Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/323830343a313535343a3a2f33332d3333203d3e20323633333834.roa
File:                     323830343a313535343a3a2f33332d3333203d3e20323633333834.roa (raw, json)
Hash identifier:          8L8QJuzY/YJ1IA4FIi6ehR08uoaf574Zk266MeOD82E=
Subject key identifier:   D0:11:8B:39:79:A4:04:A2:4A:87:8D:32:78:00:A0:BE:71:EE:13:DD
Certificate issuer:       /CN=42069E8E68759D7E92CA70711619EA4DC4E27721
Certificate serial:       76587EFDC68580BA5BB375AE9DC918846ACAC6C1
Authority key identifier: 42:06:9E:8E:68:75:9D:7E:92:CA:70:71:16:19:EA:4D:C4:E2:77:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42069E8E68759D7E92CA70711619EA4DC4E27721.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/323830343a313535343a3a2f33332d3333203d3e20323633333834.roa
Signing time:             Thu 23 Nov 2023 20:11:14 +0000
ROA not before:           Thu 23 Nov 2023 20:06:14 +0000
ROA not after:            Thu 21 Nov 2024 20:11:14 +0000
asID:                     263384
IP address blocks:        2804:1554::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:58:7e:fd:c6:85:80:ba:5b:b3:75:ae:9d:c9:18:84:6a:ca:c6:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42069E8E68759D7E92CA70711619EA4DC4E27721
        Validity
            Not Before: Nov 23 20:06:14 2023 GMT
            Not After : Nov 21 20:11:14 2024 GMT
        Subject: CN=D0118B3979A404A24A878D327800A0BE71EE13DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ee:cf:76:fb:4a:38:02:95:98:69:17:1e:8c:
                    10:26:2f:fb:12:43:87:6b:ff:6b:41:bd:31:e4:04:
                    90:50:c5:83:0c:c9:99:99:7b:a9:38:c2:50:b0:c4:
                    b1:45:11:c2:dc:44:51:fb:84:46:49:f3:39:6c:80:
                    46:69:68:ed:25:33:91:bf:db:e7:11:69:3b:24:16:
                    61:03:9e:0a:99:67:a6:ea:4a:4e:7e:a2:83:4c:a5:
                    c2:b6:6f:94:39:fe:7f:23:a6:15:18:7f:4e:0b:ee:
                    31:86:0a:df:b5:b5:c8:6c:b1:b9:e7:22:67:b3:a7:
                    d1:27:24:d2:92:91:d6:28:5c:25:22:53:0d:10:2f:
                    20:84:07:55:7e:e0:fc:50:cf:0b:c1:a9:8d:ca:79:
                    86:32:cb:7b:72:02:53:3f:eb:6b:cd:2a:a2:1f:ef:
                    1f:b3:9e:4e:7c:26:38:a7:bc:ce:83:50:6f:fe:1f:
                    1e:5d:99:22:88:7d:62:e1:74:bf:de:ad:62:b5:62:
                    da:52:8a:e1:09:30:5e:6c:c4:e1:7e:ce:f9:04:21:
                    fc:82:42:a7:45:bd:d5:43:b9:7f:7f:84:9a:e7:f0:
                    34:48:da:8a:8a:63:56:92:5b:c0:c1:88:c6:f2:15:
                    ce:a0:23:9b:46:a1:99:2c:8f:7a:0e:0f:f3:c6:aa:
                    b9:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:11:8B:39:79:A4:04:A2:4A:87:8D:32:78:00:A0:BE:71:EE:13:DD
            X509v3 Authority Key Identifier:
                keyid:42:06:9E:8E:68:75:9D:7E:92:CA:70:71:16:19:EA:4D:C4:E2:77:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/42069E8E68759D7E92CA70711619EA4DC4E27721.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42069E8E68759D7E92CA70711619EA4DC4E27721.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/323830343a313535343a3a2f33332d3333203d3e20323633333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1554::/33

    Signature Algorithm: sha256WithRSAEncryption
         4e:ee:a1:48:13:fc:0c:86:e4:55:70:5d:30:af:f5:1e:4c:9a:
         f9:53:38:db:07:eb:ca:88:dc:f5:81:c3:30:ac:96:62:24:08:
         0c:8d:a8:cd:3b:da:b7:b2:92:08:1d:a7:49:79:29:93:ce:1c:
         08:01:0f:be:6c:c4:d5:5f:ae:bf:97:5c:84:80:28:ad:62:d4:
         66:cc:e2:71:19:18:8f:b5:bb:8b:0d:b2:8b:01:af:53:d8:af:
         21:99:61:27:4b:c2:0f:f5:8b:42:d8:2c:f7:92:f4:46:e4:25:
         c6:e5:cd:e9:a5:4a:9d:ec:3b:a1:69:13:84:b1:20:f4:08:20:
         00:ae:d5:17:b7:d6:8e:f9:09:4e:ac:44:28:2a:59:2c:13:83:
         e2:fe:3e:d1:fb:63:2e:3e:5b:91:f9:26:a7:90:76:99:b8:38:
         4b:da:04:81:94:de:f5:4c:26:2c:e4:16:ab:17:66:97:56:0f:
         9d:1b:25:bc:fe:d9:85:9e:e3:cb:b4:eb:79:75:5d:b4:cf:f4:
         b4:ae:ac:0a:7a:7d:bd:a9:a8:f2:e4:ac:ac:87:90:69:01:53:
         04:a5:73:81:4d:00:b3:53:34:ff:42:7c:4e:7c:27:49:64:dd:
         ee:34:85:4b:fc:f3:61:3f:58:89:2f:6d:7f:a5:9f:1d:39:7d:
         78:c2:44:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:46:01 2025 by rpki-client