Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/323830343a373965383a383030303a3a2f33332d3333203d3e20323731333335.roa
File:                     323830343a373965383a383030303a3a2f33332d3333203d3e20323731333335.roa (raw, json)
Hash identifier:          8uEAMJR2YJmOSyZ0/QgGg/ZtKU7P/8wZj8ufImf62Yg=
Subject key identifier:   3A:99:A6:5E:E5:84:B0:FD:E6:45:BC:4C:92:37:09:37:58:9F:83:E1
Certificate issuer:       /CN=F480C4379294C536904F68B3310E84F3A994704C
Certificate serial:       04B6EDF40E7FE8611F024133782A01E19CD5187F
Authority key identifier: F4:80:C4:37:92:94:C5:36:90:4F:68:B3:31:0E:84:F3:A9:94:70:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F480C4379294C536904F68B3310E84F3A994704C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/323830343a373965383a383030303a3a2f33332d3333203d3e20323731333335.roa
Signing time:             Sat 11 Nov 2023 13:50:09 +0000
ROA not before:           Sat 11 Nov 2023 13:45:09 +0000
ROA not after:            Sat 09 Nov 2024 13:50:09 +0000
asID:                     271335
IP address blocks:        2804:79e8:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:b6:ed:f4:0e:7f:e8:61:1f:02:41:33:78:2a:01:e1:9c:d5:18:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F480C4379294C536904F68B3310E84F3A994704C
        Validity
            Not Before: Nov 11 13:45:09 2023 GMT
            Not After : Nov  9 13:50:09 2024 GMT
        Subject: CN=3A99A65EE584B0FDE645BC4C92370937589F83E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:22:05:43:13:1a:d2:c6:f8:85:13:a0:bb:c6:
                    dd:ee:0b:ad:0a:af:18:5c:4b:90:17:8b:92:7f:71:
                    75:b8:06:67:ad:ae:b0:78:68:94:c2:bd:84:52:3a:
                    ea:fb:bf:50:52:9a:d7:9f:e2:14:f9:4f:69:fd:03:
                    44:11:02:2e:0e:90:4a:65:e2:44:1c:c7:45:e3:2a:
                    23:2f:3e:98:1a:c0:81:32:36:8b:75:93:26:81:2c:
                    83:42:9c:ad:16:a1:94:dd:3a:23:2a:9f:b1:d8:38:
                    ce:b4:a6:cc:00:42:4a:a5:66:dc:c6:c3:5c:5b:66:
                    4d:68:92:4c:e9:b3:3f:76:e5:84:c8:bd:05:71:29:
                    28:80:21:e5:df:d2:e6:5e:92:3e:fb:63:33:09:5b:
                    81:ac:9a:94:0d:a2:d1:9e:64:c2:dd:26:60:2c:6a:
                    b7:7e:ec:34:db:4a:f3:2a:84:53:4f:7c:09:b9:9e:
                    b8:19:d0:1b:97:3b:a7:b1:ac:54:19:63:c2:48:38:
                    e3:50:57:e2:15:66:35:0f:58:8f:90:36:87:e4:b3:
                    31:63:b2:b2:10:76:38:0e:e2:3f:98:f5:ed:bb:37:
                    e9:46:18:ce:72:93:ca:94:6d:72:31:1d:54:fa:57:
                    49:d7:c2:8a:c2:0e:28:96:25:3d:0c:c0:1d:ca:8a:
                    70:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:99:A6:5E:E5:84:B0:FD:E6:45:BC:4C:92:37:09:37:58:9F:83:E1
            X509v3 Authority Key Identifier:
                keyid:F4:80:C4:37:92:94:C5:36:90:4F:68:B3:31:0E:84:F3:A9:94:70:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/F480C4379294C536904F68B3310E84F3A994704C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F480C4379294C536904F68B3310E84F3A994704C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/323830343a373965383a383030303a3a2f33332d3333203d3e20323731333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:79e8:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         16:6c:54:06:ce:eb:b8:bd:58:81:85:23:82:e2:0b:0b:38:78:
         a2:42:60:d8:1b:8c:51:d0:e4:ef:d8:af:68:bc:5b:c2:47:b0:
         54:c7:40:b6:b3:07:10:25:7a:a2:c3:fa:d7:a4:cf:23:b3:20:
         2f:0b:50:24:cd:bf:5c:92:94:15:f7:d2:0e:2a:3c:2f:40:30:
         1a:31:f1:cc:e1:36:3e:71:37:4b:2e:bc:49:6a:f7:08:52:9d:
         2a:6a:04:4f:de:c7:59:16:85:e7:d7:1f:2b:30:13:3f:4f:70:
         ad:fa:6f:14:99:81:a9:48:bc:da:89:df:5a:2b:01:11:4f:b3:
         7d:c7:fe:e0:fe:e7:a8:a4:a6:c8:2d:e2:4b:cc:45:bd:f2:70:
         13:6a:ec:e7:1d:d6:03:40:e2:ed:24:9e:c0:21:92:4f:64:ce:
         d1:66:8a:92:3a:9d:a2:c2:33:ee:07:b9:3f:73:73:39:72:68:
         bb:9e:e2:b3:dc:96:6e:09:37:eb:3d:f6:f4:7e:05:85:b7:f1:
         40:39:3a:ac:80:1f:28:fd:6d:39:40:a5:5a:5e:df:45:c6:ab:
         f6:91:31:98:a4:0f:70:86:a1:12:50:07:66:7f:ea:d7:a7:88:
         94:40:5d:bc:ea:c7:5a:48:dd:03:fe:42:d1:72:c5:31:9a:d0:
         89:b9:34:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 10:47:56 2025 by rpki-client