Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/323830343a366364303a343030303a3a2f33342d3334203d3e20323730343934.roa
File:                     323830343a366364303a343030303a3a2f33342d3334203d3e20323730343934.roa (raw, json)
Hash identifier:          rVKM5HD2JI6rtr9LX6/xefixGnFsWDIox/JGItutdPE=
Subject key identifier:   13:5C:53:60:89:FB:D7:58:CC:E7:5A:0C:CE:75:5F:9F:F6:B3:F2:23
Certificate issuer:       /CN=FE87A6B4A867FB246AF3F307808DC99592129232
Certificate serial:       6764B1109B859CC4D3192D6CB47D68122E2133D6
Authority key identifier: FE:87:A6:B4:A8:67:FB:24:6A:F3:F3:07:80:8D:C9:95:92:12:92:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE87A6B4A867FB246AF3F307808DC99592129232.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/323830343a366364303a343030303a3a2f33342d3334203d3e20323730343934.roa
Signing time:             Fri 21 Feb 2025 21:50:46 +0000
ROA not before:           Fri 21 Feb 2025 21:45:46 +0000
ROA not after:            Fri 20 Feb 2026 21:50:46 +0000
asID:                     270494
IP address blocks:        2804:6cd0:4000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:64:b1:10:9b:85:9c:c4:d3:19:2d:6c:b4:7d:68:12:2e:21:33:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE87A6B4A867FB246AF3F307808DC99592129232
        Validity
            Not Before: Feb 21 21:45:46 2025 GMT
            Not After : Feb 20 21:50:46 2026 GMT
        Subject: CN=135C536089FBD758CCE75A0CCE755F9FF6B3F223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:2a:a9:21:fe:bb:96:87:75:4d:2a:c0:e4:b0:
                    55:6b:7e:fa:ce:00:93:93:f2:bb:14:fe:09:3c:59:
                    fe:1f:71:ac:be:db:f8:d3:1b:dd:6c:18:67:3e:53:
                    dc:f9:13:2a:84:44:16:7b:d1:85:0a:0c:f2:c5:7b:
                    7c:f4:8f:e1:4a:64:07:53:ca:a1:43:4a:2d:b8:6f:
                    20:e3:a0:95:9d:02:72:23:64:af:9b:17:08:ea:bf:
                    df:1d:90:74:95:3c:fe:ca:36:1c:83:c7:89:22:3d:
                    72:05:ef:29:e1:45:29:4d:34:94:46:c3:b2:6c:7b:
                    11:da:df:b3:5e:64:f6:ef:fc:a8:fd:70:b7:a1:53:
                    62:96:54:04:c6:c1:60:45:f5:51:fe:0e:b9:83:de:
                    e7:8d:fd:ad:fc:ff:e0:96:df:53:7d:1d:d5:58:87:
                    59:79:fb:21:57:52:87:71:02:dd:f6:ee:c2:09:46:
                    d0:b7:17:61:c1:df:74:2c:49:61:21:5b:d1:33:0b:
                    60:98:70:a9:26:fa:8d:71:9d:06:8e:fc:83:86:27:
                    45:43:13:60:74:9d:60:fc:60:7f:dd:ab:40:a8:aa:
                    3a:ea:b9:ac:c9:bc:e0:fc:60:da:fd:52:de:ff:37:
                    51:bb:27:59:bc:cf:a9:8f:d7:e4:b9:47:21:6b:d8:
                    d8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:5C:53:60:89:FB:D7:58:CC:E7:5A:0C:CE:75:5F:9F:F6:B3:F2:23
            X509v3 Authority Key Identifier:
                keyid:FE:87:A6:B4:A8:67:FB:24:6A:F3:F3:07:80:8D:C9:95:92:12:92:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/FE87A6B4A867FB246AF3F307808DC99592129232.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE87A6B4A867FB246AF3F307808DC99592129232.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/323830343a366364303a343030303a3a2f33342d3334203d3e20323730343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6cd0:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         6d:10:28:4f:e1:b1:ad:f3:13:a4:24:d9:02:ef:93:eb:b0:e7:
         82:0c:62:2c:fb:af:5e:9c:a4:a6:8e:39:fa:09:4c:65:d7:6c:
         04:44:f7:f9:c1:f7:c5:be:f8:1a:e1:73:22:6e:4d:07:d9:85:
         c1:50:e9:e6:96:cf:f9:f1:50:2d:fe:68:f1:77:83:16:03:98:
         0a:68:7e:44:8a:7d:d9:e6:e8:51:34:6c:78:ab:56:6f:0a:49:
         ad:57:2d:9f:2b:cd:81:51:04:21:ef:80:f3:44:a0:2d:7d:23:
         e8:ca:1e:c1:9c:fd:af:58:ce:5c:a5:49:d4:71:10:51:91:3a:
         4c:18:d2:06:95:c2:65:53:2b:dd:98:af:50:fa:67:f0:e2:69:
         3f:d2:ef:af:8e:36:99:d0:a9:ab:c3:7c:8e:6b:79:f9:ee:38:
         1c:36:fe:3a:96:d7:49:25:d2:1d:52:f4:32:4a:ba:ff:0f:11:
         3a:81:92:09:be:b2:d6:3c:7f:c6:7e:39:d7:63:cc:59:aa:1b:
         b4:a9:51:94:64:04:53:18:07:66:24:88:00:e8:e5:00:fe:a7:
         6b:10:a2:a1:8d:ac:48:4b:98:e7:5e:40:84:0c:56:42:39:a8:
         3b:7e:6e:60:b7:29:e9:5e:18:1a:1d:30:e3:17:3d:d6:a2:7b:
         ee:ca:5a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:31:34 2025 by rpki-client