Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BTtet5GYaj7Y2JATX62kCZTNy7R2oJqsMuUoeTPSXyeE/0/323830343a333562383a3a2f33342d3334203d3e20323636333032.roa
File:                     323830343a333562383a3a2f33342d3334203d3e20323636333032.roa (raw, json)
Hash identifier:          /NohuBcF55ofU8aMeJy8PVk9I/BVzy2MO4X3UQoA/Fc=
Subject key identifier:   09:E1:A3:F1:65:F7:ED:FE:7B:1A:87:8F:B1:0C:70:45:08:63:86:22
Certificate issuer:       /CN=F9387F47D8872E43A828969C27F3B31F1C2E66C6
Certificate serial:       79D668ABA16E6147AD9E2746A7AB3803CCF5D47A
Authority key identifier: F9:38:7F:47:D8:87:2E:43:A8:28:96:9C:27:F3:B3:1F:1C:2E:66:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F9387F47D8872E43A828969C27F3B31F1C2E66C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTtet5GYaj7Y2JATX62kCZTNy7R2oJqsMuUoeTPSXyeE/0/323830343a333562383a3a2f33342d3334203d3e20323636333032.roa
Signing time:             Tue 20 Feb 2024 22:30:39 +0000
ROA not before:           Tue 20 Feb 2024 22:25:39 +0000
ROA not after:            Tue 18 Feb 2025 22:30:39 +0000
asID:                     266302
IP address blocks:        2804:35b8::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:d6:68:ab:a1:6e:61:47:ad:9e:27:46:a7:ab:38:03:cc:f5:d4:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9387F47D8872E43A828969C27F3B31F1C2E66C6
        Validity
            Not Before: Feb 20 22:25:39 2024 GMT
            Not After : Feb 18 22:30:39 2025 GMT
        Subject: CN=09E1A3F165F7EDFE7B1A878FB10C704508638622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:72:b1:60:85:1c:99:5e:34:a5:11:ab:54:8e:
                    4d:89:03:04:69:7e:ba:66:64:f5:fc:46:df:66:ec:
                    ed:73:71:ba:99:00:f5:20:f9:5a:48:af:bf:db:37:
                    c3:e1:ca:98:d9:f8:f4:9b:2e:35:86:39:60:d6:a8:
                    5b:96:5a:a4:57:a0:d4:aa:d3:68:e0:47:75:33:1e:
                    3b:05:a6:d4:f4:45:f7:cd:1f:90:45:9d:cc:df:4e:
                    9c:0a:2e:48:aa:38:46:d6:b5:e3:ef:9f:e0:c5:91:
                    35:58:4d:6f:e3:2f:fa:ef:c5:38:e7:d0:7e:39:55:
                    ec:4a:52:41:d4:6f:c4:da:1b:f6:50:53:63:60:b2:
                    cd:8e:83:5d:e4:33:ab:34:af:1c:cf:7f:58:af:bb:
                    84:d3:bf:47:5a:cc:43:81:55:1b:0f:7e:3b:af:03:
                    31:8b:b5:02:fe:be:5d:f9:ff:11:0f:d5:c3:dc:20:
                    7a:92:46:89:9c:12:1f:d2:21:80:ef:50:98:23:ed:
                    e4:9d:9c:b6:0a:23:6e:7a:e4:95:bb:50:81:92:44:
                    ee:37:96:26:1b:3c:4a:6f:e7:4a:be:b0:f0:85:ec:
                    97:7d:0d:8d:18:6f:ba:85:f4:d1:36:14:7f:11:e4:
                    11:3e:61:76:db:74:ba:41:5a:2f:28:0e:c8:09:c7:
                    7b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:E1:A3:F1:65:F7:ED:FE:7B:1A:87:8F:B1:0C:70:45:08:63:86:22
            X509v3 Authority Key Identifier:
                keyid:F9:38:7F:47:D8:87:2E:43:A8:28:96:9C:27:F3:B3:1F:1C:2E:66:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTtet5GYaj7Y2JATX62kCZTNy7R2oJqsMuUoeTPSXyeE/0/F9387F47D8872E43A828969C27F3B31F1C2E66C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F9387F47D8872E43A828969C27F3B31F1C2E66C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTtet5GYaj7Y2JATX62kCZTNy7R2oJqsMuUoeTPSXyeE/0/323830343a333562383a3a2f33342d3334203d3e20323636333032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:35b8::/34

    Signature Algorithm: sha256WithRSAEncryption
         64:b3:80:af:3f:f8:da:98:09:81:6f:0b:ab:09:c8:5f:f4:da:
         93:49:6f:00:4a:72:76:f9:9e:7a:c8:93:92:92:2e:21:7a:29:
         6d:77:f4:c1:93:dc:6b:9d:dc:af:8c:0f:eb:ca:f4:20:92:02:
         1c:d8:cf:d3:c5:66:a9:cd:c9:23:3f:87:20:3a:4e:52:03:62:
         31:b6:13:df:0a:b3:fb:b0:de:b9:09:18:62:e3:e0:9e:5a:1b:
         06:71:ca:73:2b:06:7e:5d:2a:04:58:d5:c8:18:62:a1:97:38:
         fe:2e:29:cd:97:b5:b1:bb:a3:fd:62:51:d7:88:b4:27:de:f3:
         9b:5a:46:88:2c:31:3a:bc:b9:7e:ac:fb:75:6d:6f:67:67:09:
         79:36:8b:c2:35:2e:2d:87:77:5b:52:2c:cb:ef:cf:02:0b:c6:
         07:8e:2b:62:eb:af:5b:37:d8:14:70:a3:5d:85:3f:1c:47:fa:
         6a:c4:43:a4:53:f2:90:af:ba:a2:e5:5e:66:00:00:9c:70:db:
         7b:fb:77:09:08:f6:b4:af:73:46:31:47:4d:21:fe:5c:fe:bf:
         d0:e5:af:3a:fc:ea:a1:5c:a1:4c:ab:64:56:d7:6e:4c:1d:02:
         67:49:29:af:fa:86:fe:4c:ea:d7:c0:62:25:53:bc:1d:95:80:
         4a:37:5b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:05 2025 by rpki-client