Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/1/323830343a353139343a383030303a3a2f33342d3334203d3e20323638343633.roa
File:                     323830343a353139343a383030303a3a2f33342d3334203d3e20323638343633.roa (raw, json)
Hash identifier:          pzEzFyZ3L1MAR0fJi6QMScwjkXB+ILA9+RmAduvb084=
Subject key identifier:   DE:3B:CA:12:72:52:19:93:76:2C:BB:74:91:F5:95:9A:E0:67:A5:65
Certificate issuer:       /CN=4594A304E0A8E2520A9314F9E8CFA8170C961673
Certificate serial:       582D7A7217E64E2B8D6C6CD72AAB0132FB816366
Authority key identifier: 45:94:A3:04:E0:A8:E2:52:0A:93:14:F9:E8:CF:A8:17:0C:96:16:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4594A304E0A8E2520A9314F9E8CFA8170C961673.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/1/323830343a353139343a383030303a3a2f33342d3334203d3e20323638343633.roa
Signing time:             Tue 18 Apr 2023 14:17:11 +0000
ROA not before:           Tue 18 Apr 2023 14:12:11 +0000
ROA not after:            Tue 16 Apr 2024 14:17:11 +0000
asID:                     268463
IP address blocks:        2804:5194:8000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:2d:7a:72:17:e6:4e:2b:8d:6c:6c:d7:2a:ab:01:32:fb:81:63:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4594A304E0A8E2520A9314F9E8CFA8170C961673
        Validity
            Not Before: Apr 18 14:12:11 2023 GMT
            Not After : Apr 16 14:17:11 2024 GMT
        Subject: CN=DE3BCA1272521993762CBB7491F5959AE067A565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fb:1d:19:5b:7c:68:fa:9d:f8:92:09:87:16:
                    02:e3:3e:06:8b:8e:14:ac:a6:4e:61:86:d1:6e:e3:
                    6f:ad:e1:3d:f0:5d:bf:a2:5d:c3:f7:f8:0c:8f:c5:
                    4e:7b:b3:58:2d:50:a7:55:a5:9b:f6:34:c2:6e:c4:
                    36:21:b2:a6:b3:b6:b7:61:4f:30:93:19:8b:45:f6:
                    70:e3:25:d1:b5:f5:6d:3c:85:b5:d3:ce:ad:87:a1:
                    0e:93:ed:de:28:88:d5:14:4f:6c:fa:9b:b7:dc:96:
                    79:2c:4a:04:44:7f:9d:2b:48:06:31:5f:64:8b:6b:
                    5f:08:88:7a:e3:b6:62:e0:60:2b:32:46:8a:5d:ac:
                    e9:d1:c4:ea:e5:0e:3f:76:a7:05:33:7d:3c:91:5f:
                    0e:80:1a:ed:bb:6e:e3:e7:98:b7:75:7b:ef:4b:45:
                    a5:01:2a:d5:7d:58:93:07:83:a2:3e:8c:7a:6d:fd:
                    ea:a5:db:14:92:8e:f2:e1:f0:cc:e4:b7:e6:15:6d:
                    ef:97:92:43:27:70:16:7f:58:3f:45:d7:a5:ce:db:
                    c4:2c:f2:c0:15:49:34:56:05:90:98:00:cc:eb:11:
                    ca:87:c7:c7:82:5f:b2:30:00:6f:3e:91:77:88:45:
                    2e:76:31:47:cd:e8:81:23:fa:6b:46:e2:2f:c0:16:
                    fd:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:3B:CA:12:72:52:19:93:76:2C:BB:74:91:F5:95:9A:E0:67:A5:65
            X509v3 Authority Key Identifier:
                keyid:45:94:A3:04:E0:A8:E2:52:0A:93:14:F9:E8:CF:A8:17:0C:96:16:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/1/4594A304E0A8E2520A9314F9E8CFA8170C961673.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4594A304E0A8E2520A9314F9E8CFA8170C961673.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/1/323830343a353139343a383030303a3a2f33342d3334203d3e20323638343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5194:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         2e:60:d5:65:49:aa:07:cf:5e:eb:62:be:3d:5c:16:e3:57:d7:
         4f:7d:c8:04:93:c9:8e:c2:33:df:24:cd:69:85:99:4e:0f:be:
         5d:50:98:82:d2:fe:df:0b:97:18:c1:90:07:db:fb:d0:38:db:
         89:af:17:7c:0b:6e:84:00:c7:9d:05:9c:c1:fa:dc:67:29:92:
         45:6c:8d:4c:14:1e:e9:47:fa:e6:64:ff:61:81:df:e8:1c:5d:
         9e:1f:4d:b8:64:e7:f7:41:ef:75:9a:1c:b9:c8:54:c0:23:a2:
         a4:73:de:2c:5f:ec:b5:6f:01:43:31:0e:dc:29:fd:04:a4:ea:
         d5:ab:85:00:4d:bc:56:91:fb:36:1d:c5:a9:21:79:ee:6b:01:
         bb:97:8d:be:b0:0d:24:cb:2b:19:42:34:3f:a5:79:6e:1f:03:
         9d:0c:6f:23:77:a7:82:60:15:1e:e0:e1:74:17:95:9a:6d:8e:
         93:d5:0b:de:97:3b:d2:55:b7:71:da:30:3c:24:99:7d:e5:ec:
         08:f6:59:a9:07:15:92:93:4c:6b:f9:05:53:1f:74:71:a4:68:
         ef:91:83:69:76:59:28:a7:a1:b4:3e:5d:0e:82:27:e7:1a:21:
         bf:e9:9d:78:45:ff:76:2d:ba:cd:2c:07:5e:51:de:53:0b:b3:
         6e:09:e5:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:13:25 2025 by rpki-client