Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/323830343a313239383a633030303a3a2f33342d3438203d3e20323633343836.roa
File:                     323830343a313239383a633030303a3a2f33342d3438203d3e20323633343836.roa (raw, json)
Hash identifier:          DAqu5vHYMmBzgjKw3m7YZkJtCc2eRZUK716q7SojePk=
Subject key identifier:   35:19:DA:1C:81:AC:63:A3:99:9C:FD:A5:3D:87:3C:72:FD:A0:62:9C
Certificate issuer:       /CN=30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6
Certificate serial:       4B4AAECFF5CB6B7CA2A6E06C43CD13C8D1C67E8D
Authority key identifier: 30:15:7C:EF:EE:BD:0C:7D:8A:29:EC:E4:A2:43:43:27:73:2F:FD:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/323830343a313239383a633030303a3a2f33342d3438203d3e20323633343836.roa
Signing time:             Fri 22 Nov 2024 16:48:47 +0000
ROA not before:           Fri 22 Nov 2024 16:43:47 +0000
ROA not after:            Fri 21 Nov 2025 16:48:47 +0000
asID:                     263486
IP address blocks:        2804:1298:c000::/34 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:4a:ae:cf:f5:cb:6b:7c:a2:a6:e0:6c:43:cd:13:c8:d1:c6:7e:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6
        Validity
            Not Before: Nov 22 16:43:47 2024 GMT
            Not After : Nov 21 16:48:47 2025 GMT
        Subject: CN=3519DA1C81AC63A3999CFDA53D873C72FDA0629C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:36:52:d3:db:2b:a8:4e:db:e4:c8:9a:ea:90:
                    b6:b4:ab:58:76:ab:78:4f:aa:72:60:93:82:7c:d0:
                    ec:52:b7:e9:08:00:72:39:8b:89:34:13:27:5a:8e:
                    eb:13:31:d0:78:2e:67:c1:37:2c:5d:69:a5:95:cc:
                    ba:2d:36:73:bf:a2:22:1d:ff:0e:fb:2d:5d:3c:cf:
                    ca:41:12:03:5f:93:63:35:03:dc:bc:cc:7c:fb:48:
                    69:f7:1b:39:3c:2b:d7:57:24:c5:67:19:7c:31:76:
                    26:44:e2:8a:80:ab:49:c6:11:db:3c:75:4d:50:1a:
                    2b:cf:bf:65:19:78:e1:30:99:67:d2:bc:a9:7d:ba:
                    03:e5:54:f6:34:48:b4:b9:7a:2e:f4:07:db:ac:99:
                    eb:7a:bd:fd:79:ed:6e:ea:e4:a3:bb:86:e3:f3:5c:
                    57:c4:fc:93:95:e2:fe:88:0f:ea:af:69:11:0d:26:
                    0b:58:2f:a4:9d:2d:47:ac:a2:dd:2d:a7:3a:84:f1:
                    3c:9c:76:90:a2:87:99:f6:e9:d1:a2:9a:58:f5:91:
                    9c:8a:0b:ff:f5:29:f3:18:28:30:10:1a:ac:19:24:
                    2a:bd:4b:25:cd:3e:0a:c3:da:00:24:49:3d:58:07:
                    1d:1d:89:30:e8:8b:6e:e4:f7:43:37:ca:73:4a:e3:
                    e4:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:19:DA:1C:81:AC:63:A3:99:9C:FD:A5:3D:87:3C:72:FD:A0:62:9C
            X509v3 Authority Key Identifier:
                keyid:30:15:7C:EF:EE:BD:0C:7D:8A:29:EC:E4:A2:43:43:27:73:2F:FD:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/323830343a313239383a633030303a3a2f33342d3438203d3e20323633343836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1298:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         81:5c:bd:c8:f9:19:84:3c:86:3b:3e:96:c6:9d:14:17:55:83:
         70:ed:c6:95:51:c1:d7:36:11:42:65:21:ab:7a:ee:6d:4c:1a:
         cd:80:c9:f5:a7:60:7f:d5:eb:54:93:70:9e:0f:cf:89:a9:a5:
         51:ff:95:35:2b:0a:40:29:24:3c:4c:37:87:1a:19:86:1e:f7:
         ec:28:21:41:fc:59:e6:4f:23:c2:eb:1a:d1:e4:7e:1d:4a:34:
         a3:12:b4:0b:a2:a3:2e:f9:91:be:e7:bb:fa:3a:b5:ba:9e:03:
         dd:46:9b:f8:95:3c:9c:15:66:37:bd:2d:4a:9a:9b:69:7e:b5:
         41:6f:11:d5:09:4e:6c:b7:06:23:c2:1c:46:1e:ce:fe:07:9a:
         fd:36:9b:e3:96:f1:2d:7b:e1:e3:ea:9a:d8:3f:63:db:cb:aa:
         aa:b2:d6:c4:ac:bc:e9:2f:d1:72:b0:07:a4:a0:6f:2e:c1:3b:
         da:47:a9:75:4c:72:66:8c:9c:1f:95:2c:aa:27:51:49:ed:12:
         a9:f7:f5:66:e5:01:b5:b4:15:77:46:f0:1f:3f:89:97:31:3f:
         a5:7a:97:50:d7:c3:76:ac:bb:22:72:99:1e:e3:15:7e:c8:f1:
         69:e7:55:b4:12:02:0f:7a:46:4a:34:39:7f:a8:e9:82:f8:3c:
         4b:9f:21:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:44:01 2025 by rpki-client