Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/0/323830343a323633343a323030303a3a2f33362d3336203d3e20323634333332.roa
File:                     323830343a323633343a323030303a3a2f33362d3336203d3e20323634333332.roa (raw, json)
Hash identifier:          zD+9BhPzFS/u+IwthsFdkJFX996ARJpAjRiXv81yGAg=
Subject key identifier:   F2:13:53:37:C4:17:D3:11:33:B8:8F:D3:84:5B:4D:9E:2C:E0:85:8A
Certificate issuer:       /CN=F427EBED04EEA9E14CD726DEB3CC299993C1802E
Certificate serial:       1C35D84FC3E1FC66B7710D4AB3E9B3FC2BEC41AC
Authority key identifier: F4:27:EB:ED:04:EE:A9:E1:4C:D7:26:DE:B3:CC:29:99:93:C1:80:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F427EBED04EEA9E14CD726DEB3CC299993C1802E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/0/323830343a323633343a323030303a3a2f33362d3336203d3e20323634333332.roa
Signing time:             Mon 04 Apr 2022 13:50:31 +0000
ROA not before:           Mon 04 Apr 2022 13:45:31 +0000
ROA not after:            Mon 03 Apr 2023 13:50:31 +0000
asID:                     264332
IP address blocks:        2804:2634:2000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:35:d8:4f:c3:e1:fc:66:b7:71:0d:4a:b3:e9:b3:fc:2b:ec:41:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F427EBED04EEA9E14CD726DEB3CC299993C1802E
        Validity
            Not Before: Apr  4 13:45:31 2022 GMT
            Not After : Apr  3 13:50:31 2023 GMT
        Subject: CN=F2135337C417D31133B88FD3845B4D9E2CE0858A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:69:14:90:88:59:98:34:22:cc:8f:43:ca:66:
                    95:82:f8:3b:6e:44:85:e2:e8:81:d8:04:15:a8:db:
                    f6:fb:49:e1:c4:74:ae:65:05:e2:a3:06:99:15:6d:
                    f2:d9:f4:60:c7:a9:db:ff:09:5d:88:5d:fc:e8:ac:
                    07:db:08:ca:57:06:0a:c5:0c:7d:5e:59:49:18:e6:
                    d8:c2:3b:ab:31:fd:88:91:46:01:7b:cb:2c:41:8a:
                    54:bf:ea:19:cd:47:c4:c9:27:3f:5e:f0:10:4a:b9:
                    43:a4:4d:a9:37:31:2e:d4:e4:f8:e2:ac:99:93:dd:
                    05:cc:38:64:6b:43:e1:97:e3:77:ff:06:4e:87:3c:
                    57:00:4e:07:c8:1d:40:45:e2:13:5c:14:85:9a:5b:
                    94:97:f8:89:c7:69:3a:29:0f:14:bb:6c:68:9d:ba:
                    9b:2d:26:9f:1d:7a:b4:e8:17:00:04:04:1f:4f:fd:
                    d8:c1:a8:41:15:a4:e3:44:7e:c2:9f:a8:3c:7c:c4:
                    09:8b:79:db:46:d7:aa:69:7f:38:5d:16:7b:d7:6f:
                    af:66:3a:3a:3a:24:a1:f0:12:f2:64:50:42:da:a1:
                    03:12:b3:0d:c9:16:54:51:eb:51:74:82:91:bf:17:
                    67:4e:66:de:c3:76:a8:2f:a8:44:77:69:83:59:94:
                    32:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:13:53:37:C4:17:D3:11:33:B8:8F:D3:84:5B:4D:9E:2C:E0:85:8A
            X509v3 Authority Key Identifier:
                keyid:F4:27:EB:ED:04:EE:A9:E1:4C:D7:26:DE:B3:CC:29:99:93:C1:80:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/0/F427EBED04EEA9E14CD726DEB3CC299993C1802E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F427EBED04EEA9E14CD726DEB3CC299993C1802E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/0/323830343a323633343a323030303a3a2f33362d3336203d3e20323634333332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2634:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         b2:85:f0:56:ab:71:41:0b:7f:35:aa:e3:9d:15:c0:51:69:d0:
         ad:c9:c0:eb:4e:f3:45:0f:f2:42:d9:5f:a1:48:49:5d:fe:d5:
         bb:1b:15:5c:c9:52:b7:da:8f:fb:c6:a9:14:c5:df:52:3c:3b:
         62:5e:f3:72:66:ff:01:be:88:ae:51:56:7d:d1:36:88:2d:e0:
         ae:b2:f4:51:66:e1:af:07:01:c3:52:c2:b8:6a:79:82:84:cb:
         8e:47:1f:08:6d:07:0a:51:78:c7:07:0a:49:d8:f9:1e:cc:80:
         b5:89:f8:0f:a1:da:c6:50:ba:a2:2c:95:9e:da:08:c4:30:e5:
         d3:65:ac:e7:d8:e0:b2:b4:b0:59:3e:68:bf:ad:fe:a9:05:bf:
         0e:6d:ca:69:f8:d2:ab:b1:e5:d9:66:b0:e1:4a:25:ac:71:70:
         66:ee:62:e5:d4:e4:1f:bf:8e:4b:d0:ce:f2:24:94:cb:fa:92:
         c3:49:4b:d4:ea:e3:56:b9:93:88:e3:0a:99:64:79:d1:c3:cc:
         1a:b2:27:34:2e:e0:99:90:7a:6b:c3:5c:5c:5a:54:92:c1:5f:
         d7:c8:18:71:6e:2d:1c:c3:12:5f:41:ae:3e:52:58:bd:d2:f2:
         2b:fb:6d:ea:36:d0:cb:27:e8:fa:4d:98:27:3c:df:4d:de:f0:
         b0:6e:f7:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:54 2025 by rpki-client