Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F3PXvdC5Um5cA1mpo7vhqQJTKAaGNy88RaMhbmpQLR85/0/323830343a353432633a313030303a3a2f33362d3336203d3e20323638363333.roa
File:                     323830343a353432633a313030303a3a2f33362d3336203d3e20323638363333.roa (raw, json)
Hash identifier:          a4YUaVArAGEsiVmF9+H8/N84ihut/+07cMN5e+QSnd4=
Subject key identifier:   D2:C2:3F:4C:97:57:02:34:AA:8D:5B:C7:18:AA:B6:E6:7E:81:87:49
Certificate issuer:       /CN=5DF55312EA40791D5FBE25B56560AA4348FD7B89
Certificate serial:       1427FDB1E642BB1D490E1D7CD752425378C8186F
Authority key identifier: 5D:F5:53:12:EA:40:79:1D:5F:BE:25:B5:65:60:AA:43:48:FD:7B:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5DF55312EA40791D5FBE25B56560AA4348FD7B89.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F3PXvdC5Um5cA1mpo7vhqQJTKAaGNy88RaMhbmpQLR85/0/323830343a353432633a313030303a3a2f33362d3336203d3e20323638363333.roa
Signing time:             Mon 20 Nov 2023 18:16:34 +0000
ROA not before:           Mon 20 Nov 2023 18:11:34 +0000
ROA not after:            Mon 18 Nov 2024 18:16:34 +0000
asID:                     268633
IP address blocks:        2804:542c:1000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:27:fd:b1:e6:42:bb:1d:49:0e:1d:7c:d7:52:42:53:78:c8:18:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DF55312EA40791D5FBE25B56560AA4348FD7B89
        Validity
            Not Before: Nov 20 18:11:34 2023 GMT
            Not After : Nov 18 18:16:34 2024 GMT
        Subject: CN=D2C23F4C97570234AA8D5BC718AAB6E67E818749
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:f3:7f:ee:31:59:53:42:8e:31:8c:0b:11:f0:
                    57:2d:0a:66:8a:7c:9f:8d:be:d6:b0:c6:e8:4d:e7:
                    af:5e:75:a1:ec:e3:f9:08:b3:d6:11:cc:56:cb:27:
                    20:d1:44:b8:1f:ce:50:2d:06:52:ae:88:a0:4a:8b:
                    b9:eb:f5:36:ee:81:60:d4:56:df:a6:f3:59:06:57:
                    32:03:c9:57:ae:84:cd:8e:88:de:18:82:46:a8:5a:
                    bc:34:34:43:87:b1:2c:56:3f:5d:82:ff:16:d3:bf:
                    ab:c1:de:27:d6:89:45:36:7a:6a:56:78:14:cb:33:
                    1d:93:a6:a5:bf:5c:29:70:f0:67:cb:16:e4:b6:51:
                    2c:dd:d3:55:13:6d:6e:23:a0:8b:5c:ec:28:b5:5e:
                    7d:11:c9:68:12:33:49:23:4c:3b:15:d2:9e:3c:28:
                    1e:9f:dc:f8:58:15:19:64:91:ac:b4:8c:17:0b:34:
                    65:84:58:0e:6d:1c:07:cc:dd:fb:81:26:d6:38:79:
                    f3:2c:7b:b3:46:0f:3a:b0:ac:da:7b:72:bb:76:4c:
                    62:fd:8d:dc:75:79:e2:1f:a5:38:ad:87:f9:dd:a5:
                    f3:e9:bb:56:d1:7b:c8:3a:a0:51:f7:6a:1f:1d:02:
                    87:7f:a9:c0:6d:58:f9:d2:1f:ab:d7:49:1f:27:55:
                    ae:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:C2:3F:4C:97:57:02:34:AA:8D:5B:C7:18:AA:B6:E6:7E:81:87:49
            X509v3 Authority Key Identifier:
                keyid:5D:F5:53:12:EA:40:79:1D:5F:BE:25:B5:65:60:AA:43:48:FD:7B:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F3PXvdC5Um5cA1mpo7vhqQJTKAaGNy88RaMhbmpQLR85/0/5DF55312EA40791D5FBE25B56560AA4348FD7B89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5DF55312EA40791D5FBE25B56560AA4348FD7B89.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F3PXvdC5Um5cA1mpo7vhqQJTKAaGNy88RaMhbmpQLR85/0/323830343a353432633a313030303a3a2f33362d3336203d3e20323638363333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:542c:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         0d:88:9d:0e:6c:c6:33:85:21:54:fe:bd:44:34:91:7d:46:85:
         83:78:2a:7a:68:62:e1:be:8b:8a:d7:d0:66:32:0b:69:e4:1d:
         7e:27:80:70:d3:f3:a2:21:fc:90:04:73:42:a8:a7:fb:f6:20:
         20:73:99:47:a8:9a:d7:54:2d:e0:4d:23:87:09:30:fe:53:98:
         f4:17:5c:d8:41:db:d4:69:2d:23:e0:fd:4e:08:13:aa:11:50:
         21:6a:25:95:78:53:59:46:94:e4:6e:1a:47:07:3a:dc:87:07:
         ac:2c:d8:59:d0:f9:0a:fc:58:a6:13:34:be:fb:33:ab:76:7f:
         91:85:ac:50:e2:1d:2b:85:58:82:15:e3:df:7b:1e:4e:ae:c1:
         54:9a:b1:26:c8:8e:94:bb:82:96:8d:a7:28:35:29:dd:44:1e:
         8f:a3:75:d3:76:4f:2f:fa:1d:e6:1c:bd:55:d6:94:53:8f:41:
         92:db:ee:6a:bf:fb:03:ce:f6:60:98:a2:c0:81:05:2d:12:8b:
         e8:83:94:d0:2a:16:1a:93:20:93:ee:75:3b:0a:db:73:43:75:
         13:17:33:e9:96:11:0a:bc:9a:d2:9d:f6:4f:b9:23:98:73:e7:
         81:f7:49:69:79:a0:b9:17:4b:d5:13:90:49:da:33:78:69:fe:
         e1:0a:4d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:47:53 2025 by rpki-client