Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ALnzPiBEWdycb8GTYYxvMBYBLzRbRoodWNnwJrfTaqqS/1/323830343a363766633a3a2f33322d3334203d3e20323639363633.roa
File:                     323830343a363766633a3a2f33322d3334203d3e20323639363633.roa (raw, json)
Hash identifier:          HNDftg/Pw7Hj5U/zwvpt3JVjYmZZZQ93Fp65BJhngQw=
Subject key identifier:   D8:36:0D:C2:1F:E7:A8:EB:32:3B:EE:D5:83:4F:F5:87:EE:B2:80:A7
Certificate issuer:       /CN=F45FA96D0B0E0D7BDB9C2E64F4834C234348A16C
Certificate serial:       7B711B309D8361740E9522DC4329F251B6BE5296
Authority key identifier: F4:5F:A9:6D:0B:0E:0D:7B:DB:9C:2E:64:F4:83:4C:23:43:48:A1:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F45FA96D0B0E0D7BDB9C2E64F4834C234348A16C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ALnzPiBEWdycb8GTYYxvMBYBLzRbRoodWNnwJrfTaqqS/1/323830343a363766633a3a2f33322d3334203d3e20323639363633.roa
Signing time:             Wed 05 Mar 2025 19:14:24 +0000
ROA not before:           Wed 05 Mar 2025 19:09:24 +0000
ROA not after:            Wed 04 Mar 2026 19:14:24 +0000
asID:                     269663
IP address blocks:        2804:67fc::/32 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:71:1b:30:9d:83:61:74:0e:95:22:dc:43:29:f2:51:b6:be:52:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F45FA96D0B0E0D7BDB9C2E64F4834C234348A16C
        Validity
            Not Before: Mar  5 19:09:24 2025 GMT
            Not After : Mar  4 19:14:24 2026 GMT
        Subject: CN=D8360DC21FE7A8EB323BEED5834FF587EEB280A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e5:3a:75:d5:8f:fd:26:03:3f:5b:4a:30:24:
                    a3:dd:23:bd:75:21:77:3c:da:bd:1f:b9:c7:96:8b:
                    88:2d:a0:7f:5b:e6:6a:52:48:3c:96:7d:11:fb:48:
                    8b:e9:c1:d4:a9:c1:62:b4:e1:a1:a5:ff:ea:e6:4c:
                    aa:ad:c5:09:79:9b:01:1d:d8:35:30:77:c0:02:74:
                    e5:62:d9:dc:07:81:58:2f:20:08:1b:f6:51:ff:a9:
                    f3:d8:2f:d6:0b:ef:86:88:2c:58:7e:8f:b5:f9:af:
                    6d:19:8f:69:41:87:22:9e:ef:36:7f:84:ec:b0:4f:
                    fc:70:a4:e9:2c:d1:3e:f1:6d:77:d0:a3:21:06:87:
                    cd:e0:f9:39:ad:80:f1:bf:ad:18:b2:6c:bd:b8:3c:
                    42:48:5f:6b:1e:73:d5:39:05:01:82:79:20:3a:07:
                    d6:b0:47:13:1f:e1:7f:a7:6f:04:3b:d4:48:cc:85:
                    ed:ea:dc:21:41:24:f1:63:e0:d9:09:a1:d7:70:d7:
                    49:55:10:42:a4:ba:33:97:40:79:16:21:c5:d9:e6:
                    b2:ce:0d:d1:e0:be:9b:7e:d1:e6:a0:0d:cf:74:1b:
                    8b:55:62:87:3d:55:2d:c5:63:8e:99:17:18:45:2e:
                    3a:79:8e:7b:e6:eb:56:63:da:89:06:d1:c5:03:10:
                    8a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:36:0D:C2:1F:E7:A8:EB:32:3B:EE:D5:83:4F:F5:87:EE:B2:80:A7
            X509v3 Authority Key Identifier:
                keyid:F4:5F:A9:6D:0B:0E:0D:7B:DB:9C:2E:64:F4:83:4C:23:43:48:A1:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ALnzPiBEWdycb8GTYYxvMBYBLzRbRoodWNnwJrfTaqqS/1/F45FA96D0B0E0D7BDB9C2E64F4834C234348A16C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F45FA96D0B0E0D7BDB9C2E64F4834C234348A16C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ALnzPiBEWdycb8GTYYxvMBYBLzRbRoodWNnwJrfTaqqS/1/323830343a363766633a3a2f33322d3334203d3e20323639363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:67fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:d8:de:9c:3f:15:05:48:24:6a:74:e4:45:af:30:69:bb:9e:
         c6:27:7e:e2:cb:ec:aa:07:12:fb:07:ba:74:08:46:5d:9e:dd:
         ed:22:6a:0f:a3:4f:a1:80:02:5d:f4:6c:65:c4:c8:fc:de:83:
         a3:66:aa:5f:1a:e9:4b:b9:a6:c8:6b:7a:98:81:ff:12:2d:d6:
         70:62:59:9a:ff:eb:af:e3:af:ed:67:a1:b9:cf:91:0c:ab:17:
         5f:75:01:31:81:6c:3d:e3:7c:d4:3c:a5:5e:ea:89:9d:75:d7:
         75:b8:e0:7a:0c:a7:c2:87:04:68:db:8b:c6:b8:d7:02:56:8d:
         e6:9f:cb:ac:71:d9:91:1f:5d:aa:00:c9:6d:49:9a:54:f9:c3:
         fc:bf:9f:b0:cb:77:50:66:99:17:97:79:bf:42:ce:2c:71:fb:
         53:2b:5e:ae:76:54:e5:c9:f1:0a:b6:95:dc:84:a0:25:d1:83:
         6b:31:8f:2b:60:5c:20:47:b7:81:89:ed:65:3f:fd:1f:0f:b5:
         99:dd:c2:82:37:1c:69:4b:71:d8:2d:6e:83:06:32:da:c4:a8:
         a1:a3:64:af:4b:dd:49:92:77:a8:47:86:2c:fc:ef:9d:5c:a4:
         c9:b6:9d:df:36:13:13:4e:60:ad:a8:b0:b9:77:c0:a8:4f:8f:
         d1:d6:13:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:01:07 2025 by rpki-client