Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/323830343a376236343a3a2f33322d313238203d3e20323731343239.roa
File:                     323830343a376236343a3a2f33322d313238203d3e20323731343239.roa (raw, json)
Hash identifier:          D1TdJzKfRG2pDDHLx197Df39Zp1rjX6y9Bz+pY0pQXQ=
Subject key identifier:   52:74:59:90:95:03:1E:BF:9A:84:97:BA:7B:43:1E:2D:49:5D:99:8C
Certificate issuer:       /CN=FF08FFB6D0FE39D46098F29E2561500E8827C3B3
Certificate serial:       7CD591C850C20F37E4AFED510DA78A0B8ABFF78C
Authority key identifier: FF:08:FF:B6:D0:FE:39:D4:60:98:F2:9E:25:61:50:0E:88:27:C3:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF08FFB6D0FE39D46098F29E2561500E8827C3B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/323830343a376236343a3a2f33322d313238203d3e20323731343239.roa
Signing time:             Fri 03 May 2024 11:35:09 +0000
ROA not before:           Fri 03 May 2024 11:30:09 +0000
ROA not after:            Fri 02 May 2025 11:35:09 +0000
asID:                     271429
IP address blocks:        2804:7b64::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:d5:91:c8:50:c2:0f:37:e4:af:ed:51:0d:a7:8a:0b:8a:bf:f7:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF08FFB6D0FE39D46098F29E2561500E8827C3B3
        Validity
            Not Before: May  3 11:30:09 2024 GMT
            Not After : May  2 11:35:09 2025 GMT
        Subject: CN=5274599095031EBF9A8497BA7B431E2D495D998C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b4:1b:23:bc:23:ce:53:1b:ae:c6:0a:b5:23:
                    7a:9a:21:fc:61:68:99:6e:25:3f:67:ec:1d:f6:1a:
                    f7:e4:fc:27:f5:8f:3e:10:8b:82:53:05:f1:9b:e2:
                    26:70:42:eb:71:2b:20:1b:63:d6:56:ec:06:f8:1c:
                    99:55:8b:01:a8:b7:ee:00:26:1a:c7:62:bb:6d:2c:
                    9b:ff:c6:03:f8:2f:b7:1c:aa:2c:7c:6a:f3:b9:6c:
                    8e:f5:14:90:4f:76:fe:3a:05:84:8b:77:bf:a0:6b:
                    72:f6:3d:9e:db:4a:2c:ed:a4:9e:48:4e:1e:c9:b2:
                    e4:1f:0e:bc:89:23:87:52:9a:30:68:71:58:5f:59:
                    af:b2:8d:0e:08:b7:f1:f6:53:25:45:56:ba:3d:d4:
                    41:ef:10:88:26:36:14:86:ab:a8:47:fc:9d:cb:90:
                    fc:be:7c:d5:15:2f:95:21:5f:6d:a5:58:15:b2:cd:
                    37:c2:a1:36:4a:fa:1b:55:54:ab:e7:58:38:58:d9:
                    b6:e2:86:94:f8:29:d6:e6:df:3a:5f:9e:ab:3b:1d:
                    5d:d8:1c:0a:91:61:98:ae:ab:b2:6e:59:ee:3a:c9:
                    85:22:50:7c:56:5e:3f:61:a0:fc:f0:55:b5:8b:eb:
                    ce:94:dd:f0:4a:b0:91:80:b0:67:81:8a:4b:f9:66:
                    e3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:74:59:90:95:03:1E:BF:9A:84:97:BA:7B:43:1E:2D:49:5D:99:8C
            X509v3 Authority Key Identifier:
                keyid:FF:08:FF:B6:D0:FE:39:D4:60:98:F2:9E:25:61:50:0E:88:27:C3:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/FF08FFB6D0FE39D46098F29E2561500E8827C3B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF08FFB6D0FE39D46098F29E2561500E8827C3B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/323830343a376236343a3a2f33322d313238203d3e20323731343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7b64::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:82:fe:0b:67:80:0d:c7:79:99:7a:07:ca:af:5d:60:50:5a:
         bb:30:aa:33:18:77:f7:90:96:4f:b5:30:22:9c:11:16:a8:bc:
         0c:72:0f:22:ae:01:03:40:29:be:de:a8:58:57:fc:e3:da:b0:
         3b:00:2d:c0:c1:5c:ef:42:61:7a:c1:7f:31:8a:01:75:f5:37:
         05:4e:f4:1d:e7:2d:24:5c:4a:c8:ab:93:be:56:aa:d4:96:7e:
         ee:b6:6f:e8:71:87:95:fe:5b:72:dd:c2:8f:e8:3d:84:cd:12:
         9d:57:ec:ea:34:6a:90:06:67:f0:da:ff:eb:d2:c5:1d:f2:01:
         9f:35:c1:0c:0a:e7:f4:08:d5:23:ca:11:a8:33:36:6b:1f:55:
         84:10:30:89:d4:c6:30:4d:18:1d:8d:81:63:08:3b:ad:33:45:
         57:0d:68:50:c1:e2:2b:12:6a:a7:ee:93:3d:2a:c5:3f:26:5c:
         3a:5b:98:e6:6d:31:ee:bb:a8:48:04:48:9e:36:4b:4b:5e:2f:
         5b:90:cb:f0:5d:2c:ca:dd:c7:68:50:0e:37:ab:fe:20:72:12:
         d7:20:02:ad:86:4e:2d:6a:4d:8e:50:11:09:69:7f:c2:fa:6f:
         88:c2:21:33:88:2c:d4:bb:8f:0d:7c:f8:6a:88:65:7c:38:04:
         4d:f7:0e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:38:48 2025 by rpki-client