: 90:85:79:10:8D:7A:18:37:95:A3:DE:9D:EB:22:E3:F1:7A:2E:CA:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/908579108D7A183795A3DE9DEB22E3F17A2ECACF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hmi7PRGu5nBm5y4tSzdwsJnfsc6NkxrcGu6LtxeSXxo5/0/323830343a6331633a3a2f33322d313238203d3e203532363739.roa
Signing time:             Wed 27 Nov 2024 10:24:14 +0000
ROA not before:           Wed 27 Nov 2024 10:19:14 +0000
ROA not after:            Wed 26 Nov 2025 10:24:14 +0000
asID:                     52679
IP address blocks:        2804:c1c::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:99:03:b7:85:c7:8b:57:b1:cf:98:d3:ad:e1:97:85:6d:64:85:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908579108D7A183795A3DE9DEB22E3F17A2ECACF
        Validity
            Not Before: Nov 27 10:19:14 2024 GMT
            Not After : Nov 26 10:24:14 2025 GMT
        Subject: CN=1BC1B90699C8AC4DA13DEA0F71D0B76172120143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8a:a9:dd:84:63:c8:3e:58:ca:c6:d7:09:46:
                    07:47:0d:51:4a:8e:35:3e:24:2c:f4:2f:ec:c0:f6:
                    be:8d:f1:f3:8d:2a:80:e3:67:b4:6f:7f:60:57:5b:
                    0a:7c:37:c4:2f:a4:c1:b8:ff:e8:5c:0e:7b:ad:84:
                    93:35:0d:75:9e:23:d8:3c:a3:c4:5f:54:c3:aa:b2:
                    9c:11:76:77:44:3a:62:e8:9c:2c:d8:cc:68:5a:99:
                    33:09:f7:39:d0:3f:0a:81:cf:50:97:bf:f5:3a:13:
                    f6:92:03:5c:7b:d2:40:a4:41:76:c5:74:5d:ab:c2:
                    31:54:e8:10:93:f1:dd:1d:58:aa:f5:d3:48:40:3b:
                    58:76:22:7e:c6:99:e7:f6:76:13:b7:76:42:c1:de:
                    b8:89:62:71:e1:88:20:4a:dd:fd:24:c0:54:8b:00:
                    2e:4d:44:9c:b9:c0:a1:28:e7:9d:50:4c:be:80:c2:
                    d4:2a:10:eb:31:fd:8e:79:84:fb:7e:b9:c5:05:97:
                    0f:0d:4b:62:28:10:39:6f:a2:7c:23:9b:41:c6:aa:
                    8d:ea:c8:b4:46:35:f3:fd:55:69:0c:37:b9:42:e2:
                    6c:62:86:a7:31:7c:9d:62:7d:ec:ec:69:82:86:9c:
                    d4:47:42:fb:fa:c9:38:ab:3e:43:77:70:63:f7:01:
                    f7:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:C1:B9:06:99:C8:AC:4D:A1:3D:EA:0F:71:D0:B7:61:72:12:01:43
            X509v3 Authority Key Identifier:
                keyid:90:85:79:10:8D:7A:18:37:95:A3:DE:9D:EB:22:E3:F1:7A:2E:CA:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hmi7PRGu5nBm5y4tSzdwsJnfsc6NkxrcGu6LtxeSXxo5/0/908579108D7A183795A3DE9DEB22E3F17A2ECACF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/908579108D7A183795A3DE9DEB22E3F17A2ECACF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hmi7PRGu5nBm5y4tSzdwsJnfsc6NkxrcGu6LtxeSXxo5/0/323830343a6331633a3a2f33322d313238203d3e203532363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c1c::/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:ef:95:b3:fe:55:40:60:6d:5a:e8:77:37:b5:48:f4:93:b1:
         fe:5f:e5:20:fb:ce:0b:a0:bd:4c:3f:94:07:24:4a:1f:c4:3a:
         05:7e:79:81:07:8d:56:ee:e4:6e:66:92:a3:0b:80:06:e8:40:
         31:5d:0d:70:9c:eb:0d:63:65:f4:d0:d3:24:cb:b9:51:95:47:
         31:54:00:39:9e:57:57:db:40:42:eb:16:c7:9b:5c:14:4b:82:
         96:e0:75:d5:99:14:f0:e7:6f:5a:77:ca:2c:94:d5:ec:92:85:
         88:c1:d9:88:5e:28:5f:df:3c:83:2c:b7:14:e1:03:5a:72:7d:
         0f:52:b3:7f:45:3e:a5:17:ff:ec:64:96:28:5e:b1:73:b4:11:
         47:6c:11:02:80:aa:be:ea:d4:c7:dd:d3:a0:7f:f6:3b:7e:1b:
         f0:c6:09:45:d2:be:81:eb:30:6c:43:55:c9:e9:20:73:93:13:
         07:70:e3:bc:6c:b2:78:5a:bc:53:d3:5d:5c:4f:f2:66:62:2c:
         dc:e7:60:ba:4d:ce:8b:dc:e0:4e:fa:ff:74:72:08:01:7e:d6:
         44:f6:cf:27:be:9d:dc:09:a0:ec:73:27:86:0a:12:48:16:0e:
         67:3f:eb:30:42:60:6b:8d:bb:a6:20:a6:c5:fa:e9:d2:4d:0b:
         22:4c:75:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 00:47:12 2025 by rpki-client