Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DAwcSTGJWEC9RwWPot2oiR5uHZNpiJYnYwhW5EuuiwJ1/0/323830343a373861633a633030303a3a2f33342d3334203d3e20323731323538.roa
File:                     323830343a373861633a633030303a3a2f33342d3334203d3e20323731323538.roa (raw, json)
Hash identifier:          XeggTXkH3N+CGnMSnrrY3DnC/lemffLuQK8k4tAa5hg=
Subject key identifier:   DB:CB:D0:71:EA:0C:53:3E:64:90:D5:74:1C:D7:E7:0A:26:12:93:D2
Certificate issuer:       /CN=F0F51C40B234DF304F48E1DC19EF7BB20DFB1A5B
Certificate serial:       496F7E50EF25DABB54970E1A0E36CA732372A477
Authority key identifier: F0:F5:1C:40:B2:34:DF:30:4F:48:E1:DC:19:EF:7B:B2:0D:FB:1A:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F0F51C40B234DF304F48E1DC19EF7BB20DFB1A5B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DAwcSTGJWEC9RwWPot2oiR5uHZNpiJYnYwhW5EuuiwJ1/0/323830343a373861633a633030303a3a2f33342d3334203d3e20323731323538.roa
Signing time:             Fri 25 Aug 2023 02:29:34 +0000
ROA not before:           Fri 25 Aug 2023 02:24:34 +0000
ROA not after:            Fri 23 Aug 2024 02:29:34 +0000
asID:                     271258
IP address blocks:        2804:78ac:c000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:6f:7e:50:ef:25:da:bb:54:97:0e:1a:0e:36:ca:73:23:72:a4:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0F51C40B234DF304F48E1DC19EF7BB20DFB1A5B
        Validity
            Not Before: Aug 25 02:24:34 2023 GMT
            Not After : Aug 23 02:29:34 2024 GMT
        Subject: CN=DBCBD071EA0C533E6490D5741CD7E70A261293D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fe:00:95:38:9f:db:ce:fb:fe:d0:88:22:39:
                    93:18:db:31:52:6a:2a:eb:1c:58:c3:02:8f:c4:cc:
                    22:ab:73:52:ee:43:de:17:90:60:24:6c:10:15:40:
                    63:4c:6a:46:7e:4c:f2:21:98:77:62:18:5c:66:a0:
                    5b:23:53:b6:80:2e:a6:58:ed:93:43:5e:cf:d5:ae:
                    f5:e7:84:88:66:57:e3:af:29:c2:88:23:ed:a4:96:
                    60:0b:5b:39:e5:d6:8c:cf:3e:c6:de:7b:d5:5b:6b:
                    c5:d9:9a:c3:3c:46:ce:28:b7:8d:da:65:7a:1f:84:
                    ff:24:e3:b3:43:f4:7b:95:0d:08:fd:a6:82:03:39:
                    bc:bf:ea:d0:be:c8:6f:34:37:ff:51:97:36:ab:16:
                    01:6e:d0:e9:6d:78:45:db:80:e2:c7:ab:c0:69:6c:
                    de:0a:c3:ee:5f:7a:40:06:10:f0:f5:75:e6:7e:81:
                    65:ff:88:58:17:d3:70:4f:37:6e:2e:5b:25:fa:34:
                    62:a8:6b:41:74:59:cb:01:d5:5e:21:66:59:57:81:
                    cc:68:81:27:31:b4:c9:66:1c:62:84:13:ee:ad:fb:
                    91:c8:d0:b7:88:f7:72:2b:fa:a6:88:4c:b6:e5:32:
                    97:ce:9e:2f:77:06:f7:19:70:e2:84:1b:9f:02:b2:
                    b4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:CB:D0:71:EA:0C:53:3E:64:90:D5:74:1C:D7:E7:0A:26:12:93:D2
            X509v3 Authority Key Identifier:
                keyid:F0:F5:1C:40:B2:34:DF:30:4F:48:E1:DC:19:EF:7B:B2:0D:FB:1A:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DAwcSTGJWEC9RwWPot2oiR5uHZNpiJYnYwhW5EuuiwJ1/0/F0F51C40B234DF304F48E1DC19EF7BB20DFB1A5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F0F51C40B234DF304F48E1DC19EF7BB20DFB1A5B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DAwcSTGJWEC9RwWPot2oiR5uHZNpiJYnYwhW5EuuiwJ1/0/323830343a373861633a633030303a3a2f33342d3334203d3e20323731323538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:78ac:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         46:fc:f6:38:e4:54:97:c2:fd:f0:09:b0:6f:b7:34:c3:64:88:
         57:e2:00:ce:16:09:48:a5:05:eb:10:c6:96:26:3d:51:e5:a6:
         c7:5f:fd:6c:89:ea:ec:e6:b9:d8:8b:a9:b4:70:41:a6:1a:b3:
         db:48:01:0d:50:55:11:e6:71:27:7f:e7:06:c0:83:1b:a6:eb:
         3a:71:22:af:13:af:1b:9d:a3:da:01:60:e3:1f:91:d2:99:79:
         e7:57:cd:71:f9:5c:c5:45:18:c2:50:e2:18:63:46:e6:f2:b1:
         ab:f8:b9:6a:ab:ba:0b:2e:99:f2:ab:dc:7d:94:48:05:b1:29:
         15:20:7a:8c:b4:08:c6:b4:a4:40:18:1b:78:86:e3:2b:77:92:
         bf:1e:73:d5:fe:c7:ee:6c:a5:dd:ad:ed:08:a2:f7:35:63:bf:
         7a:a2:84:de:a5:a3:a9:6e:26:62:ac:84:c4:c4:2d:72:77:b9:
         ec:ae:78:47:b7:6e:bf:32:ff:e2:f1:db:d8:ee:96:e0:d3:ff:
         37:eb:cc:21:b4:2f:d7:e9:48:07:7a:e3:05:06:ed:a9:7c:79:
         dd:17:c4:0b:56:cc:b0:83:5a:06:d9:84:55:1e:f8:21:a1:b4:
         e0:9a:91:d2:8b:c9:34:5d:a7:d9:97:02:ee:98:ac:ba:fc:11:
         e7:1a:31:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 05:59:48 2025 by rpki-client