Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a633030383a3a2f34382d313238203d3e203532353830.roa
File:                     323830343a6366383a633030383a3a2f34382d313238203d3e203532353830.roa (raw, json)
Hash identifier:          HA2dA+hfMYmm9j/7fi8Zj6BAxjQ1rmfswRorqgAZfVg=
Subject key identifier:   C9:22:F3:87:57:5D:CC:14:5D:9C:1A:38:37:42:25:F0:5E:5A:03:8B
Certificate issuer:       /CN=FF36173E097169BA044538B64258000B42FABD8C
Certificate serial:       3A984EF254F1B7040B655EDCB2A53ACAC5AA519E
Authority key identifier: FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a633030383a3a2f34382d313238203d3e203532353830.roa
Signing time:             Fri 14 Feb 2025 19:28:59 +0000
ROA not before:           Fri 14 Feb 2025 19:23:59 +0000
ROA not after:            Fri 13 Feb 2026 19:28:59 +0000
asID:                     52580
IP address blocks:        2804:cf8:c008::/48 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:98:4e:f2:54:f1:b7:04:0b:65:5e:dc:b2:a5:3a:ca:c5:aa:51:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF36173E097169BA044538B64258000B42FABD8C
        Validity
            Not Before: Feb 14 19:23:59 2025 GMT
            Not After : Feb 13 19:28:59 2026 GMT
        Subject: CN=C922F387575DCC145D9C1A38374225F05E5A038B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c6:34:c2:0c:3c:bd:3f:29:3e:22:11:4c:21:
                    7d:ac:2f:11:f8:37:c1:5c:8a:29:0c:9a:0f:d6:c0:
                    56:b3:8b:61:10:f8:71:8b:53:cf:4a:f2:2b:35:97:
                    fc:e9:61:26:b8:c4:d6:f0:20:ec:7b:53:cd:62:d6:
                    fc:50:73:cc:36:a6:91:11:c2:5a:a7:f4:a1:19:75:
                    cf:30:1b:50:87:af:3a:20:fd:f3:04:3b:d0:ba:5c:
                    2a:30:52:9e:8d:76:fb:ad:6a:77:1e:17:f7:8a:43:
                    a7:68:d3:4a:25:c6:c3:52:0d:09:b3:98:19:af:6c:
                    05:b7:d1:bc:39:25:54:85:c8:d7:b9:c7:b1:a4:84:
                    f3:53:70:fa:90:a9:18:cc:89:b5:30:60:ad:c5:6f:
                    cf:f7:5e:15:e8:45:c9:82:bc:c7:2f:12:d6:1e:00:
                    c2:c1:9e:e0:69:fc:5e:5e:1e:88:ca:65:a5:36:4b:
                    1c:d5:74:10:e0:c6:6e:47:f8:4c:4d:46:72:d4:d7:
                    6a:47:e3:95:9d:2f:6f:7f:37:3e:97:3e:10:9c:b2:
                    5e:8e:0d:c0:cb:0a:77:7d:d6:0b:3e:f9:51:e2:24:
                    2c:22:34:cc:2c:dc:df:3c:d1:dd:aa:38:2b:3c:82:
                    fc:59:0b:ef:e6:78:3a:49:1d:23:79:05:17:43:77:
                    08:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:22:F3:87:57:5D:CC:14:5D:9C:1A:38:37:42:25:F0:5E:5A:03:8B
            X509v3 Authority Key Identifier:
                keyid:FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/FF36173E097169BA044538B64258000B42FABD8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a633030383a3a2f34382d313238203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cf8:c008::/48

    Signature Algorithm: sha256WithRSAEncryption
         2b:7e:13:e4:3e:96:28:8c:af:e1:bf:48:c9:11:67:95:39:9c:
         71:7c:37:05:5e:e6:73:53:b4:57:e0:68:fb:64:f6:4f:24:0c:
         73:38:99:a4:2c:14:36:c0:0e:66:41:fa:8a:04:61:0a:92:b2:
         1f:99:f0:a2:9a:94:9e:48:e6:fa:b4:7e:db:c4:09:13:32:ce:
         ce:ae:47:78:5b:c4:93:f5:f9:5a:8f:6b:d8:30:25:4a:31:bc:
         31:f8:62:61:08:61:83:71:40:6b:73:34:de:00:af:2f:30:50:
         cc:4a:92:4b:39:d2:76:ab:eb:22:9b:18:24:32:75:ef:93:79:
         25:03:b4:04:70:c3:9f:72:39:3f:3d:8c:ec:58:c2:f6:20:09:
         17:9d:52:7d:83:50:bb:64:5e:3d:c0:9d:fd:08:45:46:4b:9c:
         29:e0:ea:b1:35:ce:25:1b:fa:88:be:a9:b8:7d:5b:5a:1d:2a:
         a9:f1:33:ad:02:9a:67:91:bd:74:7b:64:e4:7f:5a:21:e3:60:
         e3:c0:d7:4d:55:12:b0:49:73:f5:32:0c:6a:5a:2e:4c:97:0e:
         32:31:d9:19:19:02:e3:a8:09:ce:2b:27:2c:92:41:0d:cd:0c:
         59:a1:21:72:cf:99:56:e4:47:85:80:d1:73:1a:4f:d6:7d:24:
         03:85:4d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:50:08 2025 by rpki-client