Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/323830343a376661343a3a2f33322d3336203d3e20323731373030.roa
File:                     323830343a376661343a3a2f33322d3336203d3e20323731373030.roa (raw, json)
Hash identifier:          G5Azmfu2l7xfehAnqqudlmxfjnJErMP+nrIvmg9+uIM=
Subject key identifier:   BD:F8:97:D1:B7:4E:0B:DB:97:73:EA:97:56:02:73:AB:62:D1:DB:0C
Certificate issuer:       /CN=B865001546FF4DE2A16852379E26B40329F29025
Certificate serial:       645B485EA18E18F1730814FB1BFFDDB4AC6314A4
Authority key identifier: B8:65:00:15:46:FF:4D:E2:A1:68:52:37:9E:26:B4:03:29:F2:90:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B865001546FF4DE2A16852379E26B40329F29025.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/323830343a376661343a3a2f33322d3336203d3e20323731373030.roa
Signing time:             Mon 12 Feb 2024 19:41:14 +0000
ROA not before:           Mon 12 Feb 2024 19:36:14 +0000
ROA not after:            Mon 10 Feb 2025 19:41:14 +0000
asID:                     271700
IP address blocks:        2804:7fa4::/32 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:5b:48:5e:a1:8e:18:f1:73:08:14:fb:1b:ff:dd:b4:ac:63:14:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B865001546FF4DE2A16852379E26B40329F29025
        Validity
            Not Before: Feb 12 19:36:14 2024 GMT
            Not After : Feb 10 19:41:14 2025 GMT
        Subject: CN=BDF897D1B74E0BDB9773EA97560273AB62D1DB0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0e:23:22:29:4f:87:c5:40:bf:25:59:28:24:
                    ba:76:9c:a7:ef:b6:5e:be:b7:21:57:ed:12:3a:c0:
                    6b:ea:36:1a:3a:22:78:07:70:f5:23:a4:1d:ce:6e:
                    ae:ab:a0:3f:1a:45:38:89:0c:a4:fb:7e:76:88:fc:
                    1d:97:81:bc:12:7f:5f:01:49:72:ce:ed:ff:bd:5c:
                    5d:74:5d:c6:d1:b5:b9:f4:3c:c5:78:91:54:be:e4:
                    e3:2d:59:a0:3a:47:5b:c2:37:0b:c8:ac:71:86:e4:
                    b4:3a:91:3e:ad:9a:e8:6a:2f:13:2c:19:9e:0b:25:
                    a7:11:6f:a4:89:a2:d3:f1:3a:f2:1e:1e:20:de:af:
                    70:8d:10:33:09:2e:28:06:68:98:2d:16:98:05:aa:
                    47:ab:4b:b7:b7:bd:c8:40:07:33:b5:66:10:39:53:
                    a2:29:e4:af:d2:9d:6f:3a:7a:e7:93:3b:96:4d:25:
                    2b:47:40:73:58:60:e1:1a:b2:ef:06:8e:16:92:52:
                    d6:5a:ea:62:46:03:71:cc:45:bf:3b:4d:63:5d:97:
                    fe:75:6f:f5:7c:5a:e5:aa:67:b6:14:e8:4f:5c:68:
                    37:71:1d:7b:ca:af:c9:44:57:ae:f9:23:3c:54:e7:
                    54:d8:78:d2:a6:b8:86:02:0a:3f:d1:92:48:13:d9:
                    b5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:F8:97:D1:B7:4E:0B:DB:97:73:EA:97:56:02:73:AB:62:D1:DB:0C
            X509v3 Authority Key Identifier:
                keyid:B8:65:00:15:46:FF:4D:E2:A1:68:52:37:9E:26:B4:03:29:F2:90:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/B865001546FF4DE2A16852379E26B40329F29025.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B865001546FF4DE2A16852379E26B40329F29025.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/323830343a376661343a3a2f33322d3336203d3e20323731373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7fa4::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:c6:e6:99:2a:21:9b:49:e6:ad:9f:1e:91:f7:92:04:9f:c7:
         91:28:45:ae:02:0e:37:96:a7:34:15:14:6e:5a:97:5a:5b:91:
         18:54:8c:5d:ac:96:6a:8e:44:89:e4:9a:7b:2a:01:62:95:c6:
         fe:32:b3:b4:5a:59:79:39:c8:18:67:c1:cb:45:50:cf:78:a6:
         5a:af:97:05:da:f4:80:36:0e:ec:bd:d1:06:a8:ea:ec:8d:a0:
         2b:c5:dc:b4:04:6e:d1:2e:68:53:02:fa:6e:da:46:9e:db:1d:
         3f:e5:8b:9c:6d:e7:5c:48:23:57:12:56:f6:48:41:ba:d9:73:
         1a:1c:a3:23:f4:48:eb:ce:55:e5:a7:6e:92:a2:33:d6:70:67:
         4d:c9:4d:1b:c6:50:d4:07:e0:17:68:17:5a:53:3c:dc:e2:41:
         6f:0b:65:f7:1b:ab:e2:43:33:ba:01:57:51:7f:49:d5:cf:1d:
         bb:22:61:a9:f1:06:cb:c2:a2:43:59:04:79:1d:a0:3f:a9:74:
         2a:04:c6:b7:2a:9b:1f:87:d7:fb:c2:eb:c8:6c:9a:0e:72:a3:
         2f:74:d6:02:0a:a7:0a:d4:d5:f3:be:47:c9:14:6c:04:0b:59:
         8e:81:32:b0:c2:bc:4d:24:60:44:aa:33:12:78:4a:92:fa:2b:
         cc:66:00:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:17:08 2025 by rpki-client