Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/0/323030313a313261343a3a2f33322d3332203d3e203238333436.roa
File:                     323030313a313261343a3a2f33322d3332203d3e203238333436.roa (raw, json)
Hash identifier:          OiytA8Cz8O0xPaKwmu3ueYFgKiKxaBjnSQaumErmLd8=
Subject key identifier:   59:D8:78:FD:51:E2:B3:D7:BB:C7:D4:E8:42:94:9A:00:0D:67:9C:ED
Certificate issuer:       /CN=FFE926797ED6B4B77254E574E1E76238A7293520
Certificate serial:       32414544783725E02FA77110A0663373B4EEB203
Authority key identifier: FF:E9:26:79:7E:D6:B4:B7:72:54:E5:74:E1:E7:62:38:A7:29:35:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FFE926797ED6B4B77254E574E1E76238A7293520.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/0/323030313a313261343a3a2f33322d3332203d3e203238333436.roa
Signing time:             Tue 11 Oct 2022 16:34:51 +0000
ROA not before:           Tue 11 Oct 2022 16:29:51 +0000
ROA not after:            Tue 10 Oct 2023 16:34:51 +0000
asID:                     28346
IP address blocks:        2001:12a4::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:41:45:44:78:37:25:e0:2f:a7:71:10:a0:66:33:73:b4:ee:b2:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFE926797ED6B4B77254E574E1E76238A7293520
        Validity
            Not Before: Oct 11 16:29:51 2022 GMT
            Not After : Oct 10 16:34:51 2023 GMT
        Subject: CN=59D878FD51E2B3D7BBC7D4E842949A000D679CED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1f:14:f2:19:90:e5:0d:d4:2d:50:84:c7:c3:
                    99:94:f8:7f:9c:ce:02:dc:bd:84:ea:c9:4f:2d:4f:
                    5f:a7:7d:5f:c4:51:38:0c:0c:28:6a:7b:67:c1:93:
                    6e:ca:9b:e2:76:1f:5c:f8:58:33:8a:85:dc:86:1d:
                    f9:94:9b:9c:8c:5b:f8:aa:14:7f:dd:86:51:5b:61:
                    ea:4c:8f:cc:c9:c9:f4:77:8a:de:4e:5d:cc:89:16:
                    7b:c6:21:42:b7:df:ed:d2:bc:66:b4:47:27:3c:48:
                    ce:3d:fd:06:2c:d0:c4:c7:f0:7b:9d:9f:d0:cf:13:
                    5c:38:d2:05:73:de:b3:c8:6f:cc:8a:b0:0e:87:3a:
                    58:13:80:57:5f:a2:0f:86:9e:de:e7:2a:eb:51:c5:
                    90:c1:bc:5d:10:cf:ca:c0:b5:d9:0e:28:80:09:17:
                    80:6e:63:02:47:79:ec:ca:63:b4:10:7e:0e:e8:cb:
                    11:24:4e:bc:47:ac:62:95:df:b0:ad:d6:48:bc:87:
                    2d:80:2d:0c:e0:70:57:cd:00:fc:80:77:12:08:d1:
                    4e:5b:93:72:f7:32:6b:d8:0f:97:dd:8f:14:65:5b:
                    95:b5:51:6a:6f:3e:0a:a9:6c:d5:28:e1:5c:7d:84:
                    20:27:f1:bb:9e:37:da:5c:19:82:2f:ae:fd:7d:30:
                    f3:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:D8:78:FD:51:E2:B3:D7:BB:C7:D4:E8:42:94:9A:00:0D:67:9C:ED
            X509v3 Authority Key Identifier:
                keyid:FF:E9:26:79:7E:D6:B4:B7:72:54:E5:74:E1:E7:62:38:A7:29:35:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/0/FFE926797ED6B4B77254E574E1E76238A7293520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FFE926797ED6B4B77254E574E1E76238A7293520.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/0/323030313a313261343a3a2f33322d3332203d3e203238333436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:12a4::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:53:97:0f:fb:5e:cb:9c:2e:4e:86:55:ff:d8:20:72:f6:e5:
         78:eb:af:4d:80:df:b0:e5:75:e6:b3:09:34:d9:64:1a:78:ad:
         81:28:a4:e3:1c:6c:40:e1:85:03:0b:89:e9:30:61:f5:51:4d:
         a4:f6:f4:0e:ce:a0:a5:0b:ee:14:b3:4a:8b:79:0e:7e:55:c5:
         d9:d7:c3:a9:4a:28:e4:36:f2:bb:ac:ff:66:3a:e3:88:22:35:
         c6:15:d3:25:a5:69:9e:18:ae:3c:26:0d:ae:be:c7:ab:27:f1:
         c6:9a:74:14:12:2b:49:8a:a3:0c:37:46:1d:f4:4d:9f:c4:db:
         24:b6:ef:fd:04:38:e3:51:ed:c6:bf:04:2e:4d:36:25:62:41:
         8b:4c:cf:15:9e:d8:1b:df:0e:54:7c:ef:d7:d6:f4:85:8d:4a:
         47:c7:41:05:d6:be:dc:1e:b7:74:5d:4e:86:be:3f:8f:ce:09:
         a1:93:c6:d9:df:c7:5b:cc:d8:87:b9:75:e5:42:77:e2:08:35:
         8b:b6:03:58:5b:9c:bc:4e:b0:21:27:f6:29:27:4a:22:7b:55:
         49:c2:3b:68:18:96:d6:c2:e9:09:c7:78:eb:2f:96:f3:e7:47:
         e5:61:d6:d8:c4:fe:3f:35:9f:22:c7:bb:1e:5d:f8:5c:1a:05:
         85:d9:4e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:24:24 2025 by rpki-client