Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/323830343a376133343a323a3a2f34382d3438203d3e20323731333535.roa
File:                     323830343a376133343a323a3a2f34382d3438203d3e20323731333535.roa (raw, json)
Hash identifier:          xe0wEgqWB8WWt8oEHBo7OX+1Qqmkok1NEGYUtOVOP1U=
Subject key identifier:   CD:01:9C:F7:EF:73:E6:6F:94:45:FA:37:10:90:CE:05:02:E3:49:7D
Certificate issuer:       /CN=F5A743CB79514A022DEC422535A63FCBFC40185B
Certificate serial:       4410A1887FF806B5704BB518B797A1B3ECC9464A
Authority key identifier: F5:A7:43:CB:79:51:4A:02:2D:EC:42:25:35:A6:3F:CB:FC:40:18:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A743CB79514A022DEC422535A63FCBFC40185B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/323830343a376133343a323a3a2f34382d3438203d3e20323731333535.roa
Signing time:             Thu 07 Nov 2024 16:43:26 +0000
ROA not before:           Thu 07 Nov 2024 16:38:26 +0000
ROA not after:            Thu 06 Nov 2025 16:43:26 +0000
asID:                     271355
IP address blocks:        2804:7a34:2::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:10:a1:88:7f:f8:06:b5:70:4b:b5:18:b7:97:a1:b3:ec:c9:46:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5A743CB79514A022DEC422535A63FCBFC40185B
        Validity
            Not Before: Nov  7 16:38:26 2024 GMT
            Not After : Nov  6 16:43:26 2025 GMT
        Subject: CN=CD019CF7EF73E66F9445FA371090CE0502E3497D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4e:f8:66:9d:a8:71:07:b5:84:85:f1:f7:81:
                    26:71:b6:fe:11:43:f7:0d:7e:ed:3e:88:e0:0f:f3:
                    0c:74:38:ca:84:25:3f:d4:3a:7e:ca:3b:dc:c5:dc:
                    6d:5d:a8:96:94:08:62:28:f7:29:a9:86:a7:b7:41:
                    6f:c7:58:0f:99:06:17:c1:db:f0:b3:88:c2:3f:e6:
                    89:2b:70:e1:e6:c4:1f:59:69:d2:6a:72:dd:96:dd:
                    7b:be:70:31:64:b6:ac:bd:32:cc:3e:39:5f:00:ff:
                    5e:1c:bb:35:39:07:84:38:cc:d9:fb:fc:5a:06:4c:
                    d1:85:ce:ab:9a:f7:b9:3c:4d:70:8d:86:17:75:ad:
                    bc:2c:0a:20:e3:04:1b:2e:d4:ba:22:ed:e8:98:d9:
                    24:10:71:36:93:b0:77:6d:17:de:15:26:1c:42:e5:
                    d3:cd:90:bc:66:16:9b:bc:4c:3c:93:01:fc:0b:45:
                    6f:a0:31:7f:c7:e2:ee:a2:d8:6b:9a:78:96:dc:ba:
                    ba:1f:5c:89:06:47:e8:eb:9f:10:90:fe:75:19:ea:
                    4f:8d:6b:dc:db:ae:3c:bb:0e:89:49:f8:d6:2b:8b:
                    75:75:7c:54:d1:c1:2d:14:b3:25:9d:cb:bf:75:90:
                    7e:ad:3b:d2:61:ec:90:ab:e9:26:75:5b:d4:d5:bb:
                    e7:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:01:9C:F7:EF:73:E6:6F:94:45:FA:37:10:90:CE:05:02:E3:49:7D
            X509v3 Authority Key Identifier:
                keyid:F5:A7:43:CB:79:51:4A:02:2D:EC:42:25:35:A6:3F:CB:FC:40:18:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/F5A743CB79514A022DEC422535A63FCBFC40185B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A743CB79514A022DEC422535A63FCBFC40185B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/323830343a376133343a323a3a2f34382d3438203d3e20323731333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a34:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         a0:e8:03:86:1b:7a:fd:7b:fd:a3:f5:cc:54:68:60:63:23:b8:
         08:60:3b:dd:36:0a:9f:4d:6d:c3:6c:cf:c7:c5:c8:fd:31:57:
         99:a2:74:5b:77:60:b4:f1:11:b5:95:e5:f1:59:48:0a:7e:84:
         e7:98:be:a9:2f:1f:22:94:36:90:bb:d0:3f:8a:36:96:4f:50:
         08:9e:42:a1:b3:f1:c5:e5:d0:3d:55:dd:c6:15:a6:55:6a:55:
         25:4f:36:e6:58:79:28:f1:a8:2f:84:06:00:a7:6e:ca:e4:69:
         86:bb:51:0d:c5:a0:90:eb:19:97:3c:49:d8:a6:af:62:65:9d:
         db:a7:f8:6a:53:09:aa:3b:3f:cc:4b:3b:74:82:6e:be:9e:66:
         08:8e:8e:2c:ae:9f:ef:2c:6e:2d:f0:78:cb:cf:4e:6d:72:a9:
         22:3b:2d:d4:08:32:b6:64:c6:3f:53:f0:5f:ae:8a:2a:44:c3:
         02:7e:b1:ee:b4:21:f3:60:e0:dd:59:db:8c:fe:5e:21:c9:58:
         30:fe:ee:30:69:74:83:58:a0:21:ad:ee:b1:42:e3:c3:64:96:
         a9:45:71:58:4b:5f:b3:e5:37:6b:ca:1d:93:96:bf:b2:47:80:
         3b:cf:9f:bb:fa:a3:f9:ef:b2:43:09:c0:3b:2e:6d:22:86:5d:
         cc:19:e4:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:01:44 2025 by rpki-client