Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hz8fKV4iDah8e55rj9Pghr4LRkesKqS8rj6PkJxM3FWG/1/323830343a393134343a3a2f33322d3332203d3e20323734363330.roa
File:                     323830343a393134343a3a2f33322d3332203d3e20323734363330.roa (raw, json)
Hash identifier:          O11GTELWwugTWrOOsETj8d1IfGk97ShWkw2RA5Bio2c=
Subject key identifier:   FB:F2:A5:00:AA:FC:D1:BF:60:24:0B:22:14:A1:E8:F1:78:BF:1B:31
Certificate issuer:       /CN=F179B2B52BA0082BBB7B2601DDCA148B07F84620
Certificate serial:       3160C5F15D18E8E5799639A4826A109F662D1A6E
Authority key identifier: F1:79:B2:B5:2B:A0:08:2B:BB:7B:26:01:DD:CA:14:8B:07:F8:46:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F179B2B52BA0082BBB7B2601DDCA148B07F84620.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hz8fKV4iDah8e55rj9Pghr4LRkesKqS8rj6PkJxM3FWG/1/323830343a393134343a3a2f33322d3332203d3e20323734363330.roa
Signing time:             Tue 10 Dec 2024 21:14:10 +0000
ROA not before:           Tue 10 Dec 2024 21:09:10 +0000
ROA not after:            Tue 09 Dec 2025 21:14:10 +0000
asID:                     274630
IP address blocks:        2804:9144::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:60:c5:f1:5d:18:e8:e5:79:96:39:a4:82:6a:10:9f:66:2d:1a:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F179B2B52BA0082BBB7B2601DDCA148B07F84620
        Validity
            Not Before: Dec 10 21:09:10 2024 GMT
            Not After : Dec  9 21:14:10 2025 GMT
        Subject: CN=FBF2A500AAFCD1BF60240B2214A1E8F178BF1B31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:36:08:0d:8b:98:b7:9f:99:e5:13:91:cf:3e:
                    85:85:0d:4e:5e:41:7f:98:24:1a:bd:f6:ea:a4:a4:
                    4c:8d:7e:46:75:60:23:b1:31:2e:3c:a5:f3:23:cd:
                    f4:05:7e:5b:8c:59:b2:45:70:17:c1:d8:91:a4:3e:
                    bd:b3:c1:cf:32:4f:99:86:a8:c9:7c:ba:16:66:7b:
                    00:a7:b1:aa:67:9c:3b:af:34:f8:15:24:86:6d:a4:
                    df:85:e9:3e:a2:19:7f:a8:ea:17:02:bf:bf:27:f7:
                    48:44:21:8f:e5:63:98:87:28:b0:8c:72:1b:16:6e:
                    fd:49:0a:0a:c5:47:dc:03:90:da:e8:f0:80:5c:f9:
                    a1:89:90:45:cd:cc:a4:37:7f:f7:76:41:4d:68:02:
                    77:63:cd:7f:fe:68:92:89:37:95:ba:82:14:22:23:
                    de:06:5a:ae:f7:ac:c2:c2:e8:06:05:76:36:57:c2:
                    b8:7e:75:bd:80:c4:c2:86:2e:d0:42:8e:4f:9e:ba:
                    3e:df:d9:5b:b9:65:d3:5b:11:30:a0:36:c4:94:74:
                    76:36:cb:c3:40:e2:cd:ea:2c:b4:b9:1b:72:51:56:
                    80:48:93:05:09:23:5a:29:0e:bd:3f:fd:be:d3:5f:
                    b1:51:b6:4c:11:e9:8f:b0:42:bc:a0:db:87:93:df:
                    e0:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:F2:A5:00:AA:FC:D1:BF:60:24:0B:22:14:A1:E8:F1:78:BF:1B:31
            X509v3 Authority Key Identifier:
                keyid:F1:79:B2:B5:2B:A0:08:2B:BB:7B:26:01:DD:CA:14:8B:07:F8:46:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hz8fKV4iDah8e55rj9Pghr4LRkesKqS8rj6PkJxM3FWG/1/F179B2B52BA0082BBB7B2601DDCA148B07F84620.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F179B2B52BA0082BBB7B2601DDCA148B07F84620.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hz8fKV4iDah8e55rj9Pghr4LRkesKqS8rj6PkJxM3FWG/1/323830343a393134343a3a2f33322d3332203d3e20323734363330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9144::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:cc:b8:3e:2d:1e:ea:fa:58:d1:0a:2a:de:81:66:91:3a:34:
         43:d0:a8:33:eb:15:96:6f:c3:03:44:59:e2:b1:53:a9:b8:22:
         d8:08:79:e1:83:49:f6:f1:43:7b:5b:06:5c:ce:e6:e8:dc:2c:
         7f:3b:38:88:57:ef:c9:73:75:aa:91:eb:94:c9:12:bb:40:6a:
         0f:e8:7d:89:59:00:47:6c:60:68:89:a0:a9:e7:52:15:ef:16:
         a1:1b:e8:c7:e1:a1:e8:54:a1:58:f3:57:06:8f:0f:7d:50:34:
         a4:2d:f7:1b:cb:41:ac:6e:ad:8a:a2:c2:fa:95:83:6c:54:9d:
         a8:91:61:8e:b7:f9:0b:2b:89:1a:56:31:9f:5f:02:53:8f:a7:
         8f:f8:de:fc:7e:69:40:6b:a7:c2:e4:85:fa:00:be:2c:3b:00:
         6a:eb:43:2a:e6:77:79:d6:d1:a6:40:b5:bb:47:a6:c1:40:06:
         99:e0:e1:9d:9b:47:77:46:0e:01:d1:6d:a6:77:7d:b1:24:9c:
         31:cc:02:08:94:7a:05:18:85:ec:0b:1c:c2:62:65:6b:0a:f5:
         eb:f3:e5:60:24:a1:4b:39:d3:dd:6d:91:1f:33:14:48:06:49:
         44:38:20:a7:9c:59:1b:70:3e:6a:6f:ef:10:bd:69:7d:25:93:
         c8:11:be:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:45:54 2025 by rpki-client