Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2QLJnR6BK4ETR5D8hDsXRFYoPhAfcgAkw5CZEpSwLN3C/0/323830343a363834343a3a2f33322d3336203d3e20323639363831.roa
File:                     323830343a363834343a3a2f33322d3336203d3e20323639363831.roa (raw, json)
Hash identifier:          IOggsUQlnO279rD1+ho61KrXOPA4caxr9D+lhCAxWCo=
Subject key identifier:   F7:19:1B:EB:52:94:38:6D:DB:F7:B7:5F:86:C0:50:A7:B4:90:D9:00
Certificate issuer:       /CN=FF198A8E9E1334E576727171337F571CE7708607
Certificate serial:       177E332E8B751460F4D4DF027E95802668EC777F
Authority key identifier: FF:19:8A:8E:9E:13:34:E5:76:72:71:71:33:7F:57:1C:E7:70:86:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FF198A8E9E1334E576727171337F571CE7708607.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2QLJnR6BK4ETR5D8hDsXRFYoPhAfcgAkw5CZEpSwLN3C/0/323830343a363834343a3a2f33322d3336203d3e20323639363831.roa
Signing time:             Wed 20 Jul 2022 19:33:07 +0000
ROA not before:           Wed 20 Jul 2022 19:28:07 +0000
ROA not after:            Wed 19 Jul 2023 19:33:07 +0000
asID:                     269681
IP address blocks:        2804:6844::/32 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:7e:33:2e:8b:75:14:60:f4:d4:df:02:7e:95:80:26:68:ec:77:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF198A8E9E1334E576727171337F571CE7708607
        Validity
            Not Before: Jul 20 19:28:07 2022 GMT
            Not After : Jul 19 19:33:07 2023 GMT
        Subject: CN=F7191BEB5294386DDBF7B75F86C050A7B490D900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c0:62:80:75:48:7c:fc:27:5a:82:0f:72:bc:
                    87:be:ab:b5:c5:21:b5:aa:28:32:cd:98:7d:76:a9:
                    53:d4:33:53:d4:50:6b:b2:99:21:2f:97:1b:62:ed:
                    f2:44:df:7f:18:92:9b:3b:ec:c5:b0:be:01:13:da:
                    aa:00:1c:74:8c:72:da:bd:fa:3c:44:9a:5f:91:2e:
                    a6:c8:65:55:73:fb:64:23:7b:6a:64:50:7e:d7:80:
                    48:cc:8c:ac:ae:48:21:0c:4a:0e:05:dc:39:04:4c:
                    8d:8a:d2:ba:73:55:90:d5:0c:e1:0f:7c:d1:0b:1c:
                    b3:9f:08:9e:a2:b9:56:c6:4f:79:57:5b:36:4e:12:
                    41:07:d4:b7:4d:f4:b9:d4:a0:3d:c2:5b:35:c3:17:
                    03:66:38:9a:61:79:18:83:de:ea:c5:2e:10:5d:a1:
                    b4:6e:4b:12:5b:84:86:15:10:23:12:77:ec:78:ce:
                    5d:71:4e:a1:48:1e:37:87:2d:d4:74:f6:7e:35:e1:
                    5b:30:fe:f9:f7:23:63:5c:95:67:5d:1e:38:86:92:
                    d2:8c:56:db:3f:df:90:0d:3f:49:9c:fc:9b:b8:cd:
                    ea:a3:bd:f5:dd:8e:b4:dc:95:ce:74:ba:f2:3d:d9:
                    50:e2:fd:38:55:ff:46:dd:6b:0a:68:7f:22:51:52:
                    25:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:19:1B:EB:52:94:38:6D:DB:F7:B7:5F:86:C0:50:A7:B4:90:D9:00
            X509v3 Authority Key Identifier:
                keyid:FF:19:8A:8E:9E:13:34:E5:76:72:71:71:33:7F:57:1C:E7:70:86:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2QLJnR6BK4ETR5D8hDsXRFYoPhAfcgAkw5CZEpSwLN3C/0/FF198A8E9E1334E576727171337F571CE7708607.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FF198A8E9E1334E576727171337F571CE7708607.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QLJnR6BK4ETR5D8hDsXRFYoPhAfcgAkw5CZEpSwLN3C/0/323830343a363834343a3a2f33322d3336203d3e20323639363831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6844::/32

    Signature Algorithm: sha256WithRSAEncryption
         a4:06:db:71:b6:54:f0:7f:31:46:8a:30:aa:1f:ac:65:c0:b4:
         25:a8:2e:e1:db:01:2a:b0:fb:2a:7b:62:2d:ca:2f:4c:3c:a5:
         f7:5c:4b:f4:08:22:84:b6:ed:95:bc:05:61:de:e5:e4:98:6e:
         4d:7d:53:5f:65:cc:7a:00:3c:f0:a5:b6:dc:3c:a0:21:4a:1b:
         43:fe:49:7d:ca:95:16:34:9a:7c:f0:db:cc:f8:c7:10:38:10:
         d0:1d:f0:ff:11:d6:c5:0e:15:44:bd:f8:c9:0c:50:e2:41:3f:
         2f:f8:ba:0b:c2:fa:84:21:71:a8:6b:1f:ff:b9:c7:15:d7:bb:
         ec:45:78:7c:f0:88:de:bf:d4:54:37:a5:9b:be:67:5b:56:8e:
         c0:b8:42:a0:ef:76:c4:6e:8c:25:41:21:3a:43:f0:77:1e:fa:
         c1:f5:f4:bc:50:76:b0:f6:09:97:64:cf:4e:f1:29:16:75:c5:
         be:64:20:45:95:41:e7:b7:e8:60:ac:65:2e:17:4f:ca:b3:bf:
         57:b0:b2:ee:56:0d:3e:45:ed:70:05:8e:03:aa:04:82:08:d3:
         c3:3c:aa:16:75:15:1d:bd:ad:4c:38:fb:d8:4c:08:aa:34:ec:
         5c:9b:b6:9f:24:ed:50:59:e6:fd:c4:db:40:61:c3:d6:43:de:
         89:36:fe:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:50:10 2025 by rpki-client