Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/323830343a3531383a383030303a3a2f33332d3333203d3e20323632343931.roa
File:                     323830343a3531383a383030303a3a2f33332d3333203d3e20323632343931.roa (raw, json)
Hash identifier:          5i0CYd/GThFXrYu0BMoiKYD4GK+Ip3zXX1bSaHQ6ZNs=
Subject key identifier:   CC:10:4E:8E:E0:93:CD:D0:FC:34:3A:03:58:01:2D:37:EF:E4:08:4B
Certificate issuer:       /CN=DA66142D6014A7DDF12783F088F14F7F1B3AC9DC
Certificate serial:       79C37B30170454B083FBCAA719AD9C2033D3D56F
Authority key identifier: DA:66:14:2D:60:14:A7:DD:F1:27:83:F0:88:F1:4F:7F:1B:3A:C9:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA66142D6014A7DDF12783F088F14F7F1B3AC9DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/323830343a3531383a383030303a3a2f33332d3333203d3e20323632343931.roa
Signing time:             Sat 30 Mar 2024 14:16:23 +0000
ROA not before:           Sat 30 Mar 2024 14:11:23 +0000
ROA not after:            Sat 29 Mar 2025 14:16:23 +0000
asID:                     262491
IP address blocks:        2804:518:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:c3:7b:30:17:04:54:b0:83:fb:ca:a7:19:ad:9c:20:33:d3:d5:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA66142D6014A7DDF12783F088F14F7F1B3AC9DC
        Validity
            Not Before: Mar 30 14:11:23 2024 GMT
            Not After : Mar 29 14:16:23 2025 GMT
        Subject: CN=CC104E8EE093CDD0FC343A0358012D37EFE4084B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2b:dd:b6:ad:5f:ea:9c:74:70:c0:c7:24:81:
                    e7:7f:9f:75:7f:95:15:77:9f:d6:44:be:72:4f:24:
                    3a:4e:75:53:1d:0a:aa:2b:30:b0:98:6b:20:d2:76:
                    73:29:9a:78:54:1b:cf:3e:9b:98:cd:e2:52:ec:12:
                    f7:de:3b:4f:11:0d:85:eb:1d:09:3f:1d:30:35:59:
                    c6:46:c2:f3:47:15:af:9d:5b:92:ef:ee:4e:e2:02:
                    e6:8a:d9:6f:36:54:bc:83:71:cd:1f:a4:6f:99:bf:
                    77:30:0c:87:bf:9d:88:2c:c4:ff:1a:ba:57:e2:71:
                    92:9b:96:d0:30:b0:d6:d8:df:fe:95:65:93:62:35:
                    69:4c:f4:9e:5a:2c:11:21:ed:28:7d:f1:0b:b0:85:
                    69:94:2d:2f:e7:90:12:f3:b7:a0:fd:52:cc:f4:fe:
                    e2:55:c5:12:02:e3:3b:29:dc:c5:2a:91:b3:72:85:
                    ac:a4:c7:29:9a:43:ec:eb:d0:18:e8:3a:6e:5b:cd:
                    c1:2c:54:dc:a1:e4:be:04:21:97:0b:67:dd:0d:50:
                    31:30:69:0b:82:06:b8:c7:8f:47:67:5f:66:28:91:
                    d1:a7:9e:47:83:a5:c5:03:15:02:86:1a:04:9e:70:
                    ad:21:06:33:29:b0:4b:e1:5a:27:aa:b8:87:da:c4:
                    5b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:10:4E:8E:E0:93:CD:D0:FC:34:3A:03:58:01:2D:37:EF:E4:08:4B
            X509v3 Authority Key Identifier:
                keyid:DA:66:14:2D:60:14:A7:DD:F1:27:83:F0:88:F1:4F:7F:1B:3A:C9:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/DA66142D6014A7DDF12783F088F14F7F1B3AC9DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA66142D6014A7DDF12783F088F14F7F1B3AC9DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/323830343a3531383a383030303a3a2f33332d3333203d3e20323632343931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:518:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         10:83:eb:60:93:ec:e0:dd:20:52:5b:cc:9f:51:e0:eb:9e:9a:
         97:c3:78:8d:00:e1:ae:2f:d7:94:c1:04:90:72:aa:2c:9f:f9:
         9e:01:1d:43:20:75:a5:4d:c8:b3:cd:65:8a:38:30:2d:e7:79:
         37:52:be:58:8c:87:87:85:0c:9e:3b:a4:a7:cb:c5:05:2f:42:
         5b:d3:6f:21:94:48:e3:59:c1:ac:6f:82:03:30:66:64:61:bd:
         55:b4:ed:7f:6b:2b:18:0f:f4:69:da:90:e5:52:f4:9d:b9:a9:
         2d:74:15:f1:f7:1c:aa:d5:fe:b9:18:cb:58:10:96:a2:17:60:
         5c:a7:da:31:ee:d7:c0:7d:20:14:9b:67:94:1e:2a:05:18:ad:
         3f:bc:0b:80:d5:c1:fb:69:c0:e7:1a:4e:68:dd:a2:76:b3:dc:
         f6:b2:92:13:d4:93:e6:3d:15:d4:08:c0:69:03:57:53:1e:db:
         ad:76:ea:f0:be:e0:5d:8e:76:9d:1a:7b:74:83:9a:30:50:4a:
         de:cc:08:db:fb:0d:06:fd:d8:0b:dd:e7:ca:59:d4:2c:6c:a4:
         e9:ef:01:3d:65:fb:62:79:11:86:5e:4e:37:a5:77:a4:3f:87:
         4b:94:2a:40:e3:9f:e3:8e:7e:f4:8b:ad:fd:e6:a9:f9:8f:72:
         7e:13:58:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:06:29 2025 by rpki-client