Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/1/323830343a343366633a3a2f33322d313238203d3e20323637363134.roa
File:                     323830343a343366633a3a2f33322d313238203d3e20323637363134.roa (raw, json)
Hash identifier:          bW8nCQstNIrcc3O3ZJt9DGtPiuR8gG3hchea6Kn+v0U=
Subject key identifier:   22:38:CD:D4:B9:4C:BC:86:AE:A4:DA:3C:26:7E:1D:18:B7:A3:ED:A1
Certificate issuer:       /CN=FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF
Certificate serial:       5DBADE6F61386B7A2B75CDBC90251A5DAC30D61E
Authority key identifier: FB:27:EA:38:8A:79:41:1B:BB:22:F3:2F:5F:CD:5A:EA:08:44:BF:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/1/323830343a343366633a3a2f33322d313238203d3e20323637363134.roa
Signing time:             Sat 07 Dec 2024 15:40:01 +0000
ROA not before:           Sat 07 Dec 2024 15:35:01 +0000
ROA not after:            Sat 06 Dec 2025 15:40:01 +0000
asID:                     267614
IP address blocks:        2804:43fc::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:ba:de:6f:61:38:6b:7a:2b:75:cd:bc:90:25:1a:5d:ac:30:d6:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF
        Validity
            Not Before: Dec  7 15:35:01 2024 GMT
            Not After : Dec  6 15:40:01 2025 GMT
        Subject: CN=2238CDD4B94CBC86AEA4DA3C267E1D18B7A3EDA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:cd:f0:5b:fa:fe:23:0b:31:6a:9d:f6:81:68:
                    d5:45:35:f7:18:10:ff:8d:c5:77:15:b0:4f:58:a1:
                    37:5b:7a:41:d9:95:5d:8d:79:64:2a:d5:75:bc:b7:
                    88:94:0a:4d:9f:59:38:3a:73:12:7f:a5:d1:c9:9f:
                    08:54:4b:62:19:73:04:53:e0:81:b4:62:3f:a7:9c:
                    9d:8f:84:b8:dc:d9:43:5c:2a:ea:05:e9:3c:fb:68:
                    28:a8:c0:44:87:ad:fb:cb:f0:a0:35:6e:85:5a:ee:
                    09:23:50:67:b5:64:4d:62:a5:58:35:97:18:f9:6b:
                    70:5c:43:cf:02:65:b4:36:17:cb:f0:35:7e:17:d7:
                    7e:e1:0b:28:16:e6:7f:2e:f0:ef:c6:77:e4:3a:65:
                    51:23:a4:2d:57:b9:4d:b8:d3:44:8b:e7:1c:cf:b5:
                    b7:78:10:8c:e6:bc:22:53:d9:c3:eb:b3:dc:d4:3b:
                    4a:32:63:82:58:c4:aa:03:77:3b:ce:97:ec:68:c7:
                    8c:86:ee:f3:40:93:b3:f3:2a:e0:82:2c:6d:62:f2:
                    a5:f8:12:21:32:52:6a:54:67:c8:46:f5:4b:18:34:
                    63:30:94:19:a1:7a:4e:c3:de:09:08:65:9f:c6:7f:
                    89:c9:33:62:91:1d:54:46:93:3c:52:85:c2:31:fb:
                    0c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:38:CD:D4:B9:4C:BC:86:AE:A4:DA:3C:26:7E:1D:18:B7:A3:ED:A1
            X509v3 Authority Key Identifier:
                keyid:FB:27:EA:38:8A:79:41:1B:BB:22:F3:2F:5F:CD:5A:EA:08:44:BF:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/1/FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/1/323830343a343366633a3a2f33322d313238203d3e20323637363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:43fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:5e:8d:f1:73:a3:b7:b6:6f:cf:c6:56:ca:0e:92:49:37:9a:
         2a:72:8d:2a:96:e9:da:1b:2f:cd:20:5a:95:24:a3:97:8a:84:
         33:35:d4:89:90:88:69:1c:46:1e:70:be:4d:27:a9:64:31:9f:
         25:58:a3:b8:28:26:17:bb:9c:41:7e:59:32:fc:bb:d2:cb:4c:
         a0:75:fb:cf:85:4a:71:03:47:5d:62:84:ca:fe:1f:21:35:3d:
         33:d9:d2:60:93:b9:ea:1e:ba:94:f5:51:19:55:59:d0:dc:16:
         86:70:72:47:ed:c4:67:21:9c:bd:9c:66:2a:51:1a:5b:e1:bc:
         ee:a2:f7:8a:16:0a:ad:1d:48:28:00:c6:6b:11:e2:fb:be:78:
         5e:5c:08:f3:44:51:63:7b:45:f0:5d:ea:21:9a:74:db:4f:d7:
         1d:a8:3a:5b:14:30:30:e7:f8:19:a1:6b:e7:ac:7a:66:56:a6:
         dc:f3:ae:16:98:b3:2d:42:cc:aa:c2:8d:f8:bc:9c:bd:90:9e:
         05:4b:45:fa:2f:f3:76:02:03:c8:18:48:3b:5d:c4:07:09:44:
         76:b1:7f:03:3a:b9:47:ed:98:1f:8a:b0:4b:71:96:1f:8e:d3:
         c2:17:aa:9b:42:8d:42:a1:a1:b3:86:e8:41:4d:2c:68:34:f0:
         c7:e7:02:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:41:49 2025 by rpki-client