Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/323830343a313839383a383030303a3a2f33332d3333203d3e203631393432.roa
File:                     323830343a313839383a383030303a3a2f33332d3333203d3e203631393432.roa (raw, json)
Hash identifier:          4SmVRFK5BWlZRzwJHjyJgrRQlvLdbPb6vQHChnvneEU=
Subject key identifier:   35:4B:96:6C:F2:C8:9B:38:43:C5:F4:4D:67:4E:9E:E6:EF:8B:36:A2
Certificate issuer:       /CN=F11C1CC2AC17600695F88B435DCA3A62798480D8
Certificate serial:       5FA6533536337599D0CD4DFBEE41E9600B7EB285
Authority key identifier: F1:1C:1C:C2:AC:17:60:06:95:F8:8B:43:5D:CA:3A:62:79:84:80:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F11C1CC2AC17600695F88B435DCA3A62798480D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/323830343a313839383a383030303a3a2f33332d3333203d3e203631393432.roa
Signing time:             Fri 14 Apr 2023 16:39:26 +0000
ROA not before:           Fri 14 Apr 2023 16:34:26 +0000
ROA not after:            Fri 12 Apr 2024 16:39:26 +0000
asID:                     61942
IP address blocks:        2804:1898:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:a6:53:35:36:33:75:99:d0:cd:4d:fb:ee:41:e9:60:0b:7e:b2:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F11C1CC2AC17600695F88B435DCA3A62798480D8
        Validity
            Not Before: Apr 14 16:34:26 2023 GMT
            Not After : Apr 12 16:39:26 2024 GMT
        Subject: CN=354B966CF2C89B3843C5F44D674E9EE6EF8B36A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:5b:03:77:da:82:85:f8:3c:73:91:bf:4b:ec:
                    f5:b5:8d:b3:9d:28:35:27:43:48:9e:2d:f7:72:58:
                    10:08:b9:ab:89:45:8b:8b:b3:aa:e2:4f:89:72:1f:
                    3d:65:8c:01:29:80:30:97:5c:d5:7b:33:13:2c:72:
                    6d:98:89:76:d2:2b:85:cb:76:65:1b:6e:4e:73:a4:
                    33:4a:e6:52:91:b6:af:89:49:79:99:93:4d:05:ca:
                    10:08:a7:cb:ab:93:3a:fa:96:c9:56:cc:02:c0:7d:
                    e4:fb:37:78:36:49:c8:b4:98:59:ab:10:d9:19:81:
                    ac:ef:9c:37:d0:06:00:e8:d2:3c:70:29:c8:4e:16:
                    09:be:e8:99:5b:8f:a3:73:da:34:ba:fa:f3:12:01:
                    35:09:af:ea:b9:d7:67:7f:28:1b:6e:d6:03:c1:db:
                    0f:06:89:25:af:5e:87:ad:ba:f2:f4:b0:6a:43:85:
                    c7:de:f5:16:48:0f:14:5d:76:da:7b:4f:49:60:96:
                    00:fb:6c:1c:a4:97:06:3c:1f:15:35:0f:e7:df:af:
                    93:74:41:17:88:3b:df:bc:8b:a7:26:25:1d:42:23:
                    80:b9:54:d2:f0:1a:c6:79:9d:94:95:d1:62:b7:25:
                    b7:30:8e:d7:af:9d:02:9e:a3:20:30:76:cf:22:42:
                    2d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:4B:96:6C:F2:C8:9B:38:43:C5:F4:4D:67:4E:9E:E6:EF:8B:36:A2
            X509v3 Authority Key Identifier:
                keyid:F1:1C:1C:C2:AC:17:60:06:95:F8:8B:43:5D:CA:3A:62:79:84:80:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/F11C1CC2AC17600695F88B435DCA3A62798480D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F11C1CC2AC17600695F88B435DCA3A62798480D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/323830343a313839383a383030303a3a2f33332d3333203d3e203631393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1898:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         9e:37:e5:56:14:cc:39:9d:dc:ca:ab:51:36:ac:ab:23:13:d7:
         de:7f:d9:df:c4:9f:d4:72:41:6c:d3:4f:e9:f1:59:27:46:75:
         3a:a6:7c:c0:be:a3:60:78:5e:53:06:01:9c:cb:e6:1a:31:4c:
         ee:b4:4f:a8:cc:48:16:09:95:3a:31:00:bd:e3:9c:dc:12:5a:
         75:6a:33:52:f0:f5:d6:19:9b:40:0c:11:08:83:f2:40:9a:c8:
         89:49:22:7e:83:9f:59:a9:41:52:c4:6f:23:15:f0:7f:64:72:
         af:81:af:df:0d:94:ba:99:54:c0:eb:f8:ea:fd:66:74:0b:bb:
         12:a4:4d:57:5e:5d:c2:f0:42:ea:58:65:93:c7:c8:e2:05:91:
         22:63:98:8c:27:86:56:ce:16:2d:e0:94:92:96:db:18:00:eb:
         f7:a1:24:10:98:7d:e6:73:fb:1a:79:0e:f0:62:72:45:c5:01:
         3b:4f:b1:8b:0b:68:ba:ec:d8:c2:8a:32:83:4a:c1:45:56:04:
         25:ce:95:03:57:3e:56:d0:3c:46:07:8f:1a:d8:15:f7:b3:27:
         b0:18:48:28:08:46:ee:f1:a2:59:48:1e:b7:46:0f:56:b0:71:
         83:70:da:4b:06:b0:fc:ac:e9:0e:ba:8c:aa:b6:04:0b:1e:82:
         87:7b:49:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 13:23:53 2025 by rpki-client