Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a613a3a2f34382d3438203d3e203532353830.roa
File:                     323830343a6366383a613a3a2f34382d3438203d3e203532353830.roa (raw, json)
Hash identifier:          O0+W5XylSmuFNYd/f5/TtdSjqnIFdAGtQbRGvauVPmE=
Subject key identifier:   85:96:7F:AD:BF:A2:C0:81:66:5E:03:2C:D6:2E:9E:50:FB:9B:23:ED
Certificate issuer:       /CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
Certificate serial:       044270226B281EB90D038C1A25D4797851A77A03
Authority key identifier: E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a613a3a2f34382d3438203d3e203532353830.roa
Signing time:             Mon 20 Nov 2023 19:12:00 +0000
ROA not before:           Mon 20 Nov 2023 19:07:00 +0000
ROA not after:            Mon 18 Nov 2024 19:12:00 +0000
asID:                     52580
IP address blocks:        2804:cf8:a::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:42:70:22:6b:28:1e:b9:0d:03:8c:1a:25:d4:79:78:51:a7:7a:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
        Validity
            Not Before: Nov 20 19:07:00 2023 GMT
            Not After : Nov 18 19:12:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:04:38:4f:2d:45:95:5a:65:b4:69:a7:b3:ba:
                    3a:83:3c:7d:a2:e4:25:05:e7:2a:2d:63:aa:84:e2:
                    34:c8:72:37:62:59:ab:a4:7e:a9:d3:b0:5e:b1:80:
                    12:8e:13:1b:56:80:5a:97:bf:9b:90:af:07:c9:41:
                    2b:c0:9b:d6:89:7f:2c:56:10:23:15:83:14:84:e0:
                    cc:12:c2:d5:6f:e5:21:35:21:30:b4:0f:d1:d2:f8:
                    84:89:a3:92:09:ea:f0:b5:82:80:68:e5:3b:07:af:
                    90:07:13:54:00:4d:58:ce:27:55:b3:a0:c4:2c:9e:
                    64:3d:f2:ce:11:2d:58:99:3a:11:3b:09:36:fd:f3:
                    f2:eb:6f:64:01:5c:fd:c8:33:5c:46:72:b6:6f:e7:
                    06:4b:28:84:7e:96:43:32:2b:41:e0:4e:b8:3c:71:
                    36:d8:2a:2d:13:56:c7:64:0c:88:6d:fa:ec:23:f3:
                    45:08:31:b0:2f:05:fa:d5:cc:af:26:da:e5:a9:96:
                    f4:1c:d4:32:0e:dd:f6:59:f6:92:c4:75:e8:56:4b:
                    29:e9:70:f1:bf:48:a5:35:0d:85:d8:a9:1f:98:4c:
                    b2:30:eb:1a:10:90:ad:5a:b0:5f:7e:66:1e:ed:38:
                    15:93:7c:8a:98:53:1b:54:e2:72:d2:a7:dc:5d:87:
                    79:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:96:7F:AD:BF:A2:C0:81:66:5E:03:2C:D6:2E:9E:50:FB:9B:23:ED
            X509v3 Authority Key Identifier:
                keyid:E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a613a3a2f34382d3438203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cf8:a::/48

    Signature Algorithm: sha256WithRSAEncryption
         5a:82:f2:f4:7c:50:6f:33:5a:65:55:e0:30:81:ef:28:14:d8:
         0f:ae:99:5a:93:94:ec:23:41:cb:a5:82:c0:2f:66:5f:36:df:
         0c:6a:df:cb:66:79:88:76:fe:4f:6b:68:65:8c:93:c1:93:97:
         63:8e:08:87:b6:20:1d:cc:e5:d4:e3:df:9f:f4:7a:8e:2b:95:
         6b:46:e9:d9:d2:f4:81:4a:1b:ac:f6:15:7b:4e:45:3d:b9:e1:
         8f:72:5d:cd:66:b8:63:96:f8:58:03:2d:f1:07:50:e8:de:15:
         07:03:43:4b:e3:14:dd:ae:45:f3:bc:9a:c9:0a:b8:ed:88:7d:
         6d:69:8e:ad:bd:93:03:a8:40:ff:4a:2d:38:68:98:ba:07:af:
         70:e5:51:ec:9f:6f:b5:53:db:e0:75:78:09:4d:6e:0e:36:1e:
         2a:b6:13:47:16:fc:f0:76:75:76:f4:d3:43:71:82:11:ec:e5:
         cc:c1:91:dc:04:b9:6d:cf:bd:98:1b:93:e3:72:67:1e:37:fb:
         75:04:42:d6:7a:f0:77:20:56:35:42:c9:3f:4f:d9:c1:78:d6:
         cd:c1:04:e4:e1:08:c8:ab:eb:b2:ac:cd:ad:a6:ed:00:86:11:
         69:6c:84:78:80:aa:eb:9a:74:b9:c6:19:a0:e0:25:03:7f:4f:
         7c:d5:b4:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 11:33:36 2025 by rpki-client