Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7FDVBJCfNkiHrte2ahc1NAuGnzk9vFmoELcgCQNWsCyr/0/323830343a323538343a3a2f33322d3336203d3e20323634323835.roa
File:                     323830343a323538343a3a2f33322d3336203d3e20323634323835.roa (raw, json)
Hash identifier:          +se8iFFIFqGG4LHd15W64OLPfgmv/DDucHBo8OqBgAA=
Subject key identifier:   E0:B1:34:0E:DC:7C:1A:1F:FC:A6:73:16:C1:41:07:F2:0F:B8:95:46
Certificate issuer:       /CN=F153A07A7EFD17B6BA606CA309C9575303F9D421
Certificate serial:       3506F8C955F51C83BC3C2077637F68AC61151443
Authority key identifier: F1:53:A0:7A:7E:FD:17:B6:BA:60:6C:A3:09:C9:57:53:03:F9:D4:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F153A07A7EFD17B6BA606CA309C9575303F9D421.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7FDVBJCfNkiHrte2ahc1NAuGnzk9vFmoELcgCQNWsCyr/0/323830343a323538343a3a2f33322d3336203d3e20323634323835.roa
Signing time:             Fri 26 May 2023 14:00:31 +0000
ROA not before:           Fri 26 May 2023 13:55:31 +0000
ROA not after:            Fri 24 May 2024 14:00:31 +0000
asID:                     264285
IP address blocks:        2804:2584::/32 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:06:f8:c9:55:f5:1c:83:bc:3c:20:77:63:7f:68:ac:61:15:14:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F153A07A7EFD17B6BA606CA309C9575303F9D421
        Validity
            Not Before: May 26 13:55:31 2023 GMT
            Not After : May 24 14:00:31 2024 GMT
        Subject: CN=E0B1340EDC7C1A1FFCA67316C14107F20FB89546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:99:58:82:d4:07:b8:84:f8:1b:4f:34:c3:b7:
                    3f:7a:98:10:99:af:90:7a:ce:5a:bb:2b:3f:4b:d8:
                    ef:8d:ae:40:26:9f:34:a3:05:dd:5d:1f:a1:97:0a:
                    99:3d:79:93:6e:ef:1b:c1:b1:a3:10:0e:64:f2:35:
                    96:25:00:5b:5c:3c:16:50:a3:98:40:7b:e2:92:9d:
                    31:41:dd:e6:14:35:88:95:5c:f4:3d:b0:4b:a6:32:
                    66:79:4e:7c:b3:e6:90:35:68:21:d0:4a:71:fb:f7:
                    12:cd:7f:b4:6a:68:db:2b:47:6c:59:db:5e:22:71:
                    d4:9e:98:bf:5e:3d:a5:6d:6e:f3:2f:61:5d:ea:b5:
                    45:18:4f:76:01:ea:af:f8:16:f2:0b:ee:07:07:9c:
                    a1:18:c7:3e:96:e3:87:64:01:a6:77:85:ae:93:4c:
                    e1:cc:2b:9b:43:88:56:a5:72:82:a9:8b:d1:e4:54:
                    c8:f5:91:ce:42:cd:f6:49:00:79:cb:35:86:b1:97:
                    17:db:26:c0:ba:6e:ed:0d:05:da:ba:45:aa:cb:63:
                    60:c2:96:9d:e5:0c:51:19:20:8e:89:71:48:30:24:
                    98:82:04:4c:a2:05:c1:53:86:86:15:9d:4b:96:0a:
                    f3:22:e3:18:ec:ec:b0:aa:22:0b:fb:34:c6:8e:b8:
                    e3:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:B1:34:0E:DC:7C:1A:1F:FC:A6:73:16:C1:41:07:F2:0F:B8:95:46
            X509v3 Authority Key Identifier:
                keyid:F1:53:A0:7A:7E:FD:17:B6:BA:60:6C:A3:09:C9:57:53:03:F9:D4:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7FDVBJCfNkiHrte2ahc1NAuGnzk9vFmoELcgCQNWsCyr/0/F153A07A7EFD17B6BA606CA309C9575303F9D421.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F153A07A7EFD17B6BA606CA309C9575303F9D421.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7FDVBJCfNkiHrte2ahc1NAuGnzk9vFmoELcgCQNWsCyr/0/323830343a323538343a3a2f33322d3336203d3e20323634323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2584::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:59:c2:51:2a:75:cb:35:96:0f:a2:be:d9:e4:b0:d9:02:83:
         84:18:bf:a8:ff:8f:80:b4:7c:60:b6:fb:43:5c:02:77:75:02:
         bb:0d:e2:a5:5a:9e:49:b4:e9:4d:b9:cf:1c:7e:d6:43:d2:25:
         70:b2:f0:05:64:c6:ee:22:18:bd:3c:bc:ff:bc:5e:d6:4f:00:
         8c:c4:ea:6a:03:51:3a:4c:73:a2:65:95:c6:c0:7d:ca:86:49:
         bc:bc:ae:a5:53:f1:22:c6:64:5d:00:22:75:4c:d2:b5:f7:7d:
         2e:6e:5a:91:4e:07:93:76:9b:46:9b:bd:b1:1f:8a:cc:b4:e0:
         c2:26:f5:9f:00:29:be:d6:2d:33:85:26:c9:13:a0:fe:9a:4f:
         cd:db:49:c0:f9:fa:ad:78:86:e1:71:83:14:61:15:e4:85:26:
         45:0e:74:93:bc:2a:ff:2f:68:13:a6:ae:56:d1:80:3e:15:fb:
         e3:dd:06:29:79:3d:44:fa:da:1a:50:d7:5f:50:15:f8:35:9f:
         dc:fc:c3:80:5c:a6:44:9c:77:91:be:63:03:19:ae:75:8d:e8:
         1a:fa:fe:d9:2e:52:86:9e:d1:1f:b8:52:38:b5:91:aa:51:ad:
         e9:f5:61:87:23:93:46:15:82:f0:5d:57:37:96:90:ec:49:bc:
         1d:e3:d6:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:40 2025 by rpki-client