Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/323830343a6664633a383030303a3a2f33332d3333203d3e20323633363038.roa
File:                     323830343a6664633a383030303a3a2f33332d3333203d3e20323633363038.roa (raw, json)
Hash identifier:          V8+rOqz3AFfOMxYuiaBPuOhnKWiv6Siw+x5HsCKfHEc=
Subject key identifier:   48:94:BC:A8:28:56:62:D6:93:C7:06:ED:A2:62:5D:C5:66:86:F0:D4
Certificate issuer:       /CN=F19D655ABFCCFC8CB566935B71AA7D94D2905E48
Certificate serial:       77E92D64D920215609C69DF5A3D2CCC4A6C0745B
Authority key identifier: F1:9D:65:5A:BF:CC:FC:8C:B5:66:93:5B:71:AA:7D:94:D2:90:5E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/323830343a6664633a383030303a3a2f33332d3333203d3e20323633363038.roa
Signing time:             Mon 23 Dec 2024 13:18:21 +0000
ROA not before:           Mon 23 Dec 2024 13:13:21 +0000
ROA not after:            Mon 22 Dec 2025 13:18:21 +0000
asID:                     263608
IP address blocks:        2804:fdc:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:e9:2d:64:d9:20:21:56:09:c6:9d:f5:a3:d2:cc:c4:a6:c0:74:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F19D655ABFCCFC8CB566935B71AA7D94D2905E48
        Validity
            Not Before: Dec 23 13:13:21 2024 GMT
            Not After : Dec 22 13:18:21 2025 GMT
        Subject: CN=4894BCA8285662D693C706EDA2625DC56686F0D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8e:c8:87:7b:bd:f5:4d:9d:70:e9:07:ba:9c:
                    85:42:64:a8:57:ed:12:45:27:a3:86:64:81:a7:c8:
                    ba:f7:49:d9:73:a8:31:82:5f:c2:f6:ba:ea:5b:c9:
                    71:e2:d1:2f:32:e7:87:da:9d:ee:ea:a6:25:b6:30:
                    f5:26:da:90:1b:5e:86:73:c1:72:0e:56:d0:43:93:
                    f8:b8:49:40:c2:ae:cc:14:e9:ea:f2:02:86:d0:89:
                    e1:f7:70:88:5e:47:b6:68:af:72:7e:bf:18:2e:cd:
                    f3:4d:e3:39:ca:22:7b:75:1b:97:23:96:b3:ee:43:
                    b8:8f:84:fe:4b:30:2a:6e:a1:c5:52:00:a5:1a:b2:
                    45:24:29:2a:84:5e:0f:45:cc:e3:c6:63:38:29:92:
                    4d:67:2e:49:94:94:82:36:3e:6a:f0:5a:59:5a:c6:
                    08:80:a8:65:b0:c7:b3:9e:3f:92:f8:47:d7:c7:0a:
                    f1:98:c8:24:8e:4a:b9:f1:34:64:d8:a1:f1:00:95:
                    a9:43:17:c6:96:4d:3f:73:62:c9:21:ae:d0:0a:09:
                    46:27:d8:3b:31:8d:7e:62:f7:c3:94:78:4f:34:79:
                    1b:92:71:09:0d:5a:c5:7e:d3:99:fc:7b:fc:24:ca:
                    db:62:42:ed:f9:de:13:72:3d:f2:d9:78:91:9d:41:
                    91:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:94:BC:A8:28:56:62:D6:93:C7:06:ED:A2:62:5D:C5:66:86:F0:D4
            X509v3 Authority Key Identifier:
                keyid:F1:9D:65:5A:BF:CC:FC:8C:B5:66:93:5B:71:AA:7D:94:D2:90:5E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/323830343a6664633a383030303a3a2f33332d3333203d3e20323633363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:fdc:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         d2:a9:aa:b3:06:7b:d0:71:43:4a:88:4b:2c:3d:b5:c9:d1:fc:
         60:bc:b2:2a:6a:b2:ce:f3:f4:31:31:a4:13:3e:d6:36:ae:26:
         a6:88:ff:53:21:43:6f:7b:79:74:9a:d5:95:e8:99:ae:79:81:
         d6:0c:97:ef:cb:55:4c:4f:6d:c1:4b:06:4c:7e:20:41:36:fb:
         b6:8b:ab:96:94:27:fc:cf:da:ff:9b:dc:a5:0a:c7:02:f2:00:
         d8:37:ab:d0:e2:f4:a3:10:9d:07:a3:c2:af:a5:5d:02:c8:d5:
         62:d5:97:6a:6c:28:6f:35:ab:ea:55:e8:7a:46:a0:4e:34:63:
         17:82:9b:1d:69:59:74:72:20:3e:48:fe:ed:ee:54:8b:77:bb:
         5b:46:99:73:d8:ee:4e:da:5a:0f:c1:b0:ec:25:ba:de:8e:0d:
         34:b9:88:35:07:e3:e7:32:63:04:42:04:98:fe:51:74:dd:7a:
         d8:b9:30:05:4d:83:1f:4d:c7:c9:b1:91:07:d4:b1:b1:fd:65:
         05:b1:66:cc:bd:0c:37:b9:8d:46:1f:d4:3e:f0:6e:05:05:61:
         a4:0b:0b:e7:43:13:cf:b1:c2:e9:0a:cf:5c:1f:69:d0:86:82:
         86:a5:95:dd:f7:96:66:90:b1:df:aa:a6:af:10:fe:77:b7:ef:
         b5:1d:19:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:57:48 2025 by rpki-client