Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a633030363a3a2f34382d3438203d3e203532353830.roa
File:                     323830343a6366383a633030363a3a2f34382d3438203d3e203532353830.roa (raw, json)
Hash identifier:          VwiDwpzkv1WDp84HrNQQlFjoEL4HFNvC17UwXxbDUdQ=
Subject key identifier:   B1:F8:E1:AA:F1:0F:17:F7:BE:8D:10:4D:4A:B5:8E:5B:64:AF:C5:03
Certificate issuer:       /CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
Certificate serial:       7239F51E230C745ABA6A3A1E75D10468DBE3BFC0
Authority key identifier: E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a633030363a3a2f34382d3438203d3e203532353830.roa
Signing time:             Mon 01 Jan 2024 12:54:00 +0000
ROA not before:           Mon 01 Jan 2024 12:49:00 +0000
ROA not after:            Mon 30 Dec 2024 12:54:00 +0000
asID:                     52580
IP address blocks:        2804:cf8:c006::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:39:f5:1e:23:0c:74:5a:ba:6a:3a:1e:75:d1:04:68:db:e3:bf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
        Validity
            Not Before: Jan  1 12:49:00 2024 GMT
            Not After : Dec 30 12:54:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1f:3b:61:bc:ea:4d:e2:0a:2e:9a:85:69:99:
                    64:c3:e7:09:da:85:3c:37:d2:b2:f2:03:36:c2:c3:
                    ad:b4:ed:36:ac:f5:c9:db:b7:b0:d7:ee:ea:57:f3:
                    fb:7f:98:6b:29:8b:1f:4b:11:b6:09:a4:a1:cb:16:
                    05:96:dc:cc:a1:8e:17:8c:d9:58:4f:b2:5a:9f:65:
                    ae:46:05:45:48:da:3c:92:68:b1:93:8f:e3:c1:31:
                    7a:4e:01:ef:b4:54:91:b9:ce:b7:c0:7b:a5:fb:95:
                    00:b0:bb:81:31:d2:7a:36:f9:17:3b:46:0d:ac:39:
                    b1:57:95:60:00:55:11:50:e0:e8:c7:e8:06:73:a6:
                    33:c2:e6:c7:77:28:d8:02:67:70:c7:14:c0:66:c8:
                    95:98:d3:67:d9:bd:93:3e:0e:c6:57:aa:bf:97:e8:
                    bf:33:0a:8e:29:3d:f8:2c:a4:58:09:91:bc:51:07:
                    71:3d:1e:86:ef:9c:d7:a4:1e:e5:c1:d9:06:14:f4:
                    c6:e0:ca:95:5d:31:40:36:d6:75:55:71:5b:b3:d6:
                    37:36:70:9a:c9:06:35:d9:8a:ba:12:b3:2e:41:14:
                    44:73:c8:2a:9d:44:44:9b:8a:e6:16:88:5a:0c:15:
                    9b:95:fc:98:8d:18:73:c4:e6:18:c0:d0:30:38:9e:
                    a4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:F8:E1:AA:F1:0F:17:F7:BE:8D:10:4D:4A:B5:8E:5B:64:AF:C5:03
            X509v3 Authority Key Identifier:
                keyid:E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a633030363a3a2f34382d3438203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cf8:c006::/48

    Signature Algorithm: sha256WithRSAEncryption
         9e:7e:73:3f:99:42:3b:d2:49:b7:05:cd:a5:37:73:26:6c:81:
         3e:cb:d2:12:19:c0:be:f1:0f:de:8c:f9:83:03:5a:d8:62:ec:
         d5:3f:b4:c5:14:4f:98:b5:51:e0:82:fd:be:e6:65:76:36:77:
         77:6f:6d:7f:e7:ed:c7:67:3e:68:28:c9:df:a4:ba:fa:86:4f:
         c9:f2:3a:40:3e:4f:dc:2b:f8:b9:3c:c0:0f:d2:8b:0c:f2:c2:
         01:0f:39:4b:76:62:09:49:da:7f:b7:10:59:84:74:3e:b5:0e:
         72:30:4c:7e:a2:89:e5:16:31:a5:66:dd:31:fa:12:60:b0:06:
         ae:1a:b1:5b:4a:e6:b5:94:2f:7a:6b:64:bd:89:84:19:80:39:
         f4:1f:ab:7d:33:04:1e:ed:64:c5:fb:2e:b7:c2:1d:68:01:bc:
         63:d6:e2:33:71:12:f8:04:7b:20:3d:c9:38:9f:ae:35:72:52:
         69:2a:f4:b9:b8:65:50:98:e8:d8:7d:16:3e:6e:49:ec:b6:94:
         2c:a3:d5:64:a1:7a:af:43:6e:d8:22:02:3f:24:72:d5:7a:09:
         e6:2d:65:04:15:84:83:b9:c8:b8:f2:c6:15:23:b0:d2:a7:ec:
         1a:3c:5c:1a:6e:c4:19:88:74:41:51:b2:5f:74:f0:4e:d8:9e:
         5c:d3:77:12
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:27:24 2025 by rpki-client