Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31373a3a2f34382d3438203d3e203532353830.roa
File:                     323830343a6366383a31373a3a2f34382d3438203d3e203532353830.roa (raw, json)
Hash identifier:          2MUmny/ERwqIdGXBw8/erEgP7kaqTZphUnsfX8YPCTM=
Subject key identifier:   93:E5:B0:5C:4C:32:60:9C:6F:CD:FF:58:4F:9A:22:A1:43:44:7E:58
Certificate issuer:       /CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
Certificate serial:       2147240AA14BD3A8724B23AEA22919BD3A7CC608
Authority key identifier: E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31373a3a2f34382d3438203d3e203532353830.roa
Signing time:             Wed 12 Jul 2023 14:35:31 +0000
ROA not before:           Wed 12 Jul 2023 14:30:31 +0000
ROA not after:            Wed 10 Jul 2024 14:35:31 +0000
asID:                     52580
IP address blocks:        2804:cf8:17::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:47:24:0a:a1:4b:d3:a8:72:4b:23:ae:a2:29:19:bd:3a:7c:c6:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
        Validity
            Not Before: Jul 12 14:30:31 2023 GMT
            Not After : Jul 10 14:35:31 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:db:82:23:b0:01:3a:e6:12:88:3a:10:f0:6d:
                    59:2c:50:79:a7:70:23:44:c0:0f:6b:8b:91:a1:46:
                    5f:de:a7:5d:3f:62:ea:e8:de:4a:f6:57:16:22:d7:
                    3d:0e:4f:7e:c6:f1:04:78:fc:1a:ee:f1:41:bb:bf:
                    fc:41:72:b2:5e:69:25:40:0b:01:9a:24:3b:7d:16:
                    b9:34:f1:cc:2b:ee:d7:e9:bf:24:08:bc:e6:b8:50:
                    04:b6:a5:e7:9e:0c:06:c4:19:d7:5b:3c:b6:13:00:
                    88:43:9e:e2:8c:08:0a:e0:9d:09:a0:73:04:44:95:
                    5f:4d:0a:b7:56:c7:64:69:31:1f:7a:f6:f7:8f:02:
                    38:01:b7:41:0a:91:88:a1:93:76:f9:64:74:3b:93:
                    5a:59:e9:91:c7:4b:ec:4a:5b:67:54:f8:39:ec:e8:
                    26:e3:02:3c:d4:69:89:c2:17:ef:51:03:26:21:33:
                    4a:87:db:1a:eb:e0:55:c0:ed:3e:0c:07:96:16:f2:
                    92:31:84:57:c8:d6:ed:40:80:c1:fd:9d:a2:a2:56:
                    42:97:b3:bc:93:58:18:23:47:d4:5a:ac:95:68:6f:
                    ff:3e:d6:af:e5:8f:c4:f4:a1:79:bb:d8:80:b4:25:
                    87:63:22:bd:12:da:e6:76:e8:ee:5c:ff:97:7e:8e:
                    58:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:E5:B0:5C:4C:32:60:9C:6F:CD:FF:58:4F:9A:22:A1:43:44:7E:58
            X509v3 Authority Key Identifier:
                keyid:E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31373a3a2f34382d3438203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cf8:17::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:0f:22:a5:30:bf:62:6c:91:5b:15:8a:6b:b2:d9:a5:ee:1d:
         cb:c6:2a:2a:75:20:dc:01:54:81:41:78:37:ba:db:60:33:c7:
         2c:8b:a4:8d:49:f6:4a:7a:49:22:93:55:cf:0c:42:b0:d6:32:
         82:1f:ba:97:ef:34:bf:b6:31:8c:69:84:b8:15:bc:2e:23:f9:
         3f:bf:c1:06:8d:8f:d3:fd:b3:f8:79:71:19:aa:34:49:50:3c:
         d2:87:5b:d0:38:fb:1e:1d:25:db:37:5a:85:3d:7c:b4:6e:a3:
         50:2b:fd:76:ff:de:d5:b7:f3:56:1c:d8:3f:20:a0:f2:a0:6e:
         b3:a1:43:28:83:a2:62:a2:2a:f9:a1:ee:d0:0f:b1:bd:0e:af:
         bc:88:5d:26:cd:f0:a0:fc:62:15:49:69:ab:ea:a5:ec:8a:39:
         ec:d8:fb:8b:03:6f:26:d8:52:a5:c5:f1:17:eb:c1:c5:15:96:
         a4:7d:e6:0b:2a:2e:e5:07:11:1d:7c:38:53:58:d1:c8:16:09:
         8d:0c:ba:5f:1b:d9:bb:b7:d6:ae:81:e5:09:6e:53:f9:f5:eb:
         92:f6:b2:22:38:f1:ac:10:66:22:60:5c:46:29:d5:07:df:ef:
         7c:2b:87:00:1e:73:5a:40:ab:e0:c4:46:ef:d6:9d:58:ab:8f:
         18:f1:98:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:21 2025 by rpki-client