Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/323830343a316364343a316330303a3a2f34302d3430203d3e203631363738.roa
File:                     323830343a316364343a316330303a3a2f34302d3430203d3e203631363738.roa (raw, json)
Hash identifier:          K0PKZBFiMDunCPfCikBfC5eHLEzAGbZQhm+9R2rMs0I=
Subject key identifier:   11:A6:15:09:70:83:A7:AB:55:5A:4A:A8:15:AE:59:15:90:A5:A6:0D
Certificate issuer:       /CN=5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4
Certificate serial:       5EB10FFA1F6A0D8F5A945951783D445DA14BA9CE
Authority key identifier: 5F:FF:1D:3A:94:7B:8B:5F:F7:5D:D7:1F:F1:CE:D7:0D:4E:3F:A0:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/323830343a316364343a316330303a3a2f34302d3430203d3e203631363738.roa
Signing time:             Tue 24 Oct 2023 12:43:16 +0000
ROA not before:           Tue 24 Oct 2023 12:38:16 +0000
ROA not after:            Tue 22 Oct 2024 12:43:16 +0000
asID:                     61678
IP address blocks:        2804:1cd4:1c00::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:b1:0f:fa:1f:6a:0d:8f:5a:94:59:51:78:3d:44:5d:a1:4b:a9:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4
        Validity
            Not Before: Oct 24 12:38:16 2023 GMT
            Not After : Oct 22 12:43:16 2024 GMT
        Subject: CN=11A615097083A7AB555A4AA815AE591590A5A60D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:07:fe:14:1f:0d:e4:4e:58:b2:da:0e:40:01:
                    3e:24:dd:ab:36:a0:43:ff:d2:8f:1e:22:3b:8e:99:
                    66:70:2e:e0:55:08:6f:d5:75:ea:2b:e2:3b:2f:32:
                    3e:27:16:7b:c9:62:47:6b:6e:63:a5:32:68:15:0c:
                    c3:43:5f:bf:ac:d8:6d:4b:30:f8:f2:e2:f4:1e:1c:
                    dd:1a:a9:c8:91:da:de:f8:c8:42:e8:be:09:4a:95:
                    70:bd:78:83:7a:93:2c:ab:65:80:4e:6a:60:3c:27:
                    cf:f7:8f:39:96:b5:4a:8e:68:fa:a1:ed:86:bb:d9:
                    d6:89:db:72:56:82:70:6b:91:58:92:a5:fc:45:e7:
                    cd:83:9d:cf:09:30:4e:3c:49:fe:cc:53:7f:ca:2a:
                    63:85:43:08:fe:3c:3e:00:82:9a:2d:86:a0:ec:b3:
                    89:e8:07:ff:84:4f:9d:64:42:a3:20:c2:b1:98:e1:
                    b1:23:9e:a7:67:b0:96:77:b2:d7:a4:73:16:93:ba:
                    22:0f:ab:33:1f:e7:59:c6:5f:ce:64:e5:19:ff:78:
                    e5:93:c9:c5:5e:d0:78:f4:e5:e0:e6:e7:d7:67:aa:
                    aa:aa:a0:a5:22:3a:67:6f:95:d5:d4:89:d7:37:45:
                    d3:76:93:78:49:71:9f:a3:d0:c6:4c:ef:23:7d:02:
                    20:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:A6:15:09:70:83:A7:AB:55:5A:4A:A8:15:AE:59:15:90:A5:A6:0D
            X509v3 Authority Key Identifier:
                keyid:5F:FF:1D:3A:94:7B:8B:5F:F7:5D:D7:1F:F1:CE:D7:0D:4E:3F:A0:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/323830343a316364343a316330303a3a2f34302d3430203d3e203631363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1cd4:1c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         86:af:5d:04:66:01:66:b8:24:7e:f5:a1:29:a4:08:b8:b9:dc:
         11:2e:dd:c2:7e:ee:75:52:5b:2e:94:7b:e1:d9:7d:3f:cb:fa:
         fb:e3:c1:e1:60:91:3d:da:0d:35:44:72:fd:39:6e:03:82:24:
         eb:07:f1:24:97:6e:ba:fc:8e:75:18:a7:78:8e:53:ab:76:6f:
         82:f6:22:c9:bb:d9:a5:78:8c:19:5e:54:aa:e6:e8:45:1e:d9:
         67:b1:02:6e:f2:7b:79:dc:b6:10:bd:ae:7c:ee:44:a1:25:ba:
         e2:3d:fc:da:03:56:23:2b:da:c2:4c:c5:68:fb:9e:ab:a6:dd:
         fd:1a:ad:a9:8b:27:76:3b:ad:0f:97:3d:91:a2:d7:e9:9e:8b:
         04:cc:1b:0f:a0:a0:71:01:66:2b:05:5a:a2:c6:f9:53:2f:a9:
         8e:96:42:2e:c5:d1:a9:46:a9:27:af:87:f7:9f:56:f9:4f:9c:
         58:08:9c:06:ff:bb:f7:85:57:9f:d9:c6:da:52:3b:08:07:aa:
         ca:6a:6c:8d:a4:10:16:89:a0:5f:a1:fb:64:50:34:10:52:00:
         61:7b:41:32:48:c9:26:8a:4e:8a:75:6a:3b:2e:5e:8c:53:26:
         78:19:f7:cb:23:2c:ad:55:19:55:77:a5:91:5c:14:ac:a2:ef:
         f8:5b:78:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:16 2025 by rpki-client