Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hy4KuR7eVj5gr51fgPmZLQqJoZjcEbJhqZp5dmPV9mnV/0/323830343a363863343a3a2f33322d3438203d3e20323639373134.roa
File:                     323830343a363863343a3a2f33322d3438203d3e20323639373134.roa (raw, json)
Hash identifier:          8auBPP0K2TgO2ze5hnSe8xRP//TXry7JG/EJ6OuYsF4=
Subject key identifier:   FA:B3:C4:F7:A8:A0:56:45:0E:07:65:33:CF:0A:64:39:ED:8E:35:AC
Certificate issuer:       /CN=44A80C025AAF3AD8EC09391696998A951E52E60F
Certificate serial:       1A565DE56AFCC5CCB3BC1FE157B9A55B06BB28D5
Authority key identifier: 44:A8:0C:02:5A:AF:3A:D8:EC:09:39:16:96:99:8A:95:1E:52:E6:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/44A80C025AAF3AD8EC09391696998A951E52E60F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hy4KuR7eVj5gr51fgPmZLQqJoZjcEbJhqZp5dmPV9mnV/0/323830343a363863343a3a2f33322d3438203d3e20323639373134.roa
Signing time:             Thu 29 Feb 2024 19:25:16 +0000
ROA not before:           Thu 29 Feb 2024 19:20:16 +0000
ROA not after:            Thu 27 Feb 2025 19:25:16 +0000
asID:                     269714
IP address blocks:        2804:68c4::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:56:5d:e5:6a:fc:c5:cc:b3:bc:1f:e1:57:b9:a5:5b:06:bb:28:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44A80C025AAF3AD8EC09391696998A951E52E60F
        Validity
            Not Before: Feb 29 19:20:16 2024 GMT
            Not After : Feb 27 19:25:16 2025 GMT
        Subject: CN=FAB3C4F7A8A056450E076533CF0A6439ED8E35AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:5b:b5:b4:37:97:62:c4:30:d7:92:6b:34:6a:
                    a4:71:4f:c2:7a:40:5c:7a:06:2f:a5:dd:03:91:c8:
                    a9:41:9c:89:13:1c:6e:60:89:6a:fa:c4:8c:77:36:
                    58:97:e7:45:e9:69:c8:8b:ad:58:3b:0a:0b:dd:ec:
                    3f:d1:50:c6:3a:70:32:92:68:c4:c0:19:fd:86:bd:
                    44:cc:00:76:cd:32:b6:a9:d8:49:cc:cf:45:21:8c:
                    c3:e6:2c:48:61:6f:e0:4d:bb:c7:2d:39:85:6a:4e:
                    06:97:da:34:a1:4f:a8:d6:cb:06:e0:c2:19:dd:88:
                    5b:da:88:f1:7c:b0:bc:24:a2:7b:7d:71:fe:03:e0:
                    73:eb:dc:a3:be:66:37:9f:25:cb:eb:a0:f0:f6:cf:
                    da:1f:50:74:55:1b:bb:51:38:c1:01:17:65:74:a7:
                    69:f7:1f:e8:2a:6c:9f:f8:83:61:5b:60:d9:f1:21:
                    22:7d:1c:b4:45:a8:70:88:83:aa:0d:f1:09:b8:e9:
                    98:90:19:c2:7f:fa:72:41:c2:87:28:e0:8d:ad:ce:
                    76:d9:bf:88:8c:ef:13:91:2c:f5:55:cf:b8:2f:0d:
                    50:7b:f5:6f:4a:d8:61:b0:d6:20:20:eb:ba:66:31:
                    4b:46:88:dc:cb:ce:ad:bb:8f:2b:0c:2f:7d:7e:1d:
                    29:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:B3:C4:F7:A8:A0:56:45:0E:07:65:33:CF:0A:64:39:ED:8E:35:AC
            X509v3 Authority Key Identifier:
                keyid:44:A8:0C:02:5A:AF:3A:D8:EC:09:39:16:96:99:8A:95:1E:52:E6:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hy4KuR7eVj5gr51fgPmZLQqJoZjcEbJhqZp5dmPV9mnV/0/44A80C025AAF3AD8EC09391696998A951E52E60F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/44A80C025AAF3AD8EC09391696998A951E52E60F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hy4KuR7eVj5gr51fgPmZLQqJoZjcEbJhqZp5dmPV9mnV/0/323830343a363863343a3a2f33322d3438203d3e20323639373134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:68c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:35:c1:cb:f6:b9:08:39:28:c0:9e:bf:18:bb:f8:0c:80:0d:
         5a:2b:b7:4c:a4:11:c9:d0:db:69:f6:91:26:94:39:05:fa:97:
         7b:d5:1d:55:7e:83:e3:d3:94:85:5e:e4:15:16:54:7c:33:c8:
         1f:05:c7:15:49:1c:ee:a0:18:b8:9d:40:69:16:77:61:03:63:
         63:09:43:c5:3c:ea:2b:2e:05:d0:46:a0:10:67:05:51:ac:56:
         da:56:ef:de:bb:00:93:b2:c5:46:0f:e5:02:7c:dc:c0:fa:0f:
         21:e3:46:58:16:25:0b:5d:14:20:c3:d0:8e:6d:02:ae:0c:94:
         fe:90:de:ee:4e:e7:7d:94:c9:d1:b3:a3:b6:c7:be:06:cd:ee:
         ae:3d:7b:db:00:df:10:f9:63:5f:15:ee:a9:0c:58:31:d4:78:
         84:5c:93:bd:47:9c:01:7e:3d:11:ef:db:90:26:4d:77:cb:9e:
         a5:6a:f2:f4:6a:2f:02:cd:c5:6c:10:f7:e1:7e:b4:08:68:3c:
         7f:16:10:66:0c:5d:50:a9:58:8d:50:fb:da:74:85:1e:6a:41:
         31:d1:be:f1:06:fb:08:cd:1c:9c:cb:6f:65:52:96:53:00:37:
         c2:1b:84:21:bf:13:31:21:71:77:c8:bb:2d:a5:0a:da:e4:5f:
         c1:de:c0:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:18 2025 by rpki-client