Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/323830343a383333303a383030303a3a2f33332d3333203d3e20323732313832.roa
File:                     323830343a383333303a383030303a3a2f33332d3333203d3e20323732313832.roa (raw, json)
Hash identifier:          tWgrMcDE0qdjfN9Bt5N+YypSpGiTU2lGL7Ms+SFWFeo=
Subject key identifier:   E4:9D:CA:CC:3A:58:C4:CA:5B:B6:51:E5:37:A2:93:A1:33:69:D1:80
Certificate issuer:       /CN=0F5555931C71A9C0ABD0D0B75EFD778E4AEB6ED1
Certificate serial:       79FD4DE4866C0896CD1B72F98D8FF4A93DB04903
Authority key identifier: 0F:55:55:93:1C:71:A9:C0:AB:D0:D0:B7:5E:FD:77:8E:4A:EB:6E:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F5555931C71A9C0ABD0D0B75EFD778E4AEB6ED1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/323830343a383333303a383030303a3a2f33332d3333203d3e20323732313832.roa
Signing time:             Tue 05 Nov 2024 01:59:38 +0000
ROA not before:           Tue 05 Nov 2024 01:54:38 +0000
ROA not after:            Tue 04 Nov 2025 01:59:38 +0000
asID:                     272182
IP address blocks:        2804:8330:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:fd:4d:e4:86:6c:08:96:cd:1b:72:f9:8d:8f:f4:a9:3d:b0:49:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F5555931C71A9C0ABD0D0B75EFD778E4AEB6ED1
        Validity
            Not Before: Nov  5 01:54:38 2024 GMT
            Not After : Nov  4 01:59:38 2025 GMT
        Subject: CN=E49DCACC3A58C4CA5BB651E537A293A13369D180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:31:66:9f:27:b6:3d:90:cf:18:ca:35:7d:cc:
                    90:66:17:dd:b6:e4:cf:15:02:9b:7f:01:64:63:bc:
                    a1:02:42:5d:7c:d1:b0:3e:6e:9b:58:d6:2f:bc:d6:
                    40:09:37:c5:6b:26:3d:1f:98:8d:c1:6e:8d:6e:56:
                    7b:c8:41:0c:51:94:15:ec:11:20:11:df:1d:d9:38:
                    4e:84:11:81:a0:19:3e:c5:86:23:91:c6:ac:10:32:
                    bc:fa:f1:09:95:b7:1f:df:25:86:83:50:d3:57:f5:
                    be:ac:83:6d:0a:ae:9a:a2:60:55:bb:ad:6c:b2:71:
                    b4:8a:29:b6:31:ce:88:1c:50:7f:90:ca:4a:e1:21:
                    05:37:0d:97:af:2e:8e:05:bb:73:39:7e:41:fe:29:
                    da:50:3a:a3:1b:bd:e9:1c:09:9a:12:98:e5:a1:b1:
                    d7:e2:c0:99:d3:e8:77:0e:8e:f5:db:17:85:e7:9e:
                    dc:39:8e:be:2d:1a:8a:b6:78:5b:4b:21:1c:e2:3c:
                    44:48:e4:04:1c:ea:67:f3:2a:88:41:12:49:26:02:
                    48:16:dd:3d:44:78:22:a3:04:54:3c:52:5d:de:b1:
                    13:7a:4a:5d:9b:90:e6:2d:55:57:4d:e5:20:d2:8d:
                    a1:d7:4a:cb:d1:a7:be:c5:58:49:a8:71:1c:1e:2c:
                    a5:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:9D:CA:CC:3A:58:C4:CA:5B:B6:51:E5:37:A2:93:A1:33:69:D1:80
            X509v3 Authority Key Identifier:
                keyid:0F:55:55:93:1C:71:A9:C0:AB:D0:D0:B7:5E:FD:77:8E:4A:EB:6E:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/0F5555931C71A9C0ABD0D0B75EFD778E4AEB6ED1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F5555931C71A9C0ABD0D0B75EFD778E4AEB6ED1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/323830343a383333303a383030303a3a2f33332d3333203d3e20323732313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8330:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         1b:06:38:6b:04:ae:f3:c9:49:a6:88:1c:71:3c:f1:ba:df:7e:
         9d:78:0b:e2:bc:03:45:30:69:cd:d9:ac:e1:ca:03:b7:6c:86:
         0d:a6:76:c3:81:9c:e0:fd:ad:2c:5a:07:9d:99:f5:62:2c:af:
         e7:c2:38:b2:70:81:0a:a9:ab:79:d9:35:7f:71:87:59:57:08:
         4c:2c:f3:ce:58:fc:aa:60:90:70:af:17:d1:0c:fd:8f:63:a4:
         7b:be:58:24:36:3b:b9:c6:98:c2:13:56:4d:46:d0:2d:e6:41:
         3c:94:48:ce:e5:b7:fc:af:fd:6e:16:b4:d8:32:b4:b6:b6:08:
         e3:ab:63:7d:13:cc:d9:ef:ae:11:45:39:ff:26:cf:0e:13:ea:
         2c:c1:0f:77:3e:6c:79:4f:d5:2e:17:75:55:03:65:48:6a:b1:
         eb:10:0d:5a:99:f1:48:0c:3c:cd:bb:9c:3c:44:b2:df:a8:b4:
         93:7f:06:f9:41:c1:55:25:81:6e:37:d5:8a:8a:e9:51:92:43:
         48:df:85:aa:b9:0c:5f:b7:57:2c:64:92:b1:a7:ec:d7:fa:5e:
         e5:e4:dc:57:81:60:19:89:db:1e:3f:55:14:33:b9:e9:46:d9:
         38:51:62:f3:7c:d3:fb:07:dc:d6:04:6d:90:fa:c8:e7:98:7c:
         7e:3c:02:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:12 2025 by rpki-client