Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/6/323830343a3837633a383a3a2f34382d3438203d3e203238323032.roa
File:                     323830343a3837633a383a3a2f34382d3438203d3e203238323032.roa (raw, json)
Hash identifier:          5HeN3nDmQQ7XaomMeWeeN3Z/bgZ3FAw4tiGXWGE6glw=
Subject key identifier:   FC:67:4D:D1:20:4C:2F:A4:54:3B:5D:7A:C3:89:A0:59:9E:5E:AF:F6
Certificate issuer:       /CN=85FE199EB26E8B5E82D6033E5D496B0510EBD27C
Certificate serial:       6A6B5C06021CEDD99F34CC8C02AAD3850B36527F
Authority key identifier: 85:FE:19:9E:B2:6E:8B:5E:82:D6:03:3E:5D:49:6B:05:10:EB:D2:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85FE199EB26E8B5E82D6033E5D496B0510EBD27C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/6/323830343a3837633a383a3a2f34382d3438203d3e203238323032.roa
Signing time:             Fri 10 Jan 2025 17:23:02 +0000
ROA not before:           Fri 10 Jan 2025 17:18:02 +0000
ROA not after:            Fri 09 Jan 2026 17:23:02 +0000
asID:                     28202
IP address blocks:        2804:87c:8::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:6b:5c:06:02:1c:ed:d9:9f:34:cc:8c:02:aa:d3:85:0b:36:52:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85FE199EB26E8B5E82D6033E5D496B0510EBD27C
        Validity
            Not Before: Jan 10 17:18:02 2025 GMT
            Not After : Jan  9 17:23:02 2026 GMT
        Subject: CN=FC674DD1204C2FA4543B5D7AC389A0599E5EAFF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:86:fc:e8:49:51:e6:ac:99:77:6d:e5:30:91:
                    3d:7a:63:ff:a5:58:77:58:e8:3a:51:3e:de:a1:52:
                    e9:1b:7d:69:a2:07:d5:28:bc:19:6d:cf:98:d5:80:
                    0b:29:37:05:e6:8c:5d:33:9b:a1:0d:ee:cb:0e:1c:
                    d3:c1:90:f3:bd:c2:7e:ff:a4:c5:8d:07:dc:59:ff:
                    93:f7:a9:46:42:09:66:da:89:17:87:ed:59:97:0d:
                    b0:ae:6e:bc:7a:8a:7e:4b:ed:15:9a:e3:8b:42:e4:
                    9f:2e:d1:8b:6a:f5:52:94:06:69:7d:fd:9c:ba:61:
                    95:86:9b:35:f7:50:c4:d8:44:ac:e7:14:e1:72:b2:
                    ea:dc:c7:5d:81:09:10:3e:2d:08:59:65:aa:01:6f:
                    84:55:76:fe:f9:37:9a:56:c6:43:b7:d0:2a:15:77:
                    27:c2:25:99:3f:88:9c:08:76:ce:50:91:9e:3e:91:
                    a4:75:1a:03:1c:21:81:5a:50:18:df:4f:6c:18:5f:
                    52:20:fd:34:5a:f7:71:93:45:64:d2:04:40:2f:f7:
                    93:72:ff:eb:c3:c6:0d:ea:3e:30:6e:79:ec:db:77:
                    9a:12:7d:d2:67:6a:3a:14:7a:ed:2f:83:dd:3e:60:
                    b5:5d:20:d2:fa:2b:7c:45:c4:74:e8:26:04:d7:56:
                    24:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:67:4D:D1:20:4C:2F:A4:54:3B:5D:7A:C3:89:A0:59:9E:5E:AF:F6
            X509v3 Authority Key Identifier:
                keyid:85:FE:19:9E:B2:6E:8B:5E:82:D6:03:3E:5D:49:6B:05:10:EB:D2:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/6/85FE199EB26E8B5E82D6033E5D496B0510EBD27C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85FE199EB26E8B5E82D6033E5D496B0510EBD27C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/6/323830343a3837633a383a3a2f34382d3438203d3e203238323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:87c:8::/48

    Signature Algorithm: sha256WithRSAEncryption
         85:e3:49:47:7b:7d:61:d9:5e:b5:0e:11:5b:6e:8f:ba:18:07:
         a9:4c:2c:b2:b3:ea:06:09:3e:e4:7d:c4:bd:2c:51:d1:a0:d3:
         2e:25:10:ae:b8:7b:6c:0c:05:71:74:d3:8c:d5:b0:b8:f5:9b:
         4e:e4:1a:8a:ca:52:0a:e3:18:f9:51:d4:56:eb:6e:ef:81:86:
         04:44:c4:43:da:69:54:8b:90:1e:b0:a0:e4:db:31:f7:24:d5:
         50:0b:38:72:d1:de:5b:f9:98:cc:9b:73:58:4a:8b:8c:49:8d:
         1d:13:ee:ab:f7:3a:f6:95:a2:11:2c:cc:8d:35:7c:3e:61:4d:
         af:c1:c0:34:2b:34:65:77:41:60:99:39:45:e1:57:bb:49:c8:
         f9:75:8f:0d:b5:f1:4e:78:44:e6:9a:1a:ec:8c:1d:ee:14:0e:
         78:c2:a0:7d:78:74:8f:07:9d:f2:b4:c0:14:dd:36:af:f5:f8:
         18:66:b6:a7:dc:54:aa:79:5b:da:c9:e6:db:be:2a:a8:e0:35:
         02:4f:87:f8:8d:89:68:0e:51:d0:70:14:c0:28:60:b5:0d:9a:
         d0:6f:0d:c7:1a:fc:2f:67:a5:0e:89:3f:ea:5a:8a:5f:07:96:
         4a:3c:01:fb:6a:79:79:d7:67:cb:8c:25:1c:d8:d4:fb:11:0e:
         20:d1:58:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:34:08 2025 by rpki-client