Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/323830343a333363633a3a2f33322d3332203d3e203238363536.roa
File:                     323830343a333363633a3a2f33322d3332203d3e203238363536.roa (raw, json)
Hash identifier:          LJWL3igQgqb1yzlYgc6N2u+n8OhTnzJX3/SNEherLEo=
Subject key identifier:   6C:FA:4F:CA:AD:E1:EE:40:5C:09:62:C5:5E:79:B7:96:88:9B:70:BA
Certificate issuer:       /CN=F2CA5B5E6C5CA0EE4C8A0248C4295BB02573FA5C
Certificate serial:       5930254605AA506E2E12F975727B6FDF2B4B2E1A
Authority key identifier: F2:CA:5B:5E:6C:5C:A0:EE:4C:8A:02:48:C4:29:5B:B0:25:73:FA:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2CA5B5E6C5CA0EE4C8A0248C4295BB02573FA5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/323830343a333363633a3a2f33322d3332203d3e203238363536.roa
Signing time:             Sun 19 Mar 2023 13:55:37 +0000
ROA not before:           Sun 19 Mar 2023 13:50:37 +0000
ROA not after:            Sun 17 Mar 2024 13:55:37 +0000
asID:                     28656
IP address blocks:        2804:33cc::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:30:25:46:05:aa:50:6e:2e:12:f9:75:72:7b:6f:df:2b:4b:2e:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2CA5B5E6C5CA0EE4C8A0248C4295BB02573FA5C
        Validity
            Not Before: Mar 19 13:50:37 2023 GMT
            Not After : Mar 17 13:55:37 2024 GMT
        Subject: CN=6CFA4FCAADE1EE405C0962C55E79B796889B70BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:70:91:f9:95:3d:13:93:89:fa:03:61:1f:36:
                    4b:3f:04:48:07:37:6c:37:38:ea:30:89:3c:ad:f4:
                    d8:09:b9:5d:7a:39:fa:bc:55:df:dd:a5:19:ac:a2:
                    b5:82:a9:8c:16:62:0b:bc:90:b4:0b:e1:95:3a:30:
                    00:4b:32:d7:1f:91:be:2a:78:fe:ff:67:52:43:b4:
                    50:88:b0:de:f1:1d:f9:c0:85:5b:ec:d9:7c:52:f0:
                    ea:ca:19:ce:b8:29:99:93:71:7b:57:d8:fd:7e:33:
                    8d:6f:96:14:f8:e9:d1:ae:e2:b3:cc:67:8a:46:be:
                    e0:fa:88:14:4d:e0:d6:f4:d5:76:d5:6c:3b:45:37:
                    c5:ed:d7:c7:93:1b:67:d6:20:8b:38:f6:75:cb:0b:
                    4f:4f:19:43:fd:7d:e5:47:e4:f5:2f:ec:dd:c4:fd:
                    d6:b2:ca:42:4c:45:bb:95:2c:93:8f:38:3e:05:d4:
                    c7:a0:b6:d3:bd:1f:b5:65:22:c6:33:8d:d1:82:6d:
                    9a:e8:bf:02:91:6a:ea:c7:7c:24:e3:e4:5f:63:5c:
                    f1:49:f6:ef:0b:52:b1:4e:29:13:3b:00:e2:bc:df:
                    12:dc:70:e1:bd:1b:5d:19:4e:76:0e:47:82:c8:c7:
                    af:6f:ad:34:dc:81:ea:7a:c0:c8:21:4f:03:b1:89:
                    a4:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:FA:4F:CA:AD:E1:EE:40:5C:09:62:C5:5E:79:B7:96:88:9B:70:BA
            X509v3 Authority Key Identifier:
                keyid:F2:CA:5B:5E:6C:5C:A0:EE:4C:8A:02:48:C4:29:5B:B0:25:73:FA:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/F2CA5B5E6C5CA0EE4C8A0248C4295BB02573FA5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2CA5B5E6C5CA0EE4C8A0248C4295BB02573FA5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/323830343a333363633a3a2f33322d3332203d3e203238363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:33cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:d2:b8:29:f6:5e:ba:5a:66:70:5f:b5:3a:ad:e2:f9:05:f7:
         19:e7:77:4b:b3:79:79:c1:10:66:7b:17:57:77:57:6d:4c:08:
         33:e4:66:bb:a4:1f:9b:db:89:4b:8a:dd:6e:01:d1:3a:f4:9c:
         80:50:b0:d3:1a:29:3b:e9:35:48:fa:49:d7:d9:2d:8f:cd:bc:
         d0:67:a9:0b:86:ed:65:36:da:95:ac:51:42:40:cb:53:2b:a6:
         f7:47:ba:92:9b:d4:13:7e:9a:16:15:17:9c:28:e1:1c:fc:d7:
         0b:59:d3:f2:bf:09:cf:84:dd:ad:38:99:b0:5e:47:1a:e5:2d:
         44:52:5e:aa:2b:14:7a:49:7a:02:08:f4:53:17:99:95:47:a2:
         18:8d:a6:0a:3d:be:b9:e8:42:45:77:34:6e:8b:34:a8:03:2f:
         4d:6a:8e:40:07:35:ed:56:de:23:14:52:b6:b9:f0:0d:8f:d2:
         32:cb:b3:78:fa:0e:6a:62:97:45:ff:89:c6:6d:31:1f:16:cd:
         76:31:4c:6d:3e:29:ba:2f:04:e9:b2:6b:50:af:7b:96:be:31:
         dc:52:34:11:1e:e0:82:89:2e:cc:d0:49:20:25:32:52:e4:b1:
         69:ca:ae:d0:a3:ee:0a:40:18:8e:f3:e7:9d:08:0c:5a:69:97:
         c5:1e:a0:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:14:18 2025 by rpki-client