Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHT77kH5sF7PVFSVw5mekKA3CxFaGjNgMe5BDRjEJtfg/0/323830343a373939383a3a2f34302d3430203d3e20323731333135.roa
File:                     323830343a373939383a3a2f34302d3430203d3e20323731333135.roa (raw, json)
Hash identifier:          HtXB6vZARQXbTWGIb56YJxFJn8v0ezplOcboOx23FR8=
Subject key identifier:   BC:13:E4:F2:64:92:BB:96:EE:D1:EA:14:67:21:7C:AE:7E:B3:77:40
Certificate issuer:       /CN=4D1BAA4B1EAC52416F42BEFE1426CF39F9B42542
Certificate serial:       328CC04E613DEEE3FC36285199B06EC23D8B3701
Authority key identifier: 4D:1B:AA:4B:1E:AC:52:41:6F:42:BE:FE:14:26:CF:39:F9:B4:25:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D1BAA4B1EAC52416F42BEFE1426CF39F9B42542.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHT77kH5sF7PVFSVw5mekKA3CxFaGjNgMe5BDRjEJtfg/0/323830343a373939383a3a2f34302d3430203d3e20323731333135.roa
Signing time:             Thu 19 Jan 2023 00:28:23 +0000
ROA not before:           Thu 19 Jan 2023 00:23:23 +0000
ROA not after:            Thu 18 Jan 2024 00:28:23 +0000
asID:                     271315
IP address blocks:        2804:7998::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:8c:c0:4e:61:3d:ee:e3:fc:36:28:51:99:b0:6e:c2:3d:8b:37:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D1BAA4B1EAC52416F42BEFE1426CF39F9B42542
        Validity
            Not Before: Jan 19 00:23:23 2023 GMT
            Not After : Jan 18 00:28:23 2024 GMT
        Subject: CN=BC13E4F26492BB96EED1EA1467217CAE7EB37740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:9d:59:ef:f1:05:9f:d6:8f:99:85:8c:00:5f:
                    90:ba:9e:06:cc:6e:7f:29:95:59:1c:1a:af:48:9f:
                    6d:3f:bb:e5:9b:6f:57:e5:ee:1e:62:68:ac:4e:c7:
                    70:ec:7d:24:5a:26:f5:03:61:ff:a8:09:21:6c:04:
                    86:85:97:e4:fd:35:26:7f:64:8b:fb:8e:3e:ca:67:
                    7e:0a:6c:71:f5:29:16:02:82:4d:65:d6:dc:d7:43:
                    79:25:3e:82:37:1e:09:b6:0b:69:c6:27:60:04:68:
                    a4:a1:fb:4c:48:cf:f2:ab:a4:eb:92:75:ee:5a:d4:
                    b3:c7:13:0d:5f:65:06:2b:d7:e0:b5:ba:5c:60:63:
                    45:cb:43:b6:d6:e2:4e:6b:a7:c1:a1:77:68:7b:5d:
                    64:9d:ba:e7:ad:6b:4a:9e:70:95:37:e9:45:4e:63:
                    25:ca:41:3f:3a:ab:39:25:8d:c7:4e:74:21:72:28:
                    78:0e:18:17:f0:33:8f:6a:11:ee:b6:64:8a:ae:f2:
                    df:13:1a:ef:b5:87:fc:6b:c9:59:9f:47:1e:cb:e9:
                    d0:0d:9d:5d:54:9e:40:6a:d7:74:65:c5:6f:77:51:
                    75:39:c6:90:3c:80:bb:82:b3:df:38:91:f7:78:33:
                    4f:28:a4:56:fb:86:20:a3:4d:c0:76:fe:57:b1:b4:
                    f4:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:13:E4:F2:64:92:BB:96:EE:D1:EA:14:67:21:7C:AE:7E:B3:77:40
            X509v3 Authority Key Identifier:
                keyid:4D:1B:AA:4B:1E:AC:52:41:6F:42:BE:FE:14:26:CF:39:F9:B4:25:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHT77kH5sF7PVFSVw5mekKA3CxFaGjNgMe5BDRjEJtfg/0/4D1BAA4B1EAC52416F42BEFE1426CF39F9B42542.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D1BAA4B1EAC52416F42BEFE1426CF39F9B42542.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHT77kH5sF7PVFSVw5mekKA3CxFaGjNgMe5BDRjEJtfg/0/323830343a373939383a3a2f34302d3430203d3e20323731333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7998::/40

    Signature Algorithm: sha256WithRSAEncryption
         09:5d:11:dd:41:f6:d9:77:44:21:a4:8d:e5:83:33:d4:31:af:
         17:b3:4e:39:5a:01:cd:29:8c:37:48:c9:c8:02:84:81:d1:3f:
         1f:55:a0:eb:b5:2b:7f:e6:c0:8a:56:93:24:9c:85:ac:6e:2a:
         9f:5c:ac:bd:e1:70:c1:db:8f:82:ca:0c:45:3f:ff:ea:bb:a0:
         eb:1f:62:c2:80:07:d2:bb:3e:bc:ed:ca:a9:d7:89:d2:44:e2:
         bf:7a:d1:13:18:e4:7d:9c:77:c0:58:5a:b4:96:53:65:d3:28:
         ac:97:79:d3:01:78:ce:df:83:7b:74:bd:a7:32:d0:37:78:93:
         54:75:72:40:92:9d:28:c1:a3:ee:b8:74:03:96:ce:54:81:c4:
         b8:97:76:a8:b0:99:05:a3:1e:00:d2:38:4d:c7:da:06:7c:58:
         96:c4:c3:66:80:f8:4b:4c:91:fd:29:d1:f4:1f:67:a5:4c:7a:
         0c:c0:75:c6:a6:38:ee:e4:09:6d:e0:4b:c8:25:7d:4d:51:a7:
         54:44:d2:05:4f:63:07:6c:23:2b:8f:2b:dc:47:aa:74:d8:f0:
         b5:6a:b3:91:c1:33:ef:7c:b4:ec:95:ec:ef:57:c0:5d:95:84:
         b9:3c:27:4b:e6:d6:61:50:c5:b5:63:76:92:64:5d:09:aa:1e:
         ee:97:25:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:15:52 2025 by rpki-client