Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/0/323830343a336639343a3a2f33332d3333203d3e20323632343532.roa
File:                     323830343a336639343a3a2f33332d3333203d3e20323632343532.roa (raw, json)
Hash identifier:          JUFruknuPH5l5bjJoH5P9kKZ3TW2frOmFKKrSin9OfA=
Subject key identifier:   1F:96:1C:AD:2B:CC:33:32:0B:C1:B1:18:77:82:13:3D:BA:AD:8B:E0
Certificate issuer:       /CN=F432E0EDB69BD6E253EE20F4C1589A46267AA2B9
Certificate serial:       2736CFFE4807BF90E612B3B8349007A51E7A08A2
Authority key identifier: F4:32:E0:ED:B6:9B:D6:E2:53:EE:20:F4:C1:58:9A:46:26:7A:A2:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F432E0EDB69BD6E253EE20F4C1589A46267AA2B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/0/323830343a336639343a3a2f33332d3333203d3e20323632343532.roa
Signing time:             Mon 10 Feb 2025 18:28:45 +0000
ROA not before:           Mon 10 Feb 2025 18:23:45 +0000
ROA not after:            Mon 09 Feb 2026 18:28:45 +0000
asID:                     262452
IP address blocks:        2804:3f94::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:36:cf:fe:48:07:bf:90:e6:12:b3:b8:34:90:07:a5:1e:7a:08:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F432E0EDB69BD6E253EE20F4C1589A46267AA2B9
        Validity
            Not Before: Feb 10 18:23:45 2025 GMT
            Not After : Feb  9 18:28:45 2026 GMT
        Subject: CN=1F961CAD2BCC33320BC1B1187782133DBAAD8BE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:ce:f6:cb:43:19:9c:ec:9f:dc:02:d4:64:96:
                    2c:15:b4:7c:d5:4d:e8:bb:5d:db:68:df:2f:e1:a3:
                    40:57:1e:56:e3:0e:a8:55:fc:f1:f4:3d:10:3b:f9:
                    a4:19:da:13:f4:0b:60:cf:ff:8a:b8:71:67:bb:1d:
                    07:ad:88:f2:05:be:1b:45:fe:f3:18:f4:40:4d:97:
                    9c:3f:47:3b:5b:ae:1b:8d:97:9e:7b:69:75:40:b2:
                    50:8a:ab:d3:ed:52:73:ed:4a:54:e9:4f:ec:0a:43:
                    1d:72:ee:2c:4c:a1:88:f0:74:e0:46:88:ef:17:28:
                    be:df:05:0d:7c:20:ce:b6:b7:71:8c:db:e2:48:54:
                    95:5e:2a:ad:0f:49:ac:55:14:11:30:6f:0d:a7:22:
                    6e:3d:5f:cf:0f:e4:81:cc:d9:1e:4e:4c:35:7f:eb:
                    75:27:83:d3:56:a6:d9:f7:7c:5d:ef:ac:e5:a3:d1:
                    25:8c:76:e4:4a:60:8e:9d:94:3f:5e:f8:40:43:52:
                    78:ae:49:c3:24:fb:42:86:07:c5:b3:01:21:c6:01:
                    b9:ac:16:2c:c0:fb:a8:73:b1:b9:83:7b:c7:fe:b2:
                    bf:b4:3c:67:63:a9:30:83:3c:19:5a:c0:f2:93:f5:
                    55:64:d6:51:64:32:13:ea:19:09:f9:0b:89:e7:e7:
                    e7:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:96:1C:AD:2B:CC:33:32:0B:C1:B1:18:77:82:13:3D:BA:AD:8B:E0
            X509v3 Authority Key Identifier:
                keyid:F4:32:E0:ED:B6:9B:D6:E2:53:EE:20:F4:C1:58:9A:46:26:7A:A2:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/0/F432E0EDB69BD6E253EE20F4C1589A46267AA2B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F432E0EDB69BD6E253EE20F4C1589A46267AA2B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/0/323830343a336639343a3a2f33332d3333203d3e20323632343532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3f94::/33

    Signature Algorithm: sha256WithRSAEncryption
         36:18:2c:09:d6:b1:a9:de:ac:5b:3d:6b:22:d4:10:b0:15:e3:
         e8:0a:35:ca:90:7e:e7:34:8f:fd:3b:ca:44:10:7a:ac:3a:65:
         0b:14:8f:85:d7:eb:c4:1e:18:b8:86:b7:e0:ce:1d:85:5e:41:
         5b:a9:99:7e:33:6a:43:e4:4a:4b:9b:23:7f:7a:20:c9:b1:c1:
         f6:fc:c2:8f:36:b7:3e:c4:9c:80:6a:51:f0:90:71:43:89:ad:
         cf:3e:eb:74:9f:b6:bd:ad:ce:44:4d:f1:6b:fc:f6:95:5f:0c:
         9e:93:3b:3a:59:b7:d0:75:ba:74:dc:53:c5:4a:95:39:14:9e:
         d9:8c:f3:7c:73:4d:4a:cf:b7:f5:9a:57:87:0b:15:30:ee:41:
         cc:fc:77:12:28:76:7e:e3:b4:b3:f0:b9:3c:29:05:93:fb:e5:
         43:12:fa:07:bd:50:5f:e9:fc:1f:86:60:e0:66:87:92:9b:e3:
         3a:bb:5a:85:f2:b9:14:c3:11:03:44:da:3b:96:b0:af:1a:7a:
         8f:ea:48:62:be:83:4b:e4:28:1f:76:f6:0b:0a:e5:96:62:f6:
         a0:f9:59:e1:53:67:65:25:81:aa:23:b8:23:58:31:75:d0:d4:
         7c:58:55:a8:a3:0c:ee:8c:1a:74:ef:60:ed:22:05:71:65:ae:
         25:e8:e6:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 04:39:16 2025 by rpki-client