Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a643a3a2f34382d313238203d3e203532353830.roa
File:                     323830343a6366383a643a3a2f34382d313238203d3e203532353830.roa (raw, json)
Hash identifier:          HhuNPXa0YqtpeEX/2JdXQAG7K9RUb2cEpd9//4dCDpI=
Subject key identifier:   4D:7D:2B:DF:7F:5F:A1:9A:AF:55:04:A9:BF:1F:D3:E7:5D:5E:A0:5E
Certificate issuer:       /CN=FF36173E097169BA044538B64258000B42FABD8C
Certificate serial:       486F504A93F2FCD8543E38DA11C50AC6827AAB66
Authority key identifier: FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a643a3a2f34382d313238203d3e203532353830.roa
Signing time:             Fri 14 Feb 2025 19:25:57 +0000
ROA not before:           Fri 14 Feb 2025 19:20:57 +0000
ROA not after:            Fri 13 Feb 2026 19:25:57 +0000
asID:                     52580
IP address blocks:        2804:cf8:d::/48 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:6f:50:4a:93:f2:fc:d8:54:3e:38:da:11:c5:0a:c6:82:7a:ab:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF36173E097169BA044538B64258000B42FABD8C
        Validity
            Not Before: Feb 14 19:20:57 2025 GMT
            Not After : Feb 13 19:25:57 2026 GMT
        Subject: CN=4D7D2BDF7F5FA19AAF5504A9BF1FD3E75D5EA05E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:75:41:e8:91:2d:1e:f0:66:c5:48:9d:32:81:
                    c7:70:49:7c:fd:17:cb:ba:24:d1:ba:48:63:0b:2e:
                    ef:39:0c:89:fb:43:8b:0f:33:07:53:2a:02:90:f0:
                    d0:9b:e4:86:68:4c:bd:e3:3c:de:bd:1a:6f:3d:5e:
                    93:dc:26:a9:a0:fa:f5:9f:d4:84:7f:8e:da:11:18:
                    8b:26:43:fa:5b:85:34:b3:84:a3:20:cd:1f:94:16:
                    2c:da:6f:cf:77:c2:04:08:8b:58:52:65:48:f6:b6:
                    29:eb:6a:90:3b:83:b0:1e:46:10:64:93:17:c5:56:
                    8d:02:4f:93:cc:1f:f8:97:5a:b4:6c:08:e8:ed:f0:
                    06:17:b3:21:73:80:86:b2:1f:52:68:7c:e5:90:c9:
                    67:a2:dd:b8:3f:82:f8:d0:46:62:37:14:35:91:60:
                    a9:09:44:eb:ed:00:52:33:17:62:4f:08:be:18:c8:
                    90:4f:4c:92:24:23:10:27:23:67:70:d9:d7:4d:4d:
                    63:60:e7:11:6f:6e:d0:92:db:92:e0:71:78:c1:27:
                    5f:14:54:af:84:52:03:1c:4e:0f:07:09:de:8d:d2:
                    72:9f:99:8f:d0:e4:d3:36:c8:00:52:a2:21:c7:bb:
                    6d:89:05:16:91:dd:02:71:f0:e8:61:81:85:a2:8e:
                    31:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:7D:2B:DF:7F:5F:A1:9A:AF:55:04:A9:BF:1F:D3:E7:5D:5E:A0:5E
            X509v3 Authority Key Identifier:
                keyid:FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/FF36173E097169BA044538B64258000B42FABD8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a643a3a2f34382d313238203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cf8:d::/48

    Signature Algorithm: sha256WithRSAEncryption
         92:35:3f:c4:44:1c:06:11:c4:fe:e7:79:3f:0b:8a:a9:85:c9:
         05:96:8f:d2:42:c7:87:05:66:d9:bd:ea:3c:e2:31:bd:3e:c1:
         a7:1d:bf:40:6d:81:b6:32:c7:1e:f3:5d:5d:d5:60:75:76:80:
         a4:a0:49:0b:e6:59:d4:04:72:0b:a4:4b:69:e5:74:6c:2b:c6:
         19:02:c6:7d:2d:38:34:be:04:ff:8d:83:d8:24:4b:1d:18:71:
         5c:6d:77:c3:13:e8:93:a1:87:91:ab:45:bb:0a:ff:c1:fc:25:
         d2:2f:06:8c:51:9f:ea:57:6c:a9:08:6b:ff:47:d2:5d:fc:e1:
         ea:7a:6e:bb:6f:07:a4:4a:41:12:74:28:a1:6e:8f:2b:82:bb:
         d2:72:ac:45:5d:95:d3:8c:00:f4:9c:f8:5d:f2:11:08:5e:07:
         40:2e:03:0d:cc:b6:38:4c:b3:fe:0c:25:9a:54:34:e6:a1:fb:
         a7:4d:b8:0b:b5:1b:c9:2c:e9:83:69:0e:70:3a:78:59:d8:03:
         05:49:de:dd:98:93:2d:cb:a0:0f:ef:4e:71:cc:3c:55:85:5f:
         66:7d:1c:88:ba:03:da:6a:e6:dd:7c:ef:c1:f1:1b:70:2d:5a:
         6e:b2:9d:1b:4a:b8:48:2f:3e:02:91:6b:b3:b0:0c:a3:39:23:
         7a:ee:a6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:15:00 2025 by rpki-client