Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/323830343a38383a383030313a3a2f34382d3438203d3e203238313335.roa
File:                     323830343a38383a383030313a3a2f34382d3438203d3e203238313335.roa (raw, json)
Hash identifier:          F9tPdsb7NDKAQSSLiR5wvewIW+N/NHLl0pZ696eYzH0=
Subject key identifier:   F8:97:9A:94:22:E0:C0:B1:41:6F:58:9D:09:1A:E0:B2:E4:EB:0D:95
Certificate issuer:       /CN=106C0018EAEC97B226036E9F42E3D4795FCBC714
Certificate serial:       7DE207E8FD086ACC3E8EB2426608A6CCC85C521B
Authority key identifier: 10:6C:00:18:EA:EC:97:B2:26:03:6E:9F:42:E3:D4:79:5F:CB:C7:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/323830343a38383a383030313a3a2f34382d3438203d3e203238313335.roa
Signing time:             Wed 13 Mar 2024 12:03:14 +0000
ROA not before:           Wed 13 Mar 2024 11:58:14 +0000
ROA not after:            Wed 12 Mar 2025 12:03:14 +0000
asID:                     28135
IP address blocks:        2804:88:8001::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:e2:07:e8:fd:08:6a:cc:3e:8e:b2:42:66:08:a6:cc:c8:5c:52:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=106C0018EAEC97B226036E9F42E3D4795FCBC714
        Validity
            Not Before: Mar 13 11:58:14 2024 GMT
            Not After : Mar 12 12:03:14 2025 GMT
        Subject: CN=F8979A9422E0C0B1416F589D091AE0B2E4EB0D95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c3:36:6c:32:e4:aa:bd:43:22:27:49:83:c9:
                    cb:4d:7b:b5:1a:29:2f:b6:e2:fb:9e:41:16:10:b4:
                    11:72:92:fa:01:c6:fd:08:12:4d:42:45:e5:ee:f9:
                    69:cc:d8:83:52:d2:b0:06:e3:d4:17:e4:eb:e9:8a:
                    be:c8:02:43:46:e7:94:46:67:5e:58:d0:21:58:1d:
                    b2:7d:03:c0:cf:b0:4b:ba:35:1b:b9:79:79:41:a0:
                    d3:95:3d:16:bd:30:8d:27:64:cc:da:8e:06:bd:43:
                    15:21:2d:93:d2:3e:4f:58:15:28:d1:bc:45:d6:e6:
                    cf:75:95:7f:89:a7:85:fc:ef:2c:23:d8:6c:91:2f:
                    e9:f4:99:ee:9e:87:70:22:59:d0:66:85:68:7b:12:
                    8e:12:c5:c4:c8:44:be:90:69:fb:f2:7e:5f:c1:e7:
                    16:c4:da:75:b3:87:77:2e:df:55:cd:d3:48:fd:01:
                    b4:e1:db:d6:ed:f2:39:fe:18:da:96:d3:24:2e:31:
                    d8:ba:da:5c:f0:26:69:de:2c:bc:4d:fc:2d:38:c4:
                    77:8c:17:0a:7e:73:40:0d:bf:98:90:ed:47:b0:d1:
                    b8:f8:a2:3c:09:d9:dc:f8:06:be:9f:1e:28:87:9f:
                    df:7e:0a:f2:16:12:cb:ac:e2:a6:ba:b8:95:65:b0:
                    24:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:97:9A:94:22:E0:C0:B1:41:6F:58:9D:09:1A:E0:B2:E4:EB:0D:95
            X509v3 Authority Key Identifier:
                keyid:10:6C:00:18:EA:EC:97:B2:26:03:6E:9F:42:E3:D4:79:5F:CB:C7:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/323830343a38383a383030313a3a2f34382d3438203d3e203238313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:88:8001::/48

    Signature Algorithm: sha256WithRSAEncryption
         24:ab:c4:c1:04:92:c2:53:de:d5:d4:63:38:db:c3:af:01:c6:
         11:46:0a:8c:c0:df:5f:3e:45:c5:59:7d:d0:6b:5d:be:b5:be:
         03:76:21:ea:70:58:19:96:81:4c:41:a4:cd:e2:51:3a:1b:00:
         18:6e:53:9f:98:45:9b:2e:fc:f5:6e:86:18:d1:2c:b1:de:30:
         a3:6e:d2:98:05:69:ab:a2:de:81:94:a0:c8:90:ae:80:7d:16:
         46:12:5e:77:49:66:6c:9a:b0:0b:ed:58:da:b4:7d:a4:5d:71:
         97:a8:cb:1a:65:c6:ec:fe:1e:f1:6e:9f:85:43:47:fc:ae:c0:
         af:a1:6b:f2:4b:fa:a8:29:1c:d9:d4:34:9d:4b:b6:22:63:23:
         f1:5d:bb:ae:99:06:e5:47:a0:e6:4e:53:e8:13:94:6a:8a:86:
         b2:c7:be:bc:81:53:39:ed:6c:23:1a:aa:a5:b1:d1:24:fe:f0:
         52:81:1f:03:a4:d8:c0:df:fc:58:bc:46:67:fb:df:9d:45:e6:
         32:d9:66:7d:c4:34:5c:69:12:97:fd:11:81:33:77:af:c0:83:
         39:7c:75:4e:e4:bb:30:09:fa:9d:8a:94:82:98:44:07:f0:48:
         f5:7e:c2:bd:18:bf:c6:d2:22:ec:37:4a:66:ac:0d:84:d4:9d:
         37:c4:48:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:31:34 2025 by rpki-client