Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a653030353a3a2f34382d313238203d3e203532353830.roa
File:                     323830343a6366383a653030353a3a2f34382d313238203d3e203532353830.roa (raw, json)
Hash identifier:          z3xNeGtug3RRdFKR5yNkFyfBqc51QUOKfmxXa9Zsvbc=
Subject key identifier:   AB:A2:EE:1C:68:DF:49:99:C3:53:F3:74:10:9E:7D:68:BB:81:22:6A
Certificate issuer:       /CN=FF36173E097169BA044538B64258000B42FABD8C
Certificate serial:       3472532344EF09125F6CD023AA61B0A1CF7F8FE5
Authority key identifier: FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a653030353a3a2f34382d313238203d3e203532353830.roa
Signing time:             Fri 14 Feb 2025 19:24:15 +0000
ROA not before:           Fri 14 Feb 2025 19:19:15 +0000
ROA not after:            Fri 13 Feb 2026 19:24:15 +0000
asID:                     52580
IP address blocks:        2804:cf8:e005::/48 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:72:53:23:44:ef:09:12:5f:6c:d0:23:aa:61:b0:a1:cf:7f:8f:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF36173E097169BA044538B64258000B42FABD8C
        Validity
            Not Before: Feb 14 19:19:15 2025 GMT
            Not After : Feb 13 19:24:15 2026 GMT
        Subject: CN=ABA2EE1C68DF4999C353F374109E7D68BB81226A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a3:c4:3c:35:65:3a:08:b5:d3:63:7b:b7:34:
                    32:b8:22:68:44:70:52:a7:c8:b5:57:31:05:9f:f4:
                    1e:8f:e2:fd:ba:f5:53:5f:5b:4b:2f:84:e7:21:37:
                    a7:13:e5:ff:a6:44:1e:a4:07:e7:d8:f2:49:44:d1:
                    bd:7d:3c:5a:48:49:e5:19:0f:08:c2:fa:ac:1d:a5:
                    ef:61:dc:60:8f:37:74:9c:1a:84:22:27:6b:19:31:
                    c2:90:37:23:86:73:56:51:e1:a1:92:18:85:99:56:
                    dd:85:09:b8:17:25:b9:c2:9e:22:c4:89:f5:a0:3f:
                    6e:37:e2:9a:8a:88:00:22:ca:10:5c:8d:82:9e:cd:
                    32:87:b4:7c:6b:2c:ce:e4:d3:e2:53:be:04:e3:3e:
                    09:50:80:7e:40:28:cf:79:15:b8:b8:9f:03:fc:43:
                    87:5c:2d:7f:c5:71:04:8d:80:9b:23:61:37:9a:bf:
                    0a:b9:2d:dc:fc:43:88:be:c6:3e:7c:9a:75:eb:cc:
                    ca:20:9d:66:cd:67:0e:19:f5:f9:41:35:ae:10:0c:
                    e2:1f:78:8d:e5:f4:cd:f9:76:cf:af:50:4a:f0:2a:
                    35:56:3a:b3:c4:39:50:95:19:5b:69:1b:15:0b:c9:
                    c5:ff:62:5c:68:ac:42:17:b9:f9:85:70:f2:a4:18:
                    a3:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:A2:EE:1C:68:DF:49:99:C3:53:F3:74:10:9E:7D:68:BB:81:22:6A
            X509v3 Authority Key Identifier:
                keyid:FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/FF36173E097169BA044538B64258000B42FABD8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a653030353a3a2f34382d313238203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cf8:e005::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:3e:fc:b4:6c:db:6a:45:a3:6f:b8:7f:02:24:1c:9b:f7:db:
         8e:4b:83:1d:d5:73:51:e8:cd:f4:40:ec:f4:e4:f2:f7:cb:97:
         9a:92:11:ae:c7:02:cd:e2:63:4a:f9:16:04:7b:36:1b:91:5e:
         7a:bf:4a:f4:4f:59:d8:04:fe:71:19:48:bc:04:2e:1c:22:11:
         52:a3:17:b9:7c:c1:5e:da:4a:84:50:e2:c6:d1:f3:da:b6:23:
         a7:f1:1f:de:01:10:95:ef:49:f0:75:d1:fd:53:42:c9:f2:2f:
         5a:5c:b0:a7:10:ac:cb:84:6c:34:3a:30:99:47:73:1f:a4:4d:
         c4:3f:f7:bf:f5:8f:6d:ce:4d:40:45:92:81:6b:20:76:aa:2a:
         59:ab:f3:d4:4a:ae:2c:20:58:49:14:de:00:74:6f:90:1c:e6:
         48:c0:aa:55:67:6a:88:cc:d7:d4:27:29:47:6f:2b:74:a0:68:
         f0:2c:0c:57:68:83:01:1e:42:05:fd:10:71:aa:0f:a6:7f:35:
         6b:85:88:71:e4:1d:fb:e0:23:67:07:35:46:ad:0d:2d:86:b8:
         83:ec:6b:76:0c:09:c7:26:31:64:e8:eb:97:f9:10:a8:10:bb:
         81:4b:f3:4d:9e:b1:77:8c:c9:fc:f8:e4:bf:11:b2:e7:fd:2d:
         17:26:0f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:49:49 2025 by rpki-client