Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/323830343a313633383a636166653a3a2f34382d3438203d3e20323633323736.roa
File:                     323830343a313633383a636166653a3a2f34382d3438203d3e20323633323736.roa (raw, json)
Hash identifier:          K/kPtsr0LXPowTKJJZkHABy2xt7Mb7Xt4/xSlabPG2w=
Subject key identifier:   FC:AD:20:1B:5B:E8:3B:E0:BC:B2:94:C9:2A:FC:FF:BE:15:90:8B:BA
Certificate issuer:       /CN=187B3B176F0808984D1B5075CAF3CA9D636EBBD6
Certificate serial:       6C0DBBCD1D0209D13569E07F5E710E5E004B87FC
Authority key identifier: 18:7B:3B:17:6F:08:08:98:4D:1B:50:75:CA:F3:CA:9D:63:6E:BB:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/187B3B176F0808984D1B5075CAF3CA9D636EBBD6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/323830343a313633383a636166653a3a2f34382d3438203d3e20323633323736.roa
Signing time:             Fri 03 Nov 2023 20:02:12 +0000
ROA not before:           Fri 03 Nov 2023 19:57:12 +0000
ROA not after:            Fri 01 Nov 2024 20:02:12 +0000
asID:                     263276
IP address blocks:        2804:1638:cafe::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:0d:bb:cd:1d:02:09:d1:35:69:e0:7f:5e:71:0e:5e:00:4b:87:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=187B3B176F0808984D1B5075CAF3CA9D636EBBD6
        Validity
            Not Before: Nov  3 19:57:12 2023 GMT
            Not After : Nov  1 20:02:12 2024 GMT
        Subject: CN=FCAD201B5BE83BE0BCB294C92AFCFFBE15908BBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1c:30:b4:17:15:bd:c3:cf:52:6c:a3:a1:a4:
                    46:c3:9e:01:c8:05:36:f9:03:f5:62:69:0e:0a:0f:
                    de:18:34:ca:65:51:eb:fa:ce:97:28:85:0b:55:31:
                    c0:9a:0e:7c:3f:b5:12:72:a0:3f:e9:eb:23:c0:30:
                    f4:fd:a7:e9:b5:f7:f3:80:3c:71:37:18:2f:8c:ed:
                    6a:c5:4f:9e:1b:23:bc:fd:51:f9:09:b5:52:47:a2:
                    60:a8:59:09:66:85:19:3a:e0:dd:f6:cd:1b:b0:f4:
                    25:76:ed:ed:01:4a:9d:a1:99:54:2e:cb:2b:db:d1:
                    93:93:a0:c6:cc:31:e9:5d:ed:82:e7:ff:a9:4e:eb:
                    62:7d:12:1a:f6:24:8a:f6:6b:1b:6b:ca:d5:6b:59:
                    77:9d:d7:fd:f2:37:40:fa:b7:9f:81:24:6d:47:5a:
                    88:e6:c5:52:e9:c0:84:ba:0f:65:5d:2c:ab:37:82:
                    9f:0c:ae:52:76:46:84:0e:67:db:7d:19:3f:82:aa:
                    f0:8e:a3:a4:c5:2f:2e:ff:b9:b6:c3:67:ee:ae:67:
                    ac:b6:08:59:3d:23:d2:3b:62:69:89:90:cd:5c:b4:
                    73:ea:a8:4d:67:bb:c4:cb:dc:9f:02:a4:f2:c0:9f:
                    5e:24:70:ef:d0:64:a1:7f:9f:00:87:e5:a6:d4:0d:
                    bf:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:AD:20:1B:5B:E8:3B:E0:BC:B2:94:C9:2A:FC:FF:BE:15:90:8B:BA
            X509v3 Authority Key Identifier:
                keyid:18:7B:3B:17:6F:08:08:98:4D:1B:50:75:CA:F3:CA:9D:63:6E:BB:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/187B3B176F0808984D1B5075CAF3CA9D636EBBD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/187B3B176F0808984D1B5075CAF3CA9D636EBBD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/323830343a313633383a636166653a3a2f34382d3438203d3e20323633323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1638:cafe::/48

    Signature Algorithm: sha256WithRSAEncryption
         a1:b3:bf:9f:9c:4e:7d:0c:fe:be:9d:3f:1c:eb:e4:cf:42:15:
         5c:19:06:62:21:01:9a:e9:ea:de:c9:1a:2f:e3:d7:de:f5:d3:
         cd:9d:e1:d8:a7:c1:bd:fb:93:75:8b:53:47:4c:79:95:45:ac:
         1f:d8:42:aa:c3:9e:29:cf:54:10:c1:e5:b0:0c:b9:5e:c7:10:
         47:97:5b:95:8a:f5:e9:4a:15:ba:b8:e2:70:61:2c:b3:44:7c:
         5c:12:b8:75:2e:bc:fc:f2:ab:90:21:d2:fc:f9:4e:1c:aa:ac:
         3c:44:b1:67:9d:99:41:c8:be:b3:3a:3f:02:42:bc:18:8c:4e:
         c7:d9:ba:24:e4:21:b2:03:62:67:df:5a:d2:0c:7e:c4:c7:7a:
         a0:78:fc:eb:58:d0:ce:ba:0b:ff:54:65:05:0a:72:1c:30:ec:
         e0:a0:ea:e0:82:6e:fb:f2:58:cd:17:41:50:30:94:a3:91:0a:
         c7:2b:80:3b:f1:f5:60:99:e5:92:76:38:3d:85:d7:1e:68:1d:
         5e:ed:32:86:5f:8a:c5:fb:c0:b4:3b:a7:72:9f:40:80:3b:73:
         1e:83:ff:80:4f:85:53:cc:38:76:64:74:ca:71:ad:63:71:b7:
         12:ff:02:95:65:e9:81:1e:2e:02:30:17:a7:31:ac:61:d1:21:
         76:2f:09:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 13:03:26 2025 by rpki-client