Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HUXoMFP76a3b3TGtVHVKPD6A7hNjWQG1qDg9LN1RRop/0/323830343a356633383a3132353a3a2f34382d3438203d3e20323639303834.roa
File:                     323830343a356633383a3132353a3a2f34382d3438203d3e20323639303834.roa (raw, json)
Hash identifier:          +T1n/1EmjJsDPjY2Ib3r+YkJrSGf8qOtBLST1wjQWhY=
Subject key identifier:   45:69:E0:EC:21:63:A9:1E:25:50:CA:09:65:BB:F4:74:05:79:A3:16
Certificate issuer:       /CN=FC91ABE2B9C46E0650B987CA9366CF084CEAAA96
Certificate serial:       152B9C31B25EEF6F56B087DF11C9CE9953F9C12C
Authority key identifier: FC:91:AB:E2:B9:C4:6E:06:50:B9:87:CA:93:66:CF:08:4C:EA:AA:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC91ABE2B9C46E0650B987CA9366CF084CEAAA96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HUXoMFP76a3b3TGtVHVKPD6A7hNjWQG1qDg9LN1RRop/0/323830343a356633383a3132353a3a2f34382d3438203d3e20323639303834.roa
Signing time:             Mon 29 May 2023 17:29:12 +0000
ROA not before:           Mon 29 May 2023 17:24:12 +0000
ROA not after:            Mon 27 May 2024 17:29:12 +0000
asID:                     269084
IP address blocks:        2804:5f38:125::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:2b:9c:31:b2:5e:ef:6f:56:b0:87:df:11:c9:ce:99:53:f9:c1:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC91ABE2B9C46E0650B987CA9366CF084CEAAA96
        Validity
            Not Before: May 29 17:24:12 2023 GMT
            Not After : May 27 17:29:12 2024 GMT
        Subject: CN=4569E0EC2163A91E2550CA0965BBF4740579A316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f3:fe:0a:ee:a9:4d:8d:5e:7b:b3:a5:31:99:
                    6c:e0:28:54:7d:e3:85:c5:5a:51:34:ca:c7:a7:00:
                    1f:12:f2:25:ee:e6:b6:9e:ff:ba:f1:84:7d:28:61:
                    ce:a7:64:97:47:a9:41:80:c6:a8:a0:fe:a1:c3:df:
                    a9:91:08:f1:8e:62:ab:3c:59:8d:16:bb:e8:33:ba:
                    a7:03:ab:6d:a9:b6:0b:f1:b6:79:c9:41:46:18:42:
                    cf:90:74:f8:3a:85:78:09:d4:48:04:b6:d1:74:2b:
                    53:74:f8:1a:77:b7:4d:1f:4f:ef:52:f2:45:28:df:
                    a1:cf:9f:23:17:c3:ad:45:15:cd:7b:4e:1c:e0:a5:
                    24:1f:9c:95:2b:8d:5f:a5:f3:ec:3b:fb:f0:a6:f1:
                    f0:b7:05:1b:3e:8e:24:0e:97:cb:19:26:d5:d5:16:
                    e1:8c:46:f6:bc:9d:3f:dc:3d:49:69:a0:74:be:d2:
                    65:63:88:de:69:9a:37:e8:06:c6:d5:55:64:56:08:
                    59:fe:62:62:e6:56:c7:c9:47:3f:c9:f0:24:f5:09:
                    b6:7b:8a:5e:24:bf:e9:64:26:7c:8e:46:96:f1:14:
                    08:1d:19:b9:29:b6:65:f1:69:f0:78:7b:8c:f6:95:
                    b0:fd:79:34:88:b5:f5:91:c5:cb:42:99:60:0b:50:
                    c3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:69:E0:EC:21:63:A9:1E:25:50:CA:09:65:BB:F4:74:05:79:A3:16
            X509v3 Authority Key Identifier:
                keyid:FC:91:AB:E2:B9:C4:6E:06:50:B9:87:CA:93:66:CF:08:4C:EA:AA:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HUXoMFP76a3b3TGtVHVKPD6A7hNjWQG1qDg9LN1RRop/0/FC91ABE2B9C46E0650B987CA9366CF084CEAAA96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC91ABE2B9C46E0650B987CA9366CF084CEAAA96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HUXoMFP76a3b3TGtVHVKPD6A7hNjWQG1qDg9LN1RRop/0/323830343a356633383a3132353a3a2f34382d3438203d3e20323639303834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f38:125::/48

    Signature Algorithm: sha256WithRSAEncryption
         9e:7f:50:2c:54:8c:15:06:4d:e9:74:e8:16:a6:9a:e3:92:dc:
         45:aa:0e:b2:f1:dd:34:fa:ce:45:2b:c6:c5:1d:20:76:78:e3:
         88:4f:d2:79:21:94:8e:61:5c:bd:98:dc:b4:f4:04:77:e1:64:
         99:80:ef:df:10:03:a6:d6:fe:14:94:40:57:d9:d7:b3:70:6e:
         73:1b:43:13:38:29:7b:62:d3:79:22:a0:fd:51:ad:93:e2:33:
         9f:a3:3e:d3:7c:c3:79:2a:1f:28:f4:1c:d1:60:e9:86:7d:d1:
         90:d5:66:33:9f:49:50:d1:fd:a4:49:16:18:d8:1a:e6:3c:36:
         55:c9:3e:5d:fc:32:76:90:cd:0d:fc:8a:da:de:f7:6e:dd:2d:
         25:c4:da:31:6e:7a:de:51:4b:aa:70:7a:a8:9e:84:21:eb:31:
         23:90:7a:73:81:b9:04:50:a2:15:33:57:49:1b:1c:a3:80:40:
         90:8d:f5:71:7e:f5:4d:46:72:18:2e:e2:39:4d:85:ef:45:00:
         ac:5b:3a:e6:f6:35:64:fc:4f:e0:55:7b:3d:9b:2a:26:97:c7:
         8d:b1:54:2f:ee:91:8e:73:e0:a3:d5:87:fd:fc:3e:83:18:73:
         35:88:84:3b:9c:52:6d:7b:55:2b:49:35:70:da:3b:21:19:a5:
         d2:c7:83:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:24:52 2025 by rpki-client