Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/323830343a313839383a3a2f33332d3333203d3e203631393432.roa
File:                     323830343a313839383a3a2f33332d3333203d3e203631393432.roa (raw, json)
Hash identifier:          lZnJKxsoT40stzvyMuqeZis2dAz6aP68RhI4TFzpkR0=
Subject key identifier:   B3:73:5A:5A:03:97:18:C1:53:F5:22:E4:FA:5F:64:91:F2:78:F9:4C
Certificate issuer:       /CN=F11C1CC2AC17600695F88B435DCA3A62798480D8
Certificate serial:       14BFABE81644F9E1056834A7C62F83C7318E7843
Authority key identifier: F1:1C:1C:C2:AC:17:60:06:95:F8:8B:43:5D:CA:3A:62:79:84:80:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F11C1CC2AC17600695F88B435DCA3A62798480D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/323830343a313839383a3a2f33332d3333203d3e203631393432.roa
Signing time:             Fri 14 Apr 2023 16:39:26 +0000
ROA not before:           Fri 14 Apr 2023 16:34:26 +0000
ROA not after:            Fri 12 Apr 2024 16:39:26 +0000
asID:                     61942
IP address blocks:        2804:1898::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:bf:ab:e8:16:44:f9:e1:05:68:34:a7:c6:2f:83:c7:31:8e:78:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F11C1CC2AC17600695F88B435DCA3A62798480D8
        Validity
            Not Before: Apr 14 16:34:26 2023 GMT
            Not After : Apr 12 16:39:26 2024 GMT
        Subject: CN=B3735A5A039718C153F522E4FA5F6491F278F94C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d0:33:72:29:10:45:3e:a1:3e:5c:c7:39:4a:
                    c9:bf:e7:d8:d3:41:78:3a:df:25:55:9b:65:58:bf:
                    3d:bc:a1:3e:e8:57:f0:ca:9b:3e:d4:e9:c1:cf:a1:
                    98:71:d3:76:0f:f2:d3:c8:f7:2c:a5:d3:5b:13:e8:
                    2b:55:88:ee:b1:8f:70:9d:b5:31:69:f7:d0:87:90:
                    ab:d1:8d:2f:6f:52:82:86:6f:5f:0e:70:0a:b2:54:
                    8d:81:ef:f7:fc:92:38:35:57:cc:aa:60:09:d6:35:
                    36:1e:2f:d1:1c:26:8a:4a:df:cb:fe:8c:c8:69:dc:
                    2f:c5:35:26:05:d4:8e:45:1c:52:3c:91:ab:e6:04:
                    87:81:39:64:16:a6:b1:a4:69:81:bb:a5:82:ec:5a:
                    b4:98:fe:ba:8a:6c:09:7e:5c:a0:02:f1:c1:11:c8:
                    21:b8:3e:08:09:9c:35:f4:74:b7:01:44:1c:b1:ba:
                    c3:cb:13:4d:94:1a:05:51:52:85:43:d0:01:2a:e3:
                    bf:93:31:fd:45:22:62:e4:94:bc:df:ee:ad:df:90:
                    41:a0:81:7c:23:7c:a7:04:c1:fe:df:7f:16:8c:fd:
                    3e:65:83:9d:2f:dc:d8:cf:6e:c3:59:d9:1e:66:9a:
                    ac:66:ac:0b:2a:2a:43:92:02:00:60:2d:43:15:79:
                    eb:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:73:5A:5A:03:97:18:C1:53:F5:22:E4:FA:5F:64:91:F2:78:F9:4C
            X509v3 Authority Key Identifier:
                keyid:F1:1C:1C:C2:AC:17:60:06:95:F8:8B:43:5D:CA:3A:62:79:84:80:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/F11C1CC2AC17600695F88B435DCA3A62798480D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F11C1CC2AC17600695F88B435DCA3A62798480D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/323830343a313839383a3a2f33332d3333203d3e203631393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1898::/33

    Signature Algorithm: sha256WithRSAEncryption
         25:41:7a:f3:95:ec:57:50:b7:d1:05:19:a8:13:db:7e:d5:c5:
         fa:c6:ec:39:00:d6:26:c8:ce:c1:b8:ae:f7:06:d4:b6:68:7d:
         f3:87:9a:61:90:9b:4a:86:12:df:e8:bb:62:49:9d:ab:2c:f3:
         04:48:95:71:06:d1:ab:8b:b2:fa:c8:ce:fe:67:c7:4f:e1:56:
         28:9a:65:1d:1b:45:48:fa:90:1c:61:fc:6b:52:7e:8a:fc:48:
         ef:03:9b:f6:8c:e4:b7:45:8d:38:7f:59:da:3f:69:f6:33:9d:
         72:25:ae:32:02:96:64:96:84:64:d6:dd:d8:c7:99:92:1b:64:
         ac:1d:93:4f:81:b8:1d:69:e4:85:23:8f:f7:5d:a9:f5:ca:d1:
         9e:34:5e:4c:8c:ee:bf:ed:80:d5:cf:15:1c:01:4b:aa:4f:c2:
         61:2f:de:ce:9b:d7:e9:58:91:b0:fa:66:fc:85:1c:15:55:73:
         20:af:a8:9e:1f:34:26:d7:bb:5f:dd:34:3e:5c:06:c8:0c:02:
         39:c4:5a:0b:74:84:d1:3d:63:42:c5:00:c6:b1:c6:b5:85:df:
         f6:5e:11:d8:b4:11:15:f6:8b:eb:d1:30:66:60:25:66:4a:c2:
         ea:ad:1b:3a:8a:f1:e0:17:f2:d7:bc:fe:9c:59:4e:4a:a2:97:
         99:b9:cb:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:48 2025 by rpki-client