Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/4/323830343a326437303a3a2f33322d3332203d3e20323635323832.roa
File:                     323830343a326437303a3a2f33322d3332203d3e20323635323832.roa (raw, json)
Hash identifier:          t3r7wHppxU0yDAADN4Mw5KnNiQ5ieCny961dO8/jflU=
Subject key identifier:   F7:6A:0D:7C:FE:BE:E8:B7:ED:71:27:23:A8:61:DF:0B:01:8E:4E:97
Certificate issuer:       /CN=E46E993C4F612FBD69E525931CC4402187BA41CF
Certificate serial:       664B207B512817A4EC49DF9C0DC964E0E7456267
Authority key identifier: E4:6E:99:3C:4F:61:2F:BD:69:E5:25:93:1C:C4:40:21:87:BA:41:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E46E993C4F612FBD69E525931CC4402187BA41CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/4/323830343a326437303a3a2f33322d3332203d3e20323635323832.roa
Signing time:             Tue 11 Jun 2024 17:33:51 +0000
ROA not before:           Tue 11 Jun 2024 17:28:51 +0000
ROA not after:            Tue 10 Jun 2025 17:33:51 +0000
asID:                     265282
IP address blocks:        2804:2d70::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:4b:20:7b:51:28:17:a4:ec:49:df:9c:0d:c9:64:e0:e7:45:62:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E46E993C4F612FBD69E525931CC4402187BA41CF
        Validity
            Not Before: Jun 11 17:28:51 2024 GMT
            Not After : Jun 10 17:33:51 2025 GMT
        Subject: CN=F76A0D7CFEBEE8B7ED712723A861DF0B018E4E97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:26:9d:7d:c4:21:ce:b2:6f:ba:19:6f:d4:a2:
                    dd:86:e9:7f:7e:c4:54:20:77:b5:b8:3e:59:a4:63:
                    a6:de:b7:0f:36:62:60:52:84:dc:81:75:50:ee:a1:
                    27:66:56:4b:8f:4b:59:e6:8c:fe:85:88:ad:13:02:
                    54:66:a6:db:82:52:3c:dd:28:4a:b0:d5:3d:b3:41:
                    cd:e8:e9:c9:3d:93:bb:01:8c:9d:ab:bc:b0:7d:cd:
                    f1:45:d4:af:6f:b6:2b:99:a7:0e:33:37:28:cd:27:
                    be:96:d6:19:10:94:a7:e2:ce:89:1d:98:c0:40:3a:
                    f5:dc:b9:5f:80:9f:6e:0b:51:f4:82:75:49:e4:8b:
                    63:78:f4:f2:80:c0:ca:4e:8e:f1:5e:83:86:4d:15:
                    80:74:82:67:b8:5f:51:0a:e4:97:2c:bb:71:41:e1:
                    03:66:76:ef:2a:cf:fe:c2:ff:34:b4:65:cb:59:c7:
                    3f:06:09:2a:b5:85:a4:cd:00:9f:28:84:9f:c3:26:
                    23:1b:cf:4e:c4:d6:bd:21:48:ba:c6:75:31:23:20:
                    14:76:e3:47:71:4a:6a:0d:1b:eb:d5:ac:29:83:32:
                    90:b3:86:d8:f2:34:96:d2:62:ee:27:e9:a2:a5:74:
                    d9:b3:23:81:e6:66:b2:2a:41:dd:fc:3f:2b:b4:fa:
                    7e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:6A:0D:7C:FE:BE:E8:B7:ED:71:27:23:A8:61:DF:0B:01:8E:4E:97
            X509v3 Authority Key Identifier:
                keyid:E4:6E:99:3C:4F:61:2F:BD:69:E5:25:93:1C:C4:40:21:87:BA:41:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/4/E46E993C4F612FBD69E525931CC4402187BA41CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E46E993C4F612FBD69E525931CC4402187BA41CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/4/323830343a326437303a3a2f33322d3332203d3e20323635323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2d70::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:92:1f:f9:e9:84:8b:e6:b1:17:84:d2:43:70:d5:00:26:2a:
         3c:50:e4:31:e6:d8:12:38:d6:cd:8d:5b:e8:ce:8b:f8:86:23:
         6b:ef:cc:d1:19:6e:13:d8:a8:5b:51:41:fc:20:26:6b:02:20:
         7e:5d:a0:53:a0:cc:f5:f3:2d:25:74:96:8c:9f:28:a2:d9:25:
         16:53:5c:27:32:65:c4:37:99:77:ad:d4:24:cb:02:1d:ec:79:
         c3:e4:24:53:fb:07:b5:43:74:c5:60:6d:0f:9e:32:e8:f6:39:
         b6:87:9d:b9:15:81:52:8f:e4:81:bd:cb:0d:d1:71:51:5a:4a:
         3b:20:a3:09:2d:f7:9b:04:1a:7b:3a:d6:2d:4d:ce:3e:da:67:
         da:e5:fc:f1:de:23:b1:cc:3d:47:4c:d5:ff:85:9c:d5:44:b8:
         90:a2:b9:6e:9b:58:e6:d0:1e:4c:c0:9c:99:8b:1d:3e:da:4c:
         b3:66:08:94:56:af:3f:58:1b:c9:ea:b0:1e:ca:1f:d3:8d:56:
         79:85:e2:34:1d:23:46:b0:49:f7:f2:61:7b:cd:9c:38:2e:96:
         fa:1e:84:a5:bd:10:69:9d:81:79:92:1f:41:72:06:36:ba:6d:
         44:42:4d:77:83:0f:c8:ab:a2:2e:08:c9:8d:5a:08:cc:46:e7:
         e1:dd:9d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:34:17 2025 by rpki-client