Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a623a3a2f34382d313238203d3e203532353830.roa
File:                     323830343a6366383a623a3a2f34382d313238203d3e203532353830.roa (raw, json)
Hash identifier:          UzyEnb71oso6XenOewYLNCqcCMx13a3qy2tKorLdvlw=
Subject key identifier:   5B:CE:B7:84:1F:89:B0:E3:C5:C3:A0:A5:F3:55:0B:37:4A:B7:38:9C
Certificate issuer:       /CN=FF36173E097169BA044538B64258000B42FABD8C
Certificate serial:       3356A497384B302D74285417621CE9528340B7BA
Authority key identifier: FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a623a3a2f34382d313238203d3e203532353830.roa
Signing time:             Fri 14 Feb 2025 19:25:43 +0000
ROA not before:           Fri 14 Feb 2025 19:20:43 +0000
ROA not after:            Fri 13 Feb 2026 19:25:43 +0000
asID:                     52580
IP address blocks:        2804:cf8:b::/48 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:56:a4:97:38:4b:30:2d:74:28:54:17:62:1c:e9:52:83:40:b7:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF36173E097169BA044538B64258000B42FABD8C
        Validity
            Not Before: Feb 14 19:20:43 2025 GMT
            Not After : Feb 13 19:25:43 2026 GMT
        Subject: CN=5BCEB7841F89B0E3C5C3A0A5F3550B374AB7389C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8b:16:35:1f:58:59:19:07:50:49:ee:c2:06:
                    4a:bf:b5:d0:3d:9c:88:ee:2e:c4:54:2c:4d:fa:69:
                    30:d0:8d:6a:61:ae:28:f1:f3:37:fb:ab:de:a6:2d:
                    d1:9e:66:ab:ba:6d:5e:cf:9e:31:5a:31:5c:4d:5e:
                    fb:a9:a6:b8:81:18:19:28:23:50:d5:a4:32:32:ec:
                    bb:97:40:9a:17:8d:79:16:d9:38:48:09:76:5f:5a:
                    75:22:49:d0:d3:47:87:30:39:80:09:45:82:3c:07:
                    fd:cd:b5:f4:77:85:d1:f4:04:ef:8a:b9:aa:e7:96:
                    e6:df:5c:ed:ca:21:7a:86:11:2e:db:7b:92:bc:c2:
                    9a:7b:86:68:ca:0d:1e:db:73:a9:83:07:04:59:f5:
                    3f:79:5e:06:b6:b7:27:5b:a7:46:30:64:4b:c2:d9:
                    9c:2f:19:ca:d4:84:6d:77:02:d4:92:1b:27:4c:a6:
                    87:0d:bc:b2:3e:c6:20:c4:56:e7:75:74:21:48:71:
                    a5:c0:31:6a:e9:43:ed:8d:44:31:04:a7:a2:ee:a5:
                    78:ab:a3:17:50:fe:06:51:81:66:4c:6f:77:c3:40:
                    43:1c:ce:df:69:16:c0:f0:c8:0b:28:f5:e1:8d:c6:
                    bd:43:e5:e7:d2:72:56:9d:4e:d9:75:aa:00:6b:5c:
                    a8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:CE:B7:84:1F:89:B0:E3:C5:C3:A0:A5:F3:55:0B:37:4A:B7:38:9C
            X509v3 Authority Key Identifier:
                keyid:FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/FF36173E097169BA044538B64258000B42FABD8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a623a3a2f34382d313238203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cf8:b::/48

    Signature Algorithm: sha256WithRSAEncryption
         a4:62:8d:61:d1:c2:8c:5d:41:6a:47:4d:69:d6:74:20:73:53:
         f6:17:c9:19:64:83:d6:68:91:73:10:53:9f:dc:b0:e5:8e:54:
         8b:70:8d:1f:ae:38:6b:4e:0c:df:2b:20:5d:d9:be:a2:73:37:
         49:14:86:0c:3d:10:d2:88:66:5c:28:30:93:fa:0a:1a:bc:2c:
         ae:c8:70:4d:5f:7d:98:b4:e3:d1:a4:ba:12:99:62:f0:20:22:
         ec:ac:69:6b:ec:f8:e1:22:99:59:e5:2e:1a:bd:bf:d1:d7:f1:
         da:b2:24:9e:3b:5b:cd:1e:48:1a:7d:f9:a8:7b:1d:bf:09:06:
         26:b7:62:66:94:9c:76:da:b5:91:20:8a:aa:03:73:51:34:c4:
         a0:dc:23:3e:5f:03:c5:5c:d5:7f:f6:86:34:b9:c4:30:94:0a:
         b8:5f:64:2c:ee:b9:4d:26:06:e2:1b:3f:14:04:da:f1:02:45:
         9c:5d:9b:29:5a:1a:c9:8d:61:7c:c4:c2:9e:55:27:f0:08:3b:
         7f:df:64:dd:c8:0b:73:14:f5:dc:6e:69:be:47:f6:6e:43:1b:
         b1:38:6a:03:83:2d:9c:7f:43:0f:b3:8c:34:00:00:75:9e:66:
         ce:f0:4b:c6:7d:50:96:ab:ef:49:ce:aa:0e:79:c4:1c:a0:85:
         65:0a:ca:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:46:38 2025 by rpki-client