Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqibKHfDfMftQJtyixcqNQf5fiouDuf4bfhZ4usQHcG4/0/323830343a343866303a303a36363a3a2f36342d3634203d3e203631353839.roa
File:                     323830343a343866303a303a36363a3a2f36342d3634203d3e203631353839.roa (raw, json)
Hash identifier:          A4FvSaP315h7qMwvGau+4b+OK8xZVKLzFEF1gQ33ARQ=
Subject key identifier:   88:68:52:47:11:A0:AC:7B:B4:4B:99:07:2D:5B:BD:1C:B9:C8:BF:87
Certificate issuer:       /CN=644FDBBE4743E5D56B8A177FBF2E3251F42D92E9
Certificate serial:       3CE208EE24137B9092D5316899970FB1949D8D5E
Authority key identifier: 64:4F:DB:BE:47:43:E5:D5:6B:8A:17:7F:BF:2E:32:51:F4:2D:92:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/644FDBBE4743E5D56B8A177FBF2E3251F42D92E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqibKHfDfMftQJtyixcqNQf5fiouDuf4bfhZ4usQHcG4/0/323830343a343866303a303a36363a3a2f36342d3634203d3e203631353839.roa
Signing time:             Tue 21 Mar 2023 13:29:35 +0000
ROA not before:           Tue 21 Mar 2023 13:24:35 +0000
ROA not after:            Tue 19 Mar 2024 13:29:35 +0000
asID:                     61589
IP address blocks:        2804:48f0:0:66::/64 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:e2:08:ee:24:13:7b:90:92:d5:31:68:99:97:0f:b1:94:9d:8d:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=644FDBBE4743E5D56B8A177FBF2E3251F42D92E9
        Validity
            Not Before: Mar 21 13:24:35 2023 GMT
            Not After : Mar 19 13:29:35 2024 GMT
        Subject: CN=8868524711A0AC7BB44B99072D5BBD1CB9C8BF87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bc:4f:2e:01:9b:8b:e2:db:6f:8e:d9:db:72:
                    c0:c9:5f:0e:62:fd:eb:ff:8d:1f:e4:6a:33:fe:c2:
                    40:36:12:a2:9c:14:25:0f:d7:d1:61:8d:23:e1:21:
                    c5:61:be:f6:00:4a:c6:e3:ca:a9:87:cb:15:8e:86:
                    0d:81:0f:53:92:5d:44:c5:5f:58:ef:c3:d2:7f:c8:
                    ae:85:0e:d0:eb:92:d7:d4:4e:1e:23:d7:cb:3f:10:
                    77:59:c2:d0:38:41:54:31:73:10:bf:e2:a5:3d:4a:
                    70:ff:0b:4f:fc:84:ef:72:5c:35:d7:c6:a9:6f:ca:
                    3b:e8:16:ff:b7:65:7a:aa:b9:af:eb:19:cc:38:20:
                    ce:ec:b7:19:2a:6c:66:b0:d3:46:39:39:d8:b1:46:
                    7d:ae:ac:e0:d9:43:bc:16:8e:6b:2e:a1:aa:2b:10:
                    ef:72:06:6c:f7:4e:0e:1f:e0:3e:3c:3b:be:0d:ce:
                    ce:94:0b:36:d1:5c:9b:a9:f8:80:1e:5c:9f:e3:0b:
                    9b:ab:0c:10:90:8a:b8:d6:20:99:bc:82:84:54:71:
                    d0:b8:71:33:b6:a8:bd:d6:73:ae:3d:79:6d:6a:da:
                    cd:00:00:58:50:03:8e:dd:ef:55:e3:5d:f8:f8:23:
                    2b:61:70:5a:b7:52:d1:2b:a0:56:2f:d4:79:a5:99:
                    4a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:68:52:47:11:A0:AC:7B:B4:4B:99:07:2D:5B:BD:1C:B9:C8:BF:87
            X509v3 Authority Key Identifier:
                keyid:64:4F:DB:BE:47:43:E5:D5:6B:8A:17:7F:BF:2E:32:51:F4:2D:92:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqibKHfDfMftQJtyixcqNQf5fiouDuf4bfhZ4usQHcG4/0/644FDBBE4743E5D56B8A177FBF2E3251F42D92E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/644FDBBE4743E5D56B8A177FBF2E3251F42D92E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqibKHfDfMftQJtyixcqNQf5fiouDuf4bfhZ4usQHcG4/0/323830343a343866303a303a36363a3a2f36342d3634203d3e203631353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:48f0:0:66::/64

    Signature Algorithm: sha256WithRSAEncryption
         58:fb:ea:d5:29:bb:81:12:48:18:36:af:26:83:45:93:0c:ed:
         b7:ca:e8:0d:fe:04:86:81:4c:3a:01:b7:bd:c2:72:29:28:30:
         d0:e3:54:d6:12:66:a8:65:f6:0b:ba:d0:0e:41:90:98:42:21:
         ba:2b:14:c8:36:6d:db:fe:db:78:7b:3e:7e:94:50:ee:c3:fc:
         7c:c3:2a:46:cb:38:83:84:8b:00:8d:ba:e2:a1:4d:34:b0:36:
         65:20:66:85:15:52:e5:e8:db:ac:82:1b:3c:e9:cd:0e:3b:c9:
         6d:6e:85:e3:79:e2:8d:a0:83:5f:18:ae:a1:1f:81:91:82:da:
         cd:a9:a3:1a:38:01:3d:75:c9:96:c5:d5:88:83:9d:64:c5:51:
         b6:2b:6b:bc:eb:47:21:61:12:74:c8:04:6a:24:00:65:38:9f:
         c8:01:28:b4:b7:19:64:65:62:2d:8c:e0:29:d5:09:89:1d:88:
         e8:f4:7b:c1:48:b8:ac:62:c1:88:4f:4c:df:21:2c:5c:2f:95:
         5a:d5:e8:82:12:f7:91:90:07:d9:23:11:b3:3c:b0:28:3a:54:
         89:38:2d:cb:1d:23:7d:b0:76:2d:1d:92:13:29:a0:b5:83:51:
         9f:72:50:89:de:91:ac:c1:d6:c0:89:2b:08:cc:c3:74:6a:f9:
         03:73:21:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:21:52 2025 by rpki-client