Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/0/323830343a373131343a3136343a3a2f3438203d3e20323730373635.roa
File:                     323830343a373131343a3136343a3a2f3438203d3e20323730373635.roa (raw, json)
Hash identifier:          jtuGj9it741QbrLSMnAONW+DhGC+1EFQ9ldd8lBLkwk=
Subject key identifier:   BB:DB:B1:38:71:D2:6A:63:0C:1D:8C:8E:45:60:E7:28:73:6C:F8:4D
Certificate issuer:       /CN=EA84CAC6208EA96D7BC0F3C01912E59BC42054F1
Certificate serial:       5634BF0CB0A345D330E0F73FAA202BD34B699DC6
Authority key identifier: EA:84:CA:C6:20:8E:A9:6D:7B:C0:F3:C0:19:12:E5:9B:C4:20:54:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EA84CAC6208EA96D7BC0F3C01912E59BC42054F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/0/323830343a373131343a3136343a3a2f3438203d3e20323730373635.roa
Signing time:             Mon 15 May 2023 02:00:01 +0000
ROA not before:           Mon 15 May 2023 01:55:01 +0000
ROA not after:            Wed 15 May 2024 02:00:01 +0000
asID:                     270765
IP address blocks:        2804:7114:164::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:34:bf:0c:b0:a3:45:d3:30:e0:f7:3f:aa:20:2b:d3:4b:69:9d:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA84CAC6208EA96D7BC0F3C01912E59BC42054F1
        Validity
            Not Before: May 15 01:55:01 2023 GMT
            Not After : May 15 02:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:73:67:79:48:c5:69:01:c1:17:20:96:82:17:
                    bb:a4:4d:bf:02:72:9e:65:7d:2f:82:f8:83:ff:8b:
                    50:24:69:b4:b1:f4:2b:fa:69:11:4e:fb:4c:5a:36:
                    cc:33:75:b8:d3:d3:aa:18:69:c6:ae:5c:89:ef:da:
                    e1:5e:da:4f:49:df:59:64:f0:b7:5c:8e:5b:3b:93:
                    ac:e2:ca:b7:e7:00:ba:bd:fc:ed:93:0b:cb:be:77:
                    fe:ee:78:61:1e:69:c9:0b:8f:2b:6e:0c:1b:b3:5c:
                    d0:8b:40:10:b1:c0:f1:80:bb:e3:a6:64:64:75:34:
                    ed:18:84:15:10:39:dc:d8:d6:00:5d:a5:9a:65:38:
                    6a:38:c3:bb:d0:2b:78:64:24:2c:fa:bf:61:17:3d:
                    67:fb:17:1b:57:1b:70:85:f5:a1:79:87:8d:73:37:
                    48:57:36:51:01:ea:4e:19:15:6b:55:0c:d8:bf:27:
                    dc:ce:38:e1:9b:b8:50:b8:9f:ba:d1:40:89:c0:d2:
                    04:df:73:3a:6b:13:d8:12:d8:ec:00:15:f8:98:90:
                    de:33:83:6a:47:a7:89:bd:00:4c:70:66:ad:8f:6d:
                    2b:6a:b9:ee:c1:ff:02:d6:8f:4d:7e:f5:30:97:95:
                    2c:92:80:6b:d9:76:b9:14:8f:28:d6:c8:af:08:b1:
                    6c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:DB:B1:38:71:D2:6A:63:0C:1D:8C:8E:45:60:E7:28:73:6C:F8:4D
            X509v3 Authority Key Identifier:
                keyid:EA:84:CA:C6:20:8E:A9:6D:7B:C0:F3:C0:19:12:E5:9B:C4:20:54:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/0/EA84CAC6208EA96D7BC0F3C01912E59BC42054F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EA84CAC6208EA96D7BC0F3C01912E59BC42054F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/0/323830343a373131343a3136343a3a2f3438203d3e20323730373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7114:164::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:48:ca:2a:65:5c:4e:12:a4:6d:4e:10:7c:47:56:25:d0:65:
         f4:fc:d3:f9:8a:d8:97:60:1f:f6:ee:ac:ad:86:dd:eb:45:36:
         ba:be:e6:b3:99:93:fa:35:3b:94:ff:64:d3:c8:29:22:79:37:
         f7:84:81:7e:60:45:3c:a8:f7:53:8c:67:11:3d:4c:16:1f:5f:
         73:e6:b4:c8:ce:62:72:96:d9:17:b5:59:e3:46:fb:d2:21:0a:
         62:20:22:26:3f:be:08:a2:97:8d:9c:d9:2e:dd:53:80:50:74:
         ab:3a:b9:44:a4:e2:17:53:36:05:ee:4d:1f:b1:06:3f:38:cb:
         95:a1:44:f6:32:a7:a2:7f:e8:c4:73:3e:b8:f6:82:cb:1a:0e:
         80:54:81:37:0a:24:ee:c1:d3:04:0f:61:70:f2:64:69:fb:57:
         d2:65:c7:30:8f:3a:67:17:e7:68:73:fa:0b:84:ef:a1:59:d7:
         66:f8:2c:c1:56:75:57:a7:ef:30:f6:ad:64:8b:e8:6d:c5:1a:
         d4:35:c9:9b:3a:b1:12:4a:8b:12:9b:bb:7d:56:a1:32:a0:53:
         f6:7f:c0:75:63:27:50:a3:63:0f:6a:0c:17:54:68:93:11:4e:
         35:99:54:dc:d0:7d:b9:2e:94:45:10:fe:98:a0:fa:ba:97:0a:
         68:91:70:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:39 2025 by rpki-client