Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a323a3a2f34382d3438203d3e203532353830.roa
File:                     323830343a6366383a323a3a2f34382d3438203d3e203532353830.roa (raw, json)
Hash identifier:          JSw2ySI2NGgtri1idPiwhFtJmLr0tKf1MfbNsn84Kd4=
Subject key identifier:   E4:61:F1:E4:5B:4A:36:E3:CD:32:25:BE:4A:43:00:F4:F0:86:F2:68
Certificate issuer:       /CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
Certificate serial:       1D95D233CE580FD325F8335FF4D7ABCAC7DCB7F6
Authority key identifier: E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a323a3a2f34382d3438203d3e203532353830.roa
Signing time:             Sat 06 Jan 2024 19:06:00 +0000
ROA not before:           Sat 06 Jan 2024 19:01:00 +0000
ROA not after:            Sat 04 Jan 2025 19:06:00 +0000
asID:                     52580
IP address blocks:        2804:cf8:2::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:95:d2:33:ce:58:0f:d3:25:f8:33:5f:f4:d7:ab:ca:c7:dc:b7:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
        Validity
            Not Before: Jan  6 19:01:00 2024 GMT
            Not After : Jan  4 19:06:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:f9:ee:d0:59:91:e7:70:30:4f:8e:9f:4c:d4:
                    64:0a:60:dd:60:bd:80:0d:50:d3:3b:2e:23:4c:23:
                    bf:18:bf:ce:85:a2:ab:46:cc:65:30:5d:a1:5b:f9:
                    db:d8:b5:32:f1:0d:ce:a7:3f:a0:b3:8b:2d:3e:06:
                    1a:91:93:2d:37:5b:e4:49:5a:50:8f:a8:e6:b8:57:
                    2d:45:b9:af:17:e3:68:fe:d3:0a:d5:2f:9d:9a:1e:
                    f2:6f:bd:28:fa:92:5a:bb:1e:77:04:4d:a6:96:00:
                    fc:39:58:2c:66:b9:a6:43:20:a3:8f:3c:55:28:98:
                    55:fc:b1:f7:98:cb:29:b4:c9:4c:57:96:e8:a5:33:
                    4b:a1:6e:a3:7b:63:67:49:4c:ec:f2:b8:fd:86:da:
                    9c:d9:f0:b8:91:2b:e0:78:83:8d:39:7a:9b:a1:bc:
                    da:4c:54:91:c4:bc:9a:1d:a2:72:4d:57:f5:19:14:
                    7a:c6:c5:ed:1c:5a:56:38:fb:61:fd:7e:c0:4d:fa:
                    e7:a8:b0:b2:e4:15:6e:c5:5d:dd:27:7f:f4:e8:29:
                    f5:d3:13:e1:93:03:2a:4f:0a:6f:de:1b:ad:60:89:
                    f0:3e:8e:b5:3b:49:45:ce:53:d4:b8:e5:f7:69:34:
                    61:4e:2d:9c:ad:b5:ec:c0:d7:95:bc:cd:e5:93:1b:
                    d5:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:61:F1:E4:5B:4A:36:E3:CD:32:25:BE:4A:43:00:F4:F0:86:F2:68
            X509v3 Authority Key Identifier:
                keyid:E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a323a3a2f34382d3438203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cf8:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         a2:df:f8:ac:5c:0a:2b:05:ff:70:cf:4b:f1:0a:44:ea:e3:5d:
         e0:e7:2c:7b:98:c1:5f:04:97:ea:cc:35:dd:90:72:13:47:14:
         33:03:1f:29:26:3d:7e:c1:6f:b4:66:e9:e2:7c:0a:91:2a:b2:
         68:18:93:a2:4c:6e:23:1a:05:10:d6:f9:b0:a6:46:a5:45:7d:
         6e:a8:f8:65:08:2b:3d:f3:79:bd:bd:0f:9d:ae:d0:28:86:9f:
         25:07:bb:2d:95:f5:5a:31:70:ea:51:a0:78:33:43:c9:f0:81:
         ad:78:e0:8e:99:6b:97:d0:6e:cc:ed:d3:c2:62:5d:3e:6b:a7:
         e2:36:06:0d:57:7c:44:68:0f:30:3f:7d:20:d2:17:94:1b:a6:
         00:45:42:86:a5:20:5d:f4:cc:5e:d7:dc:7a:27:dd:6f:77:b0:
         77:75:9b:a0:b0:25:2a:9c:33:02:ff:d5:f0:e2:35:23:1e:e9:
         f2:63:37:47:41:8f:ee:df:95:54:6d:1b:09:06:a3:b1:0a:d1:
         ce:af:8e:5b:79:d7:91:01:1f:29:3d:c6:4d:20:ad:f3:d3:32:
         6a:26:38:f3:75:9e:20:75:c4:70:37:d8:f1:c3:0b:a6:15:7f:
         cd:17:8d:bf:52:11:87:c0:0b:b6:ea:40:56:83:1b:ed:b5:56:
         b3:73:c8:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:31:31 2025 by rpki-client