Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HUXoMFP76a3b3TGtVHVKPD6A7hNjWQG1qDg9LN1RRop/0/323830343a356633383a3130313a3a2f34382d3438203d3e20323639303834.roa
File:                     323830343a356633383a3130313a3a2f34382d3438203d3e20323639303834.roa (raw, json)
Hash identifier:          ES0OV3Z2WpV9/9XdfQxhNDOWyKtyZa4nOgACaeWeocE=
Subject key identifier:   83:96:BC:8B:3A:8A:A0:FD:71:FB:D6:13:17:E8:8B:40:E9:D7:40:F3
Certificate issuer:       /CN=FC91ABE2B9C46E0650B987CA9366CF084CEAAA96
Certificate serial:       672BAF84E9E8DFE0A9F08E813F7AA4400C887F99
Authority key identifier: FC:91:AB:E2:B9:C4:6E:06:50:B9:87:CA:93:66:CF:08:4C:EA:AA:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC91ABE2B9C46E0650B987CA9366CF084CEAAA96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HUXoMFP76a3b3TGtVHVKPD6A7hNjWQG1qDg9LN1RRop/0/323830343a356633383a3130313a3a2f34382d3438203d3e20323639303834.roa
Signing time:             Mon 29 May 2023 17:28:57 +0000
ROA not before:           Mon 29 May 2023 17:23:57 +0000
ROA not after:            Mon 27 May 2024 17:28:57 +0000
asID:                     269084
IP address blocks:        2804:5f38:101::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:2b:af:84:e9:e8:df:e0:a9:f0:8e:81:3f:7a:a4:40:0c:88:7f:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC91ABE2B9C46E0650B987CA9366CF084CEAAA96
        Validity
            Not Before: May 29 17:23:57 2023 GMT
            Not After : May 27 17:28:57 2024 GMT
        Subject: CN=8396BC8B3A8AA0FD71FBD61317E88B40E9D740F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:06:45:32:f5:70:04:ed:ee:af:6b:67:68:66:
                    0a:88:35:ab:61:25:42:ed:c6:89:34:8c:57:53:ce:
                    77:22:ab:7e:04:a1:44:d6:09:99:8f:3a:5a:ff:26:
                    49:1b:dd:34:a8:7c:47:f0:0a:f4:7c:36:c6:1b:83:
                    b3:34:53:97:d4:07:cf:65:cc:b0:07:0b:fa:f8:28:
                    bf:1c:44:b7:58:cc:11:4e:86:2f:93:d1:68:08:02:
                    77:3c:59:c4:d6:61:a2:b3:57:d2:fa:6b:e1:3c:2e:
                    27:60:21:62:3a:34:41:07:a8:9c:8d:06:4d:56:96:
                    64:b8:19:b3:90:01:0e:29:39:81:98:46:1e:0a:14:
                    e9:0d:fc:fb:1f:0c:80:14:18:4f:74:d0:47:bd:ea:
                    55:99:41:8c:c7:da:70:ee:10:ca:c1:fb:04:40:8e:
                    cf:d7:43:43:53:4a:3c:a6:9d:f5:ce:d5:93:4f:ad:
                    97:9b:4b:0b:d8:ad:72:d6:21:c8:d6:65:56:5b:60:
                    64:f8:0e:74:4b:c7:29:54:a5:69:36:76:a2:9b:78:
                    9b:ad:ea:52:85:64:e9:7b:59:75:b9:b5:52:83:05:
                    3a:9e:d3:77:a9:b1:6c:2f:d2:cb:dd:ec:b0:60:2d:
                    4f:18:5d:8f:9d:e9:6d:b8:bb:5e:f8:15:79:ab:d7:
                    07:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:96:BC:8B:3A:8A:A0:FD:71:FB:D6:13:17:E8:8B:40:E9:D7:40:F3
            X509v3 Authority Key Identifier:
                keyid:FC:91:AB:E2:B9:C4:6E:06:50:B9:87:CA:93:66:CF:08:4C:EA:AA:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HUXoMFP76a3b3TGtVHVKPD6A7hNjWQG1qDg9LN1RRop/0/FC91ABE2B9C46E0650B987CA9366CF084CEAAA96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC91ABE2B9C46E0650B987CA9366CF084CEAAA96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HUXoMFP76a3b3TGtVHVKPD6A7hNjWQG1qDg9LN1RRop/0/323830343a356633383a3130313a3a2f34382d3438203d3e20323639303834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f38:101::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:a4:81:9e:a2:00:64:0d:89:7e:0a:44:40:38:44:f9:cc:6a:
         a8:65:0e:01:6a:64:8c:4e:d8:5a:e5:d9:de:cc:64:81:a1:d8:
         a6:57:8f:8b:1c:9d:13:6b:ec:8e:51:99:aa:05:a7:1d:36:96:
         35:ab:c3:79:7b:d2:9a:69:af:10:fa:25:1d:1c:85:98:9f:ff:
         e5:1b:6a:ba:45:ae:ec:81:a1:a0:1d:52:0a:34:2f:23:1d:ef:
         6b:45:aa:54:d1:e0:f5:d0:08:ec:82:ab:80:c4:6e:40:b8:89:
         ae:9d:5b:be:29:e3:62:e0:5a:6b:c4:4c:65:88:5f:05:7b:77:
         f8:41:60:a6:8f:b1:ba:4b:08:76:a2:10:be:a8:32:fb:6d:a3:
         1a:87:2c:6d:ae:cd:d5:c6:a3:a0:6a:44:5f:58:08:ff:ed:e7:
         89:10:62:c9:56:ed:4d:2c:e8:07:55:fe:ec:87:90:43:90:17:
         93:6d:14:fd:df:11:c9:82:e5:f1:8c:fc:8e:ea:1d:2e:21:2e:
         9f:46:c2:d5:f1:6c:29:11:a9:bf:27:39:bb:28:36:0b:3a:8d:
         98:6d:ee:66:2c:50:2b:0a:f1:21:d7:52:fd:89:d2:0c:22:dd:
         21:9f:3c:4e:22:45:fb:4f:cd:81:a7:70:98:14:19:f4:62:d8:
         6a:6f:cb:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:27:40 2025 by rpki-client