Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a333a3a2f34382d3438203d3e203532353830.roa
File:                     323830343a6366383a333a3a2f34382d3438203d3e203532353830.roa (raw, json)
Hash identifier:          H1X8kESA8A6oPQq+nItVK20A7FzFIle7tiQdN25QIt8=
Subject key identifier:   88:F9:9B:10:63:D7:1E:86:6B:5A:36:8C:F8:A3:96:A6:5E:77:61:2B
Certificate issuer:       /CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
Certificate serial:       1D9D0592620D16A30C034C5D846E4BC128A9CE2B
Authority key identifier: E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a333a3a2f34382d3438203d3e203532353830.roa
Signing time:             Sat 06 Jan 2024 19:04:01 +0000
ROA not before:           Sat 06 Jan 2024 18:59:01 +0000
ROA not after:            Sat 04 Jan 2025 19:04:01 +0000
asID:                     52580
IP address blocks:        2804:cf8:3::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:9d:05:92:62:0d:16:a3:0c:03:4c:5d:84:6e:4b:c1:28:a9:ce:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
        Validity
            Not Before: Jan  6 18:59:01 2024 GMT
            Not After : Jan  4 19:04:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5b:ca:e6:2e:49:b3:9e:8d:2c:cd:29:e0:81:
                    9a:c8:c6:17:7f:12:74:fc:14:3f:7d:96:33:7e:00:
                    0b:80:49:97:7c:ca:e0:e1:c7:a8:e8:4a:90:f4:19:
                    35:10:f7:8f:e8:b2:a7:21:d1:88:93:13:11:8c:fe:
                    18:1d:f0:74:75:20:b0:2a:f6:06:0e:f6:c7:96:99:
                    f7:78:06:ab:72:70:2c:b5:ae:d3:7f:9f:94:19:a0:
                    da:8a:1c:29:80:bb:5f:a5:87:9c:91:93:56:88:1a:
                    42:1a:c0:3d:4b:c5:d6:41:af:d9:9a:52:f9:d8:14:
                    9f:73:21:16:fe:90:31:77:1a:df:71:d1:ff:55:77:
                    1e:a4:5e:71:43:c8:6f:9a:49:76:39:95:18:76:bb:
                    06:45:8b:70:49:82:2a:be:99:af:b4:0d:4e:19:4c:
                    68:75:0d:39:05:de:fa:14:0c:31:c7:8e:e6:7b:39:
                    6a:c5:35:91:bf:ac:f8:3c:93:c9:3d:fb:a8:d4:5c:
                    58:2f:a6:d0:f8:e5:43:c1:28:e0:f5:69:64:8d:0e:
                    8f:8e:ed:31:95:59:e8:2d:fe:ab:25:f1:21:b9:ae:
                    e7:d6:d1:5d:1c:c1:35:bf:a6:8b:35:01:44:c2:2a:
                    39:97:97:b7:38:e7:d9:82:00:80:96:5f:45:0d:d0:
                    ed:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:F9:9B:10:63:D7:1E:86:6B:5A:36:8C:F8:A3:96:A6:5E:77:61:2B
            X509v3 Authority Key Identifier:
                keyid:E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a333a3a2f34382d3438203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cf8:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         00:c6:ad:86:3b:8b:4e:1a:34:bf:a4:24:13:16:0d:dd:07:63:
         20:f5:fa:26:63:df:8e:6c:bf:56:f7:9b:84:44:44:5e:5b:0d:
         82:a4:8a:66:82:8d:23:d4:dc:75:7d:4c:6d:08:40:58:e1:09:
         60:30:03:45:72:22:29:26:c0:bc:70:47:89:50:0f:09:42:c7:
         62:0e:4d:14:72:56:1b:b4:dc:96:44:63:d6:da:0f:d4:eb:7a:
         47:b1:ad:90:4f:d3:4e:12:80:9f:71:d0:37:76:9b:e1:60:eb:
         03:2d:5f:b6:26:24:cb:83:f6:be:48:6c:a6:15:d5:a1:ba:ed:
         bc:1e:78:28:2e:0b:5f:32:13:89:a7:5f:6d:33:f5:f0:af:3c:
         e6:0c:e9:40:67:99:cb:34:5e:ce:dc:ac:60:38:d1:58:60:72:
         21:74:23:70:5f:c3:d0:9f:15:e4:c1:bd:bd:f3:1e:a2:9a:12:
         d6:f6:11:7a:d7:e3:b1:de:99:36:5c:6d:d2:fb:52:30:3c:e3:
         ae:34:6d:90:8a:e3:30:bb:f7:f4:b8:5c:fb:cb:e6:4a:15:94:
         55:40:dc:fa:83:a6:ee:87:05:28:d5:cf:38:5c:3f:a2:5a:c2:
         b4:82:a4:93:14:17:55:41:5b:57:11:67:1a:5b:7b:ad:8d:a9:
         61:eb:70:b0
-----BEGIN CERTIFICATE-----
MIIHRDCCBiygAwIBAgIUHZ0FkmINFqMMA0xdhG5LwSipziswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTJGQzExMzU1MjdBRjk2NDVBNzNDOUFFMDI4MkFFNzdB
REM5RTI1QzAeFw0yNDAxMDYxODU5MDFaFw0yNTAxMDQxOTA0MDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTg1QkNBRTYyRTQ5QjM5RThE
MkNDRDI5RTA4MTlBQzhDNjE3N0YxMjc0RkMxNDNGN0Q5NjMzN0UwMDBCODA0OTk3
N0NDQUUwRTFDN0E4RTg0QTkwRjQxOTM1MTBGNzhGRThCMkE3MjFEMTg4OTMxMzEx
OENGRTE4MURGMDc0NzUyMEIwMkFGNjA2MEVGNkM3OTY5OUY3NzgwNkFCNzI3MDJD
QjVBRUQzN0Y5Rjk0MTlBMERBOEExQzI5ODBCQjVGQTU4NzlDOTE5MzU2ODgxQTQy
MUFDMDNENEJDNUQ2NDFBRkQ5OUE1MkY5RDgxNDlGNzMyMTE2RkU5MDMxNzcxQURG
NzFEMUZGNTU3NzFFQTQ1RTcxNDNDODZGOUE0OTc2Mzk5NTE4NzZCQjA2NDU4Qjcw
NDk4MjJBQkU5OUFGQjQwRDRFMTk0QzY4NzUwRDM5MDVERUZBMTQwQzMxQzc4RUU2
N0IzOTZBQzUzNTkxQkZBQ0Y4M0M5M0M5M0RGQkE4RDQ1QzU4MkZBNkQwRjhFNTQz
QzEyOEUwRjU2OTY0OEQwRThGOEVFRDMxOTU1OUU4MkRGRUFCMjVGMTIxQjlBRUU3
RDZEMTVEMUNDMTM1QkZBNjhCMzUwMTQ0QzIyQTM5OTc5N0I3MzhFN0Q5ODIwMDgw
OTY1RjQ1MEREMEVERDEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAqFvK5i5Js56NLM0p4IGayMYXfxJ0/BQ/fZYzfgALgEmXfMrg4ceo
6EqQ9Bk1EPeP6LKnIdGIkxMRjP4YHfB0dSCwKvYGDvbHlpn3eAarcnAsta7Tf5+U
GaDaihwpgLtfpYeckZNWiBpCGsA9S8XWQa/ZmlL52BSfcyEW/pAxdxrfcdH/VXce
pF5xQ8hvmkl2OZUYdrsGRYtwSYIqvpmvtA1OGUxodQ05Bd76FAwxx47mezlqxTWR
v6z4PJPJPfuo1FxYL6bQ+OVDwSjg9WlkjQ6Pju0xlVnoLf6rJfEhua7n1tFdHME1
v6aLNQFEwio5l5e3OOfZggCAll9FDdDt0QIDAQABo4ICUjCCAk4wHQYDVR0OBBYE
FIj5mxBj1x6Ga1o2jPijlqZed2ErMB8GA1UdIwQYMBaAFOL8ETVSevlkWnPJrgKC
rnetyeJcMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hwVDhqaUJXbXlOM1J4
bmpHb1BjWUdwVlJ3dVZGM2RNVndSZXYzRk56dGkxLzAvRTJGQzExMzU1MjdBRjk2
NDVBNzNDOUFFMDI4MkFFNzdBREM5RTI1Qy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9FMkZDMTEzNTUyN0FGOTY0NUE3M0M5QUUwMjgyQUU3N0FEQzlF
MjVDLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9IcFQ4amlCV215TjNSeG5qR29Q
Y1lHcFZSd3VWRjNkTVZ3UmV2M0ZOenRpMS8wLzMyMzgzMDM0M2E2MzY2MzgzYTMz
M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzUzMjM1MzgzMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgE
DPgAAzANBgkqhkiG9w0BAQsFAAOCAQEAAMathjuLTho0v6QkExYN3QdjIPX6JmPf
jmy/VvebhEREXlsNgqSKZoKNI9TcdX1MbQhAWOEJYDADRXIiKSbAvHBHiVAPCULH
Yg5NFHJWG7TclkRj1toP1Ot6R7GtkE/TThKAn3HQN3ab4WDrAy1ftiYky4P2vkhs
phXVobrtvB54KC4LXzITiadfbTP18K885gzpQGeZyzReztysYDjRWGByIXQjcF/D
0J8V5MG9vfMeopoS1vYRetfjsd6ZNlxt0vtSMDzjrjRtkIrjMLv39Lhc+8vmShWU
VUDc+oOm7ocFKNXPOFw/olrCtIKkkxQXVUFbVxFnGlt7rY2pYetwsA==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:34:32 2025 by rpki-client