Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/0/323830343a326364633a3a2f33322d3438203d3e20323633303639.roa
File:                     323830343a326364633a3a2f33322d3438203d3e20323633303639.roa (raw, json)
Hash identifier:          hB4Q/ik90CkZryCrpEtWU8JkGJnqydpYTZwVQcSo/yg=
Subject key identifier:   8C:E0:87:59:EE:02:3C:73:67:F1:85:65:DB:08:09:92:B0:4D:6C:4B
Certificate issuer:       /CN=4AAE191F9D2DE68E183E8D851C4C47742A75D479
Certificate serial:       60D398F622B7AC51362C063D7EA01005F1514786
Authority key identifier: 4A:AE:19:1F:9D:2D:E6:8E:18:3E:8D:85:1C:4C:47:74:2A:75:D4:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AAE191F9D2DE68E183E8D851C4C47742A75D479.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/0/323830343a326364633a3a2f33322d3438203d3e20323633303639.roa
Signing time:             Wed 01 Nov 2023 12:30:18 +0000
ROA not before:           Wed 01 Nov 2023 12:25:18 +0000
ROA not after:            Wed 30 Oct 2024 12:30:18 +0000
asID:                     263069
IP address blocks:        2804:2cdc::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:d3:98:f6:22:b7:ac:51:36:2c:06:3d:7e:a0:10:05:f1:51:47:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AAE191F9D2DE68E183E8D851C4C47742A75D479
        Validity
            Not Before: Nov  1 12:25:18 2023 GMT
            Not After : Oct 30 12:30:18 2024 GMT
        Subject: CN=8CE08759EE023C7367F18565DB080992B04D6C4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:da:92:64:d8:d1:35:03:fa:61:13:72:b6:57:
                    ec:02:28:e6:aa:21:0b:31:7a:52:2c:16:d4:82:01:
                    22:9c:99:30:ab:67:de:70:2f:82:54:a3:0d:50:3d:
                    b1:67:88:99:af:97:a5:c2:a8:9b:61:e0:3f:7c:bb:
                    b0:83:65:f6:6a:1a:a7:58:dc:15:ab:39:ce:3c:db:
                    9f:68:83:ec:8b:a5:f6:3f:d6:7f:72:2b:ea:e7:fd:
                    07:22:e5:ae:bc:fe:d2:53:4d:69:d8:7f:fe:59:80:
                    ba:c2:fd:de:61:b3:69:d0:2b:19:3d:a6:de:fe:29:
                    f7:e3:18:c2:ed:64:bb:e5:f5:ea:85:83:12:fa:7a:
                    6f:39:bd:8a:df:31:e6:7a:18:96:60:fa:01:e8:c7:
                    5a:b0:59:7e:3e:21:9c:1b:01:47:4f:b6:09:f1:69:
                    dd:b9:1b:67:97:97:d1:87:84:29:13:70:ac:e7:3a:
                    db:12:6f:2b:ab:fe:66:19:90:e0:f0:c6:3b:1f:35:
                    47:4b:1b:1c:62:f2:1f:64:1b:9b:2c:d7:b1:63:16:
                    d8:c0:67:17:74:fe:3e:d0:49:50:a6:49:81:af:f8:
                    b8:c5:c4:75:e7:75:e6:f8:db:bb:07:5e:2a:5e:1a:
                    ee:3a:24:30:7e:1d:c8:85:7b:bb:f3:1f:ea:7a:38:
                    82:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:E0:87:59:EE:02:3C:73:67:F1:85:65:DB:08:09:92:B0:4D:6C:4B
            X509v3 Authority Key Identifier:
                keyid:4A:AE:19:1F:9D:2D:E6:8E:18:3E:8D:85:1C:4C:47:74:2A:75:D4:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/0/4AAE191F9D2DE68E183E8D851C4C47742A75D479.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AAE191F9D2DE68E183E8D851C4C47742A75D479.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/0/323830343a326364633a3a2f33322d3438203d3e20323633303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2cdc::/32

    Signature Algorithm: sha256WithRSAEncryption
         af:1a:4e:4e:b1:8c:79:39:31:63:c3:94:05:2f:60:d9:1f:f3:
         b8:12:35:8d:5e:ed:29:77:da:30:7f:da:9a:7f:54:8b:99:9e:
         1f:72:89:0d:6d:38:f8:35:b1:28:01:d9:02:af:5e:8c:d4:53:
         42:8a:b6:43:3d:07:06:93:4c:f4:df:5d:f7:8e:2f:67:4b:62:
         19:a3:82:a9:f9:00:cb:2e:fc:8a:50:a7:1c:27:4f:6f:10:0b:
         e3:ed:87:92:18:33:4b:fe:d0:78:a1:a5:25:17:9a:3e:eb:5d:
         a1:e9:50:5f:bc:29:14:ad:b3:c8:8b:ea:a5:a1:f4:5d:2a:91:
         2f:c3:e1:05:42:cb:b2:94:07:be:58:1d:cc:3b:f6:20:95:30:
         2a:93:dd:e7:f1:48:b9:9f:f2:21:60:b6:7d:d2:7f:b5:c9:52:
         da:5c:72:d2:a0:0a:94:13:01:94:5f:49:0c:e0:0c:47:02:33:
         98:7b:e8:12:84:58:5a:93:23:35:18:1b:27:ae:a1:95:84:87:
         24:e9:02:eb:55:bf:15:96:00:c2:5d:a1:38:cb:1e:58:40:74:
         33:c9:00:2c:00:8c:07:1f:b4:43:99:43:d5:62:83:8b:2d:76:
         20:c2:f8:91:62:5c:0a:c8:10:d5:9c:56:f4:13:a9:89:3f:3b:
         29:14:38:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 03:13:58 2025 by rpki-client