Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/323830343a6563383a653030303a3a2f33362d3336203d3e20323632353332.roa
File:                     323830343a6563383a653030303a3a2f33362d3336203d3e20323632353332.roa (raw, json)
Hash identifier:          g4K1mg0VFUSEUCQxadc0S538wOQXUUt3wJcaV4ErCvE=
Subject key identifier:   E6:63:61:C8:77:5F:59:CA:B0:C4:4F:DB:58:90:85:6B:F4:07:71:48
Certificate issuer:       /CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
Certificate serial:       1FA3DE4C4D5C353616299705317DF64A460C85F7
Authority key identifier: C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/323830343a6563383a653030303a3a2f33362d3336203d3e20323632353332.roa
Signing time:             Wed 28 Feb 2024 14:13:04 +0000
ROA not before:           Wed 28 Feb 2024 14:08:04 +0000
ROA not after:            Wed 26 Feb 2025 14:13:04 +0000
asID:                     262532
IP address blocks:        2804:ec8:e000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:a3:de:4c:4d:5c:35:36:16:29:97:05:31:7d:f6:4a:46:0c:85:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
        Validity
            Not Before: Feb 28 14:08:04 2024 GMT
            Not After : Feb 26 14:13:04 2025 GMT
        Subject: CN=E66361C8775F59CAB0C44FDB5890856BF4077148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:6e:62:7a:d8:a6:d6:cb:2d:cd:9c:aa:f5:6f:
                    c8:cc:2b:41:2d:78:d9:2a:f9:cb:32:17:7f:32:ac:
                    e9:f8:3e:9e:af:30:19:62:90:da:48:9c:71:d9:f1:
                    11:e6:eb:33:84:8b:8c:8a:96:10:45:48:6a:9d:47:
                    86:6f:23:db:02:9e:38:38:3b:a4:ce:6f:b6:1c:08:
                    96:28:15:72:c5:0d:bd:92:69:9e:c3:d5:32:ae:71:
                    8d:61:f5:ec:e2:6d:72:fb:28:bc:9e:65:be:72:ec:
                    5c:0e:1a:e6:2d:37:9e:46:9b:65:31:60:48:7b:e2:
                    c6:92:3f:78:03:fd:db:d8:e8:49:32:8b:58:76:f3:
                    3c:2b:6b:0f:a7:52:bb:cc:9e:c5:41:c1:99:ff:1d:
                    7e:09:6c:3a:12:a0:44:0d:72:d8:ec:4c:50:1e:bd:
                    f5:84:1c:95:fa:b4:72:a6:9f:ec:9f:9a:d0:59:80:
                    e9:03:df:6b:d2:cf:c9:fc:b0:88:b5:f7:ac:9b:43:
                    bb:94:84:29:b6:e8:70:1f:e3:2e:b2:f9:78:45:d8:
                    d4:51:7d:4c:ac:cf:46:25:00:44:bc:52:83:38:d2:
                    ca:6a:fc:72:32:24:52:3b:80:4f:f2:b3:fd:bc:85:
                    b2:91:a3:8f:fd:67:64:db:ce:b2:d8:50:d0:40:c7:
                    5b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:63:61:C8:77:5F:59:CA:B0:C4:4F:DB:58:90:85:6B:F4:07:71:48
            X509v3 Authority Key Identifier:
                keyid:C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/323830343a6563383a653030303a3a2f33362d3336203d3e20323632353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ec8:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         05:c4:80:21:8c:94:d1:fc:78:ee:2b:a6:f0:ed:a4:c2:6b:73:
         88:3f:b5:df:df:46:06:51:e4:59:db:78:cd:cf:ec:07:06:6a:
         d2:bc:e0:b5:9f:23:36:5d:a4:13:dc:d5:1f:d9:61:ea:aa:a4:
         66:28:13:83:e2:d0:96:4c:56:fc:ac:b2:88:e6:60:7b:9e:13:
         d0:68:f0:8b:15:9f:0f:b4:ba:18:cf:c8:30:d8:c0:38:5f:c8:
         87:2c:da:70:58:e4:11:be:55:11:ea:20:62:17:98:0e:19:d7:
         49:9b:38:ed:a9:19:c4:00:a5:b8:3c:1d:43:5c:5b:b3:6c:66:
         77:98:4b:a7:93:02:72:97:b9:1e:14:a9:81:e2:5f:8b:dc:1a:
         37:31:7c:29:e2:1a:5a:e9:19:5d:aa:8f:32:82:2f:45:4f:ff:
         5b:01:f0:bc:17:eb:99:07:bc:cb:14:c1:26:c0:6b:6b:ee:24:
         8a:87:95:7f:6d:81:e9:7d:11:f4:39:de:f3:4c:c9:c3:ea:30:
         14:88:73:d6:a0:9f:50:e0:86:1b:c1:d4:da:71:97:95:15:ae:
         ed:2e:8f:35:3a:7b:6c:d0:d1:b7:a0:e4:e4:86:38:1d:f6:7c:
         a6:d5:ff:ac:12:34:09:58:9c:b9:6e:d1:3e:e3:ca:f7:20:22:
         30:49:fd:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 22:59:36 2025 by rpki-client