Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fdxq7V2YhcKgxWKa8x5JBcgqdDzMQe1txNLbVE1d6ewo/0/323830343a346236383a3a2f33322d3336203d3e20323637333034.roa
File:                     323830343a346236383a3a2f33322d3336203d3e20323637333034.roa (raw, json)
Hash identifier:          bmsBvAZKH7UkxkHT+dKtb0guCSkMvEa5bqTXNrBRvB8=
Subject key identifier:   0E:C2:03:BF:F8:60:76:65:D5:3B:8D:26:B5:0E:BC:D9:60:EB:00:4A
Certificate issuer:       /CN=BAF8CACEADFB87C6217EF0D018600625B078ABCF
Certificate serial:       526173E20C632E3AC3F5086E9B0610713A069E0A
Authority key identifier: BA:F8:CA:CE:AD:FB:87:C6:21:7E:F0:D0:18:60:06:25:B0:78:AB:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAF8CACEADFB87C6217EF0D018600625B078ABCF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fdxq7V2YhcKgxWKa8x5JBcgqdDzMQe1txNLbVE1d6ewo/0/323830343a346236383a3a2f33322d3336203d3e20323637333034.roa
Signing time:             Wed 22 May 2024 14:21:29 +0000
ROA not before:           Wed 22 May 2024 14:16:29 +0000
ROA not after:            Wed 21 May 2025 14:21:29 +0000
asID:                     267304
IP address blocks:        2804:4b68::/32 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:61:73:e2:0c:63:2e:3a:c3:f5:08:6e:9b:06:10:71:3a:06:9e:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAF8CACEADFB87C6217EF0D018600625B078ABCF
        Validity
            Not Before: May 22 14:16:29 2024 GMT
            Not After : May 21 14:21:29 2025 GMT
        Subject: CN=0EC203BFF8607665D53B8D26B50EBCD960EB004A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0d:97:96:2d:01:cf:a8:43:6a:58:ce:59:54:
                    34:d3:29:b1:b3:27:67:7b:48:72:ea:53:2c:67:64:
                    0b:43:c0:37:c0:e3:4a:5d:e8:46:65:76:6a:09:fa:
                    01:e8:18:ab:cd:aa:f9:fb:1d:dd:25:00:1b:dd:b1:
                    05:cc:18:c0:7f:db:4f:09:ea:7a:6a:c4:10:1e:93:
                    24:33:65:7c:eb:f4:38:91:19:d7:5a:ff:47:2d:49:
                    60:ed:75:fe:ce:02:dd:93:cd:4b:e7:6d:9a:8d:a0:
                    75:30:6a:3e:82:3d:4b:6b:d1:95:23:ad:9e:8b:2a:
                    ef:a8:97:55:ee:98:37:01:72:bb:11:d1:ce:20:1e:
                    c0:37:d0:fe:d8:1b:75:78:ec:93:4f:f8:73:fe:06:
                    28:c3:ad:f0:4c:54:1e:f9:3b:db:26:82:14:43:2f:
                    84:a7:df:a6:95:47:cd:dd:ef:1f:27:6e:70:c0:66:
                    58:f7:80:76:96:d1:f1:27:2a:3c:f8:8b:bc:eb:59:
                    7b:09:83:c5:ce:42:ad:08:83:f3:08:68:57:ec:61:
                    77:9d:b8:4f:17:18:37:22:b7:56:7c:a7:4e:0b:f4:
                    14:fa:4b:0b:be:ea:cc:71:d3:b4:cb:88:0f:2a:42:
                    12:8e:df:48:8c:28:23:74:7d:f2:7a:de:1f:92:1f:
                    7e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:C2:03:BF:F8:60:76:65:D5:3B:8D:26:B5:0E:BC:D9:60:EB:00:4A
            X509v3 Authority Key Identifier:
                keyid:BA:F8:CA:CE:AD:FB:87:C6:21:7E:F0:D0:18:60:06:25:B0:78:AB:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fdxq7V2YhcKgxWKa8x5JBcgqdDzMQe1txNLbVE1d6ewo/0/BAF8CACEADFB87C6217EF0D018600625B078ABCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAF8CACEADFB87C6217EF0D018600625B078ABCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fdxq7V2YhcKgxWKa8x5JBcgqdDzMQe1txNLbVE1d6ewo/0/323830343a346236383a3a2f33322d3336203d3e20323637333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b68::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:aa:7c:12:67:9c:17:67:7b:9e:d6:a9:d5:78:bf:dc:25:d3:
         75:3e:1f:0d:4e:6a:1e:4b:98:be:90:56:25:8d:e4:d0:8d:19:
         c7:cd:c8:a5:f3:61:ff:68:d6:f3:0a:55:9f:f5:7c:f0:ab:83:
         9d:01:a1:a4:c6:4b:80:00:11:d8:6b:4d:82:79:be:7c:2e:be:
         16:6f:39:36:d3:f0:79:d3:3b:59:55:ec:4b:1b:38:53:fb:78:
         2f:c8:e3:d0:47:58:fa:ce:95:65:b9:b2:b3:55:f8:32:c3:d7:
         28:c0:01:f0:ad:6f:f8:6b:41:58:62:c0:55:f3:b5:70:f5:be:
         a7:5a:9e:b6:6c:fa:bf:26:98:99:f2:5d:0f:42:6a:50:dd:41:
         bf:fb:f5:68:28:3d:79:41:4b:5d:60:5c:47:67:4e:c4:fd:2c:
         a3:1d:44:c4:dc:6c:64:37:59:99:bb:e1:f5:cf:22:2c:b0:a3:
         f1:cd:1f:09:f2:86:1b:50:88:95:68:5f:b2:03:7f:84:56:61:
         65:37:83:2c:bd:7f:c2:61:52:bf:f3:ea:4e:85:8a:e9:6f:44:
         4a:4c:2c:eb:82:60:08:58:f1:c5:ba:37:1b:c8:a2:b9:24:94:
         05:2c:24:27:97:9d:7a:1e:d6:13:d8:a3:d9:8b:a6:25:34:45:
         af:23:bc:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:39:10 2025 by rpki-client