Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FBBqZmaYfY1LQJ1duiVb86cAukLfp12bna6p9zBzaPyV/0/323830343a363135383a343030303a3a2f33342d3334203d3e20323639323239.roa
File:                     323830343a363135383a343030303a3a2f33342d3334203d3e20323639323239.roa (raw, json)
Hash identifier:          TwqLk77SgMWqOqnh9a9diwP/YYjudMas01Kv+QuteGY=
Subject key identifier:   3C:7C:08:32:96:3D:E1:FC:F0:88:D4:65:38:1E:46:C3:44:B3:92:E4
Certificate issuer:       /CN=BAF64A7AE246E8120826948706145A4757D1146D
Certificate serial:       29D4F88878B18A6317D7834CF1F0E72B1429B567
Authority key identifier: BA:F6:4A:7A:E2:46:E8:12:08:26:94:87:06:14:5A:47:57:D1:14:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAF64A7AE246E8120826948706145A4757D1146D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FBBqZmaYfY1LQJ1duiVb86cAukLfp12bna6p9zBzaPyV/0/323830343a363135383a343030303a3a2f33342d3334203d3e20323639323239.roa
Signing time:             Thu 28 Nov 2024 17:22:47 +0000
ROA not before:           Thu 28 Nov 2024 17:17:47 +0000
ROA not after:            Thu 27 Nov 2025 17:22:47 +0000
asID:                     269229
IP address blocks:        2804:6158:4000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:d4:f8:88:78:b1:8a:63:17:d7:83:4c:f1:f0:e7:2b:14:29:b5:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAF64A7AE246E8120826948706145A4757D1146D
        Validity
            Not Before: Nov 28 17:17:47 2024 GMT
            Not After : Nov 27 17:22:47 2025 GMT
        Subject: CN=3C7C0832963DE1FCF088D465381E46C344B392E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:87:e6:80:ab:7e:83:fb:ef:a6:b3:62:0e:d6:
                    4b:b2:97:2a:28:d8:c0:a1:c4:04:8b:8b:f8:e8:50:
                    2b:3b:d7:9e:6e:47:c5:06:1a:ec:80:0e:73:e4:4a:
                    0e:02:f0:13:9c:25:a1:da:51:1f:e9:45:2d:71:43:
                    c8:2d:dd:22:1a:c3:50:33:b1:2c:5a:8f:09:8c:6c:
                    d8:1f:73:3a:c2:37:a8:3f:99:fd:56:c2:d8:8a:04:
                    e8:aa:2c:62:a7:77:a1:34:77:8f:b2:12:91:52:89:
                    7c:51:e0:28:ac:a4:62:33:ed:89:13:fb:6f:cc:15:
                    0c:98:bb:2f:f6:33:f5:b4:30:d6:5f:b2:f7:4a:9b:
                    f7:a9:0c:f4:c3:4b:e6:b6:c7:32:88:62:32:34:97:
                    19:82:17:a2:da:a5:97:c5:f1:05:a8:05:3a:49:ca:
                    eb:8c:40:b5:2d:57:c4:da:2f:1f:84:0d:cf:8b:de:
                    87:84:25:a2:61:b0:5a:dd:5e:77:3f:f2:2f:8d:80:
                    0f:c1:44:dc:46:7d:87:76:7f:10:98:77:d5:78:16:
                    b2:e3:8c:dd:5d:88:cf:2f:de:32:ca:93:9b:10:60:
                    61:98:b9:d5:6c:af:f7:80:e3:68:af:c1:49:2a:a2:
                    c7:e8:81:6f:39:b3:40:a5:10:ef:90:f0:04:5f:80:
                    a7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:7C:08:32:96:3D:E1:FC:F0:88:D4:65:38:1E:46:C3:44:B3:92:E4
            X509v3 Authority Key Identifier:
                keyid:BA:F6:4A:7A:E2:46:E8:12:08:26:94:87:06:14:5A:47:57:D1:14:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FBBqZmaYfY1LQJ1duiVb86cAukLfp12bna6p9zBzaPyV/0/BAF64A7AE246E8120826948706145A4757D1146D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAF64A7AE246E8120826948706145A4757D1146D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBBqZmaYfY1LQJ1duiVb86cAukLfp12bna6p9zBzaPyV/0/323830343a363135383a343030303a3a2f33342d3334203d3e20323639323239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6158:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         90:12:0b:1f:b8:e0:d3:17:75:2d:37:82:ed:0b:c8:82:31:cb:
         21:eb:16:a5:9a:f2:d3:a7:3a:09:48:1c:28:89:cf:90:5d:f9:
         84:35:36:11:b9:92:ab:56:25:f2:6f:6b:bc:ca:4f:a5:65:57:
         a2:4e:c6:83:fb:eb:79:31:cf:44:9b:d4:33:ee:3f:30:89:00:
         03:5f:f3:7e:f9:83:4f:53:41:28:b7:53:b8:43:bf:7e:97:82:
         13:5d:a2:74:cd:4b:84:51:ce:a7:a0:f1:4a:7a:6f:10:10:c1:
         a2:c6:85:66:6a:aa:4a:0a:d6:c7:dd:9b:37:bd:71:df:45:28:
         1a:f8:22:f5:16:94:aa:1b:e1:be:3b:94:8c:95:21:92:e7:d2:
         73:b4:ac:6d:dc:d2:49:d7:a6:db:a4:94:e2:63:e5:3f:85:40:
         4c:be:05:93:63:7f:67:d2:38:63:48:25:77:51:31:66:fe:b2:
         24:fe:dc:f6:b2:35:f5:1e:ab:8b:6e:e2:74:aa:b9:f4:0c:dd:
         11:e4:85:09:4f:8b:8a:3e:98:c0:5e:59:10:71:44:44:a0:57:
         9d:96:c3:f3:66:e6:0f:74:3e:50:b2:46:8f:8c:3a:9b:5f:89:
         69:84:ae:05:c6:60:f4:41:68:06:56:9b:1b:35:39:3a:e7:36:
         90:b8:34:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:26:34 2025 by rpki-client