Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31363a3a2f34382d313238203d3e203532353830.roa
File:                     323830343a6366383a31363a3a2f34382d313238203d3e203532353830.roa (raw, json)
Hash identifier:          ln81KWLGerJokckiM1YsgmDQkzqB/5HLTEsjhUmQSKA=
Subject key identifier:   7E:B5:55:2A:70:76:BC:C4:6E:07:98:49:61:2E:B4:FD:A0:E6:BD:0B
Certificate issuer:       /CN=FF36173E097169BA044538B64258000B42FABD8C
Certificate serial:       3DE276CD9A5659B65885966C6C5785ED9EE95247
Authority key identifier: FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31363a3a2f34382d313238203d3e203532353830.roa
Signing time:             Fri 14 Feb 2025 19:26:47 +0000
ROA not before:           Fri 14 Feb 2025 19:21:47 +0000
ROA not after:            Fri 13 Feb 2026 19:26:47 +0000
asID:                     52580
IP address blocks:        2804:cf8:16::/48 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:e2:76:cd:9a:56:59:b6:58:85:96:6c:6c:57:85:ed:9e:e9:52:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF36173E097169BA044538B64258000B42FABD8C
        Validity
            Not Before: Feb 14 19:21:47 2025 GMT
            Not After : Feb 13 19:26:47 2026 GMT
        Subject: CN=7EB5552A7076BCC46E079849612EB4FDA0E6BD0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:8f:c6:f2:64:fc:36:c9:39:82:0e:31:0b:96:
                    eb:28:c3:c2:16:69:44:c4:fc:28:c9:29:c7:59:a0:
                    4d:e2:ab:8c:80:cd:47:b8:a9:64:61:88:a5:cb:4b:
                    83:87:61:fc:99:6f:1d:44:f1:f8:ea:8f:98:6c:66:
                    86:3a:26:6a:34:e7:fd:d9:37:03:00:d6:07:1b:43:
                    bb:7b:96:ca:c9:67:28:6c:0f:52:15:22:44:44:db:
                    d1:78:d9:6c:51:95:ba:b1:8c:62:3c:2a:02:d0:78:
                    16:21:1c:f4:7f:19:73:a0:a6:31:8e:94:16:85:41:
                    3c:07:76:c3:f7:f2:d5:06:cd:9a:24:92:28:19:90:
                    c7:c9:0e:8a:5e:81:46:eb:ac:e6:8e:99:ce:57:08:
                    fb:e2:4a:de:ac:65:e0:de:85:0b:92:73:67:b3:b0:
                    ab:ac:fb:6b:89:96:c2:ce:97:ce:04:6d:f6:88:ee:
                    f4:5d:26:05:8e:f9:6d:22:62:9f:73:e5:e5:0c:78:
                    15:07:a5:95:57:cb:f9:7a:ef:57:e7:b3:6f:7a:7d:
                    89:51:e9:c0:f2:ab:07:9a:c2:67:6a:a3:51:df:da:
                    28:54:ed:42:9f:4e:d3:9a:ad:53:a4:b1:a9:88:09:
                    65:e1:dc:47:a2:eb:a5:e1:2c:67:27:f0:65:7d:89:
                    b7:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:B5:55:2A:70:76:BC:C4:6E:07:98:49:61:2E:B4:FD:A0:E6:BD:0B
            X509v3 Authority Key Identifier:
                keyid:FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/FF36173E097169BA044538B64258000B42FABD8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31363a3a2f34382d313238203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cf8:16::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:c4:51:27:0f:04:f7:89:3c:b2:44:97:8f:a2:5a:e4:7c:36:
         45:3f:79:ff:44:2d:3d:bb:8e:94:93:f4:8d:95:1c:f5:e0:12:
         44:d9:8c:9d:d8:40:e2:6b:18:c1:bc:bf:88:02:2f:d5:bc:f8:
         4c:86:b5:7a:f8:92:a1:a6:4a:47:54:0e:9d:44:b1:01:a9:7e:
         3b:9d:d5:0f:58:b0:32:c1:6c:93:61:62:e7:ef:83:ab:e6:0c:
         67:a4:de:45:aa:78:b9:ca:07:79:34:51:58:d0:87:1d:44:90:
         34:0f:c6:e9:34:6f:bd:cf:13:96:b5:55:77:35:82:21:fd:dd:
         f7:27:a6:f8:40:9d:cb:d0:4e:63:03:bd:cb:b6:4e:81:6b:e6:
         5f:23:f2:0d:1b:b9:0d:b0:4f:d2:47:b1:7d:fa:d7:57:e2:bd:
         64:fd:79:5a:81:ac:d7:6f:1d:88:dc:7d:9e:36:98:c8:5d:37:
         4c:72:3d:b0:90:30:41:1f:9f:9d:dc:92:28:28:c4:8b:43:48:
         f9:c2:f4:41:26:31:28:cf:38:e9:4f:18:63:d5:36:fc:bb:52:
         b6:5c:73:75:da:6b:ae:ad:4e:bc:05:e9:1d:a5:f6:d6:ed:ed:
         b4:34:d8:48:14:34:df:27:bb:bc:90:70:c3:70:31:a9:2d:e1:
         f7:38:a1:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:22:11 2025 by rpki-client