Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/0/323830343a326364633a383030303a3a2f33332d3333203d3e20323633303639.roa
File:                     323830343a326364633a383030303a3a2f33332d3333203d3e20323633303639.roa (raw, json)
Hash identifier:          hQcduzJv+v5eS9tfE2wHocDMx9nmsOZE64u6/PweFIE=
Subject key identifier:   97:DE:DF:08:35:EE:AF:36:EE:57:DC:35:35:83:B9:62:2F:4D:12:4A
Certificate issuer:       /CN=4AAE191F9D2DE68E183E8D851C4C47742A75D479
Certificate serial:       5355FF2324331EBE9DEA441701EC0CE02BCE68CE
Authority key identifier: 4A:AE:19:1F:9D:2D:E6:8E:18:3E:8D:85:1C:4C:47:74:2A:75:D4:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AAE191F9D2DE68E183E8D851C4C47742A75D479.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/0/323830343a326364633a383030303a3a2f33332d3333203d3e20323633303639.roa
Signing time:             Mon 13 Mar 2023 18:51:49 +0000
ROA not before:           Mon 13 Mar 2023 18:46:49 +0000
ROA not after:            Mon 11 Mar 2024 18:51:49 +0000
asID:                     263069
IP address blocks:        2804:2cdc:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:55:ff:23:24:33:1e:be:9d:ea:44:17:01:ec:0c:e0:2b:ce:68:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AAE191F9D2DE68E183E8D851C4C47742A75D479
        Validity
            Not Before: Mar 13 18:46:49 2023 GMT
            Not After : Mar 11 18:51:49 2024 GMT
        Subject: CN=97DEDF0835EEAF36EE57DC353583B9622F4D124A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f9:bf:4f:34:57:1f:2d:cf:2a:65:55:01:73:
                    37:0e:34:d1:38:f2:fe:2a:e9:d9:e8:4f:d2:5b:56:
                    96:2b:0f:5e:c0:bb:98:a2:2b:53:f3:48:58:69:eb:
                    b4:e4:3d:a0:90:cf:4c:16:2c:92:b7:f1:04:62:07:
                    9d:3b:80:77:c6:f3:af:5d:d7:6c:e0:bf:bc:15:b7:
                    67:17:98:96:2e:23:32:57:62:9f:68:50:3a:fd:3c:
                    5b:3c:8a:68:52:4e:2d:7c:73:09:a5:71:f7:7d:81:
                    b0:61:e1:c4:c6:63:83:d3:50:fe:9f:be:57:e9:fc:
                    f1:3b:bd:23:ce:b6:7a:32:c9:23:a1:e5:b6:72:09:
                    80:82:a6:52:df:8b:2f:16:18:18:69:79:12:91:33:
                    18:cd:43:0d:3f:24:fe:ba:b3:24:dd:cd:6a:32:53:
                    e6:05:44:8b:54:e8:1a:a4:50:5a:df:c1:3d:e3:01:
                    d0:c1:f0:14:eb:8c:8c:cb:39:90:d8:90:2c:24:9d:
                    e8:82:ba:7b:1c:aa:a2:8d:34:59:70:9f:b9:76:ce:
                    03:3e:2f:5c:07:fe:69:8a:09:db:08:ae:2c:1c:c6:
                    6d:65:dc:c0:ed:0c:95:8f:a5:5a:27:f1:9b:e5:bb:
                    97:28:37:ab:fd:cd:92:31:f2:61:15:bc:92:1a:d5:
                    4f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:DE:DF:08:35:EE:AF:36:EE:57:DC:35:35:83:B9:62:2F:4D:12:4A
            X509v3 Authority Key Identifier:
                keyid:4A:AE:19:1F:9D:2D:E6:8E:18:3E:8D:85:1C:4C:47:74:2A:75:D4:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/0/4AAE191F9D2DE68E183E8D851C4C47742A75D479.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AAE191F9D2DE68E183E8D851C4C47742A75D479.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/0/323830343a326364633a383030303a3a2f33332d3333203d3e20323633303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2cdc:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         62:a6:b2:63:c3:1b:40:66:85:59:a3:18:73:a9:51:89:95:e0:
         e2:ec:3c:6b:21:80:23:ea:f6:cd:cd:7a:70:b0:c2:9f:6b:b6:
         0f:6a:cd:00:61:d1:3f:70:87:f0:9f:47:ad:9e:55:88:0e:cd:
         65:b8:b4:c7:75:2c:49:72:9c:f3:8d:e7:4b:f5:44:3a:c7:b1:
         ee:38:89:44:75:ea:39:c9:4f:5b:17:94:9f:db:24:ab:d9:57:
         66:53:fa:11:28:5c:57:61:d0:c4:17:33:09:24:7e:cf:ae:e6:
         b3:a2:ac:7a:e8:10:58:16:2e:db:59:53:87:b5:5e:47:d9:19:
         da:f6:64:ae:51:1f:b9:d8:25:3e:eb:8a:3c:8e:45:04:30:fb:
         3f:57:6d:8f:eb:2c:2d:81:5e:ef:d3:1b:15:58:36:72:57:cb:
         dc:6a:b9:00:31:3a:fb:00:9b:68:03:47:e1:c2:0a:39:ca:99:
         77:3d:8d:be:22:dd:7a:96:0e:7d:d9:64:ad:dd:72:4c:8d:54:
         e9:b8:ee:3d:3a:6e:d5:a6:ad:54:0a:3a:47:02:d8:d0:ef:9e:
         10:11:8e:17:6f:cb:aa:01:53:52:47:73:bb:47:b0:76:06:17:
         46:07:85:0b:3f:d2:5e:d3:c4:d7:01:ab:f6:59:f5:46:82:a3:
         f5:d9:5e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:33:25 2025 by rpki-client