Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a633030313a3a2f34382d3438203d3e203532353830.roa
File:                     323830343a6366383a633030313a3a2f34382d3438203d3e203532353830.roa (raw, json)
Hash identifier:          Fkt1/yT17nALb7tIowrt4qAR8p3MwPc4MIgjPi1sL/0=
Subject key identifier:   55:F8:EF:E9:16:06:81:0F:AA:F1:79:99:6D:B8:D4:76:7D:AB:DB:ED
Certificate issuer:       /CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
Certificate serial:       7353E8D1437F8CC125B8E64DC64A7088018725D5
Authority key identifier: E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a633030313a3a2f34382d3438203d3e203532353830.roa
Signing time:             Sat 06 Jan 2024 19:02:00 +0000
ROA not before:           Sat 06 Jan 2024 18:57:00 +0000
ROA not after:            Sat 04 Jan 2025 19:02:00 +0000
asID:                     52580
IP address blocks:        2804:cf8:c001::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:53:e8:d1:43:7f:8c:c1:25:b8:e6:4d:c6:4a:70:88:01:87:25:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
        Validity
            Not Before: Jan  6 18:57:00 2024 GMT
            Not After : Jan  4 19:02:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:63:a4:b5:50:d9:8e:11:be:af:c7:15:26:65:
                    8e:33:96:66:23:33:a0:c1:ee:d3:7f:89:4f:ad:fa:
                    f6:88:4a:8f:1b:85:55:76:8b:d9:5f:9b:eb:a8:e4:
                    e2:f1:b4:4a:99:35:1f:26:0c:79:f8:0b:53:fc:d2:
                    0f:df:48:a2:8c:7c:11:b9:ec:01:cf:67:57:82:61:
                    fa:da:78:a5:a9:64:a4:f5:f1:b5:f1:e3:f9:12:98:
                    83:d1:21:98:db:75:94:73:33:14:03:37:b5:2e:77:
                    93:a5:0e:e0:85:71:f0:b5:52:fb:58:26:e9:e1:14:
                    27:46:50:01:54:f1:8a:cf:68:5a:c3:f9:f8:f4:ed:
                    df:67:6f:71:13:86:8b:df:36:29:04:34:88:54:a2:
                    7a:a5:41:3c:25:af:5d:62:b5:3d:e9:b9:31:18:43:
                    44:76:d7:60:a8:4f:35:a6:5f:4c:32:d1:e9:4e:25:
                    a4:71:7b:84:e3:17:0e:8d:28:a9:0c:ea:7b:db:99:
                    b5:00:17:4b:76:51:7d:c7:ee:61:ba:ca:30:6d:52:
                    e0:7e:c5:b8:4a:a2:7c:4a:d0:6d:06:49:49:74:71:
                    66:2e:52:9f:01:a0:5d:ad:ae:65:10:9f:b4:04:d7:
                    3e:f5:59:ed:b7:d8:e9:ab:84:aa:50:bb:ad:43:6c:
                    2e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:F8:EF:E9:16:06:81:0F:AA:F1:79:99:6D:B8:D4:76:7D:AB:DB:ED
            X509v3 Authority Key Identifier:
                keyid:E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a633030313a3a2f34382d3438203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cf8:c001::/48

    Signature Algorithm: sha256WithRSAEncryption
         59:93:46:7c:3a:e9:31:c5:08:30:e8:51:18:a5:df:ff:7c:d6:
         65:a6:9e:a9:06:a2:15:2f:b4:ab:ae:4d:55:17:ad:d4:91:64:
         49:bb:d0:ba:37:8e:87:bb:e1:66:1a:f6:a6:33:6c:14:9a:41:
         a2:84:9b:b1:89:7c:ba:29:3b:e9:34:06:b8:98:1a:b7:d5:5e:
         cc:8d:e5:72:d1:e0:6c:f5:4c:0c:4b:d6:51:32:1f:b2:92:99:
         be:37:7b:e4:0b:c6:55:7b:ee:84:b4:32:9f:0f:f4:fe:91:8a:
         90:78:a8:84:c3:ae:83:06:24:75:92:44:5b:32:f8:93:cc:43:
         2d:81:d2:4d:dc:7e:31:5e:e4:b3:cd:23:54:43:ff:4c:10:63:
         81:ec:e8:29:b0:9f:b7:6d:ac:c4:d0:ef:9e:7b:96:ef:e4:bd:
         82:31:be:93:ad:29:6b:11:2f:78:97:40:b8:15:fa:65:54:1c:
         65:0b:a8:16:93:98:f9:8d:ae:f9:84:e0:aa:7d:92:53:3e:a9:
         fe:ac:d9:59:ab:7b:8c:e4:58:d9:37:8c:f7:6a:9a:02:2b:54:
         e3:c6:4b:e3:b5:48:15:38:82:01:fe:a2:94:ab:6f:c9:a2:82:
         e2:cb:1a:31:2e:6d:bf:a9:62:e5:d8:e7:8d:32:1c:ad:f7:b9:
         53:86:62:14
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:30:35 2025 by rpki-client