Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a663a3a2f34382d3438203d3e203532353830.roa
File:                     323830343a6366383a663a3a2f34382d3438203d3e203532353830.roa (raw, json)
Hash identifier:          Pm/oaeAsBH1anGvatTNuL4+ktzK19E4X1rtrG+zfq1I=
Subject key identifier:   0B:DA:D4:0D:CB:34:CB:8B:EB:85:89:F0:A1:AC:48:2C:B1:9F:3E:14
Certificate issuer:       /CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
Certificate serial:       2E491F358C797BCCFA6E27DA50C5FBE0756B083A
Authority key identifier: E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a663a3a2f34382d3438203d3e203532353830.roa
Signing time:             Tue 02 Apr 2024 18:24:00 +0000
ROA not before:           Tue 02 Apr 2024 18:19:00 +0000
ROA not after:            Tue 01 Apr 2025 18:24:00 +0000
asID:                     52580
IP address blocks:        2804:cf8:f::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:49:1f:35:8c:79:7b:cc:fa:6e:27:da:50:c5:fb:e0:75:6b:08:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
        Validity
            Not Before: Apr  2 18:19:00 2024 GMT
            Not After : Apr  1 18:24:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:bc:37:14:b7:e8:3a:00:b8:4e:df:f4:05:32:
                    dd:30:cf:71:09:fe:5a:be:0f:b8:63:e2:21:ec:0c:
                    10:25:21:c9:31:ce:d9:66:34:08:25:73:38:5f:44:
                    2a:d3:7a:31:bb:6f:6e:4e:1f:d3:68:b2:bd:4a:26:
                    d0:72:e1:fb:e2:07:b7:60:03:03:10:3a:30:8a:8d:
                    9b:f2:66:51:6d:cf:38:18:6c:c6:5f:50:da:28:e1:
                    af:e0:e8:c7:d1:52:e5:da:01:f6:77:26:2f:3a:a6:
                    de:de:0c:40:7e:06:4e:84:7c:bc:48:78:82:7d:a0:
                    2e:d6:8b:34:43:b2:69:9f:5d:90:8e:e7:2f:a8:d1:
                    ec:f6:33:84:c2:bb:db:3b:9c:81:c4:ac:5d:93:aa:
                    51:05:a5:92:2f:6b:af:3f:94:b5:9f:81:d7:b4:4b:
                    9c:db:18:e4:b5:0c:4a:10:c4:09:1b:78:8a:d9:4b:
                    c4:6a:9b:f1:ef:7f:35:3c:94:97:fb:80:fc:a2:25:
                    c0:87:85:07:fc:13:62:71:71:9e:a0:08:2a:08:61:
                    cc:ac:00:28:d4:5c:94:fc:c5:95:1a:d6:c5:e2:99:
                    43:af:39:f5:4d:95:dc:ac:0e:9d:3d:2d:bd:d5:50:
                    5b:7f:47:4c:7d:4c:c8:a6:45:bd:70:66:25:22:6d:
                    aa:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:DA:D4:0D:CB:34:CB:8B:EB:85:89:F0:A1:AC:48:2C:B1:9F:3E:14
            X509v3 Authority Key Identifier:
                keyid:E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a663a3a2f34382d3438203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cf8:f::/48

    Signature Algorithm: sha256WithRSAEncryption
         0f:e9:39:5d:1d:0a:65:e6:0a:b9:10:48:7d:6e:64:77:1e:cc:
         b0:01:43:b4:8c:8e:44:e9:aa:16:b8:61:1a:5a:3b:ad:4a:f0:
         76:82:44:19:2b:ed:e8:78:47:2e:32:e4:fc:eb:f9:ec:17:b4:
         f4:19:d1:d3:63:1e:f9:e0:a0:1c:ce:f7:e4:8d:b9:58:53:9a:
         1b:5f:69:53:77:54:3b:2a:6d:7d:8f:0d:84:42:26:19:fc:dc:
         77:e6:93:09:25:a0:74:1c:9e:66:7e:17:75:33:45:12:8a:62:
         b0:b5:3e:bc:64:3e:df:cc:04:c4:a1:48:8b:03:8e:a6:88:84:
         64:c5:ee:ec:0d:01:94:10:ed:ac:e3:f2:0d:02:9d:72:69:22:
         de:7f:32:a2:ad:fd:d0:13:d4:d3:21:1d:9d:05:d9:9b:05:c6:
         d0:b8:7b:2b:46:5b:45:a4:a4:56:8d:cd:2c:da:f5:db:9a:02:
         08:e5:94:18:06:b3:b4:95:57:85:32:d2:7e:ce:5e:b6:2b:c5:
         8c:d2:7c:30:06:c0:ed:38:bd:01:12:7a:41:9e:89:19:8a:ce:
         3c:ad:a4:7f:e3:bd:45:f6:1d:51:82:0c:9a:40:de:10:1a:56:
         b9:1e:75:7b:06:16:0f:ec:73:87:b9:42:d3:9d:ae:1c:6f:68:
         43:83:f5:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:03 2025 by rpki-client