Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/323830343a333664383a383030303a3a2f33332d3333203d3e20323636333736.roa
File:                     323830343a333664383a383030303a3a2f33332d3333203d3e20323636333736.roa (raw, json)
Hash identifier:          koPkHnPCxBOJ4+33gcs9navoww5NQoVNFsAbW6LmUwo=
Subject key identifier:   BB:BF:2A:7C:75:64:2E:BF:45:CA:27:04:32:ED:05:94:3B:22:81:B7
Certificate issuer:       /CN=2FC18E66BC8956CC2B6B8E02F4E8A4DDB7732859
Certificate serial:       18B088BA2DAE41D791A1BCD069C70ED79CBFA4F7
Authority key identifier: 2F:C1:8E:66:BC:89:56:CC:2B:6B:8E:02:F4:E8:A4:DD:B7:73:28:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FC18E66BC8956CC2B6B8E02F4E8A4DDB7732859.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/323830343a333664383a383030303a3a2f33332d3333203d3e20323636333736.roa
Signing time:             Sun 02 Feb 2025 14:34:57 +0000
ROA not before:           Sun 02 Feb 2025 14:29:57 +0000
ROA not after:            Sun 01 Feb 2026 14:34:57 +0000
asID:                     266376
IP address blocks:        2804:36d8:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:b0:88:ba:2d:ae:41:d7:91:a1:bc:d0:69:c7:0e:d7:9c:bf:a4:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC18E66BC8956CC2B6B8E02F4E8A4DDB7732859
        Validity
            Not Before: Feb  2 14:29:57 2025 GMT
            Not After : Feb  1 14:34:57 2026 GMT
        Subject: CN=BBBF2A7C75642EBF45CA270432ED05943B2281B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:04:d5:22:da:f3:fb:20:29:73:2f:3b:f8:38:
                    57:06:40:0d:51:ea:85:76:50:81:09:c2:c2:c8:83:
                    0a:32:ad:7d:21:01:35:cb:9e:6e:17:eb:01:23:4b:
                    ee:53:91:0d:6a:e8:7c:8b:92:46:b7:15:e0:db:ea:
                    96:64:4c:a7:c8:64:04:fb:40:48:ed:d4:97:cf:e7:
                    2c:cd:2c:7e:b8:1d:ee:0f:42:bb:2e:e4:4a:02:71:
                    60:9c:55:bf:d8:20:8e:6e:f0:8b:15:5a:e9:38:cb:
                    f0:38:cf:54:90:ec:b9:05:24:1c:83:b2:17:c3:b0:
                    ea:ff:95:9b:83:48:f1:72:4e:22:9d:5d:e5:5a:b1:
                    36:d5:56:25:2e:23:f2:10:1e:a1:1e:9f:18:47:9e:
                    9b:c9:a2:eb:74:68:1e:5f:00:a3:b7:9b:79:8f:62:
                    2d:a8:15:e9:44:d2:a9:f9:57:6a:92:65:ac:10:7e:
                    9c:2e:6e:b5:b1:26:34:a3:bd:b5:1c:52:e7:3b:47:
                    7c:ce:57:e1:1b:c1:fb:c9:e1:45:71:15:e8:b1:95:
                    14:0d:25:30:ec:49:36:cb:17:ec:bd:47:ee:20:81:
                    18:43:68:26:5c:52:92:26:9d:1f:c4:8f:a6:b9:ff:
                    66:3a:3f:a1:42:11:b6:26:b7:91:87:47:aa:7f:d8:
                    78:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:BF:2A:7C:75:64:2E:BF:45:CA:27:04:32:ED:05:94:3B:22:81:B7
            X509v3 Authority Key Identifier:
                keyid:2F:C1:8E:66:BC:89:56:CC:2B:6B:8E:02:F4:E8:A4:DD:B7:73:28:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/2FC18E66BC8956CC2B6B8E02F4E8A4DDB7732859.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FC18E66BC8956CC2B6B8E02F4E8A4DDB7732859.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/323830343a333664383a383030303a3a2f33332d3333203d3e20323636333736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:36d8:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         67:1b:9d:09:c4:3e:ae:1f:3e:b0:ff:50:57:79:f3:74:95:d4:
         b3:ad:ff:ef:17:cc:ce:8d:c3:71:47:20:aa:b8:0e:83:73:9a:
         fa:9b:b9:d6:4f:db:2d:c7:8c:8e:78:fc:5e:1e:28:3d:e1:28:
         b3:a4:ee:1d:e0:a3:4b:f0:14:51:90:36:ea:30:45:01:f6:43:
         35:4b:b5:0a:b7:4c:23:40:07:55:24:a2:8f:c9:d5:37:11:d0:
         11:8d:41:03:a8:0b:16:f4:e5:88:3f:32:f0:28:3f:ff:8d:30:
         16:06:74:ee:08:c4:69:75:32:05:23:af:f1:5f:6d:31:df:78:
         32:62:4d:e8:93:6a:12:6c:9f:db:49:07:58:fd:b0:d4:6b:17:
         87:7a:80:24:cb:92:ef:e9:df:bb:ea:9d:6c:96:37:bd:4a:66:
         6d:98:43:54:74:0e:54:df:4f:fd:07:bf:c6:3a:59:11:9b:e5:
         9b:b7:b5:e2:03:bd:0f:d3:9c:5a:2d:af:45:c3:3f:bd:74:f3:
         c0:2c:6f:24:38:d0:2a:1e:79:cf:26:35:05:01:c5:78:d8:24:
         0d:4d:78:76:3d:5b:19:8f:a5:89:37:80:4f:92:57:cb:43:6f:
         39:e1:bf:df:68:f4:33:2a:da:c9:49:48:3d:40:01:12:d7:9d:
         e2:33:87:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:42:45 2025 by rpki-client