Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/323830343a356664633a323030303a3a2f33362d3336203d3e20323639313238.roa
File:                     323830343a356664633a323030303a3a2f33362d3336203d3e20323639313238.roa (raw, json)
Hash identifier:          8Cxrgnq+ntYEw/acqUdfpgsg66C0OqhfIXQCFqfsBTI=
Subject key identifier:   D3:53:75:48:50:F9:F6:CA:62:11:FA:E9:A5:58:1E:1F:09:FC:0A:CB
Certificate issuer:       /CN=F4CE893E9874372932D6054F7AFDD9FBBD021974
Certificate serial:       118BBB6B33B7375109DC1927E78BE4F4A024C9D0
Authority key identifier: F4:CE:89:3E:98:74:37:29:32:D6:05:4F:7A:FD:D9:FB:BD:02:19:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/323830343a356664633a323030303a3a2f33362d3336203d3e20323639313238.roa
Signing time:             Thu 06 Mar 2025 09:00:33 +0000
ROA not before:           Thu 06 Mar 2025 08:55:33 +0000
ROA not after:            Thu 05 Mar 2026 09:00:33 +0000
asID:                     269128
IP address blocks:        2804:5fdc:2000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:8b:bb:6b:33:b7:37:51:09:dc:19:27:e7:8b:e4:f4:a0:24:c9:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4CE893E9874372932D6054F7AFDD9FBBD021974
        Validity
            Not Before: Mar  6 08:55:33 2025 GMT
            Not After : Mar  5 09:00:33 2026 GMT
        Subject: CN=D353754850F9F6CA6211FAE9A5581E1F09FC0ACB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:7e:47:c4:a7:f2:61:2b:b7:7a:ea:38:fd:84:
                    0d:7a:d0:4d:84:82:b7:bc:2c:cd:04:ab:0d:04:05:
                    4b:b3:1b:ba:3b:05:42:e9:31:0e:66:72:2b:92:6f:
                    c9:61:7f:62:5d:0c:b5:db:80:e4:2c:48:13:0f:7f:
                    55:cf:d8:99:01:61:e0:0c:45:2e:77:3e:36:64:e2:
                    65:3c:06:8f:e4:7a:bd:9c:80:22:1d:b2:27:0e:9f:
                    02:61:b5:80:ac:82:62:91:97:6b:8d:52:c6:76:56:
                    ac:84:20:40:2b:62:b3:66:34:bf:7f:0b:0b:d3:92:
                    06:ac:e7:1e:0c:d5:5f:ec:87:7d:ae:32:62:a0:14:
                    6d:bc:17:d7:56:d4:b7:82:7c:1d:5d:4d:a8:90:0d:
                    59:64:c3:1a:8d:15:2d:3e:34:a1:cb:15:ff:3a:53:
                    5a:77:2c:18:56:7d:f8:ca:de:98:1a:3f:e0:1b:a1:
                    7c:3a:60:93:60:00:1b:fe:53:af:a8:3e:36:cc:3b:
                    5c:a1:3a:6d:e1:4e:db:5b:b5:06:94:48:f5:19:fd:
                    54:bb:7a:4d:f3:77:a0:b2:32:9e:55:e9:05:02:0b:
                    b6:12:3b:ad:a2:93:0b:f1:70:89:67:90:93:52:bd:
                    da:01:34:c3:e0:31:06:ba:70:2b:7a:8e:1c:08:cc:
                    4e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:53:75:48:50:F9:F6:CA:62:11:FA:E9:A5:58:1E:1F:09:FC:0A:CB
            X509v3 Authority Key Identifier:
                keyid:F4:CE:89:3E:98:74:37:29:32:D6:05:4F:7A:FD:D9:FB:BD:02:19:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/323830343a356664633a323030303a3a2f33362d3336203d3e20323639313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5fdc:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         4b:85:2b:c0:2e:a7:80:50:a0:cf:8b:25:d8:a1:34:f6:b4:0b:
         7b:a4:eb:13:98:cc:7b:15:c2:2f:67:50:16:b3:2a:8b:57:20:
         9d:7a:a8:12:ab:40:85:ca:5f:49:d4:63:15:84:14:96:f1:08:
         95:90:8c:1c:56:08:36:60:46:66:58:ba:b1:aa:e6:a0:77:7a:
         fa:64:e4:3e:cc:86:82:06:df:3e:34:0b:c7:16:10:30:cb:11:
         0c:85:5a:fd:4a:c3:da:02:40:c0:e5:9f:e7:84:3f:74:94:3a:
         ec:7d:66:37:cc:d5:fe:ba:aa:a3:45:04:c4:6b:28:61:ce:79:
         b8:03:f8:59:d0:0d:83:b6:90:3a:cb:bf:89:9b:b1:af:98:c8:
         91:21:96:0e:20:91:fe:f2:11:25:a0:8f:9e:ee:0a:47:f5:14:
         53:56:41:3f:12:a8:7f:b3:b3:5c:42:71:74:12:16:65:1e:08:
         a2:97:a9:c9:be:59:15:8f:df:64:d1:a7:ce:f2:39:f3:1f:16:
         89:96:7f:a8:1b:70:59:e5:0c:50:43:11:cf:ec:ac:79:f5:7e:
         c8:be:cf:e3:0f:0e:55:b5:c5:8f:cd:99:f8:ba:5f:92:1a:d9:
         dc:fa:d0:67:99:5c:51:04:fb:a7:5d:9a:6f:a4:de:a8:f2:0b:
         83:ba:9a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:49:37 2025 by rpki-client