Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31343a3a2f34382d3438203d3e203532353830.roa
File:                     323830343a6366383a31343a3a2f34382d3438203d3e203532353830.roa (raw, json)
Hash identifier:          ORqkUgWr0vdHMN70WVAJ4sZGbxNDQOfxquwsOcOmuyE=
Subject key identifier:   35:1F:B1:83:C5:07:EE:7A:B9:DF:F2:E3:59:6C:24:15:A0:82:D8:8C
Certificate issuer:       /CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
Certificate serial:       51EA25CEC88861199FEC19ADEC077968FF6D29B8
Authority key identifier: E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31343a3a2f34382d3438203d3e203532353830.roa
Signing time:             Wed 12 Jul 2023 14:35:31 +0000
ROA not before:           Wed 12 Jul 2023 14:30:31 +0000
ROA not after:            Wed 10 Jul 2024 14:35:31 +0000
asID:                     52580
IP address blocks:        2804:cf8:14::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:ea:25:ce:c8:88:61:19:9f:ec:19:ad:ec:07:79:68:ff:6d:29:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
        Validity
            Not Before: Jul 12 14:30:31 2023 GMT
            Not After : Jul 10 14:35:31 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:8a:d0:08:13:56:7e:b5:97:f7:f2:f5:da:e6:
                    eb:c5:35:46:0c:29:9b:1f:31:7c:86:73:ef:ba:7e:
                    70:c1:49:13:6f:cd:44:9e:81:0a:6d:ad:30:52:08:
                    d2:f8:de:f7:da:0a:d2:4e:f8:4b:16:55:bc:2b:37:
                    bc:18:d8:49:ae:79:57:9c:47:c8:30:6f:4c:25:06:
                    ec:de:3a:ee:ae:5f:02:3c:16:07:72:27:81:3f:12:
                    8c:74:51:26:5f:6e:be:78:ee:7c:1c:d5:97:ee:27:
                    47:48:d2:0f:78:11:b1:b4:3d:ee:9e:25:d8:81:25:
                    01:11:23:19:48:d0:c9:65:58:a5:8b:b7:81:b0:37:
                    61:07:9b:d8:03:79:11:5d:61:bd:58:bd:95:ee:d1:
                    32:fe:de:92:84:fb:11:f5:56:85:a5:a5:f1:36:b6:
                    60:1d:a4:fa:6a:b0:b3:9d:1a:ea:6d:63:05:ca:7b:
                    9a:21:51:46:c7:b5:09:89:02:86:3a:b6:a0:b2:a3:
                    3c:7f:da:fb:f6:94:f0:45:70:11:10:e4:50:c7:62:
                    62:a0:61:7a:df:ab:d2:52:91:84:b6:be:6c:77:72:
                    01:5c:e1:a2:80:4b:68:58:88:29:06:ac:cd:da:a0:
                    2b:25:ff:91:e3:5d:7f:27:92:9d:a2:a3:21:77:1e:
                    f0:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:1F:B1:83:C5:07:EE:7A:B9:DF:F2:E3:59:6C:24:15:A0:82:D8:8C
            X509v3 Authority Key Identifier:
                keyid:E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31343a3a2f34382d3438203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cf8:14::/48

    Signature Algorithm: sha256WithRSAEncryption
         90:a9:a8:61:89:c6:16:4d:0c:9f:3e:ad:eb:78:e6:d2:9d:b2:
         f8:d3:d0:1b:5e:3b:40:12:06:d0:7d:55:f4:52:ce:3e:49:73:
         93:7f:37:cb:85:26:50:58:92:3b:68:3e:df:a4:bc:ef:c3:bd:
         5e:b8:66:f8:62:79:3b:80:8e:0e:60:86:e2:c0:28:0a:e5:61:
         3b:ee:4e:28:38:70:e4:14:ad:0a:01:8b:ab:53:a1:77:30:df:
         dc:61:1b:fa:01:4f:99:55:7d:26:26:75:5b:07:23:43:b0:99:
         0c:40:e2:30:94:d4:9d:54:c8:f1:ac:6b:3c:cf:5f:7c:cf:fe:
         ca:56:8b:68:c3:26:39:79:55:cd:d8:13:00:b8:f2:04:1a:34:
         5c:d7:ef:3d:3a:b3:bd:72:11:0f:9d:5a:bf:af:8c:97:86:e1:
         f9:74:8e:96:d2:1f:78:28:69:20:5f:e0:12:2a:7f:e7:ef:56:
         df:d9:a9:b4:f3:ce:3d:53:06:4c:17:f2:0f:08:f1:03:32:0a:
         cf:de:de:77:c2:6d:8b:18:7a:e4:0b:be:02:0a:87:53:34:58:
         af:eb:78:e4:d8:da:bb:45:bf:d8:a2:54:d8:b6:89:ce:aa:bc:
         9c:b7:41:d3:bf:22:7b:ac:2d:35:31:4b:2c:58:3c:d1:23:5f:
         28:bb:9a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:27:55 2025 by rpki-client