Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HadFShe2BY5mx3E748UfkJX6nzQxJLCVFZ9vksJ1Tmc/0/323830343a353833343a383030303a3a2f33332d3333203d3e20323638313133.roa
File:                     323830343a353833343a383030303a3a2f33332d3333203d3e20323638313133.roa (raw, json)
Hash identifier:          nTxYT9sK5ijJ7XWxZJih0GEfzhDFzx4bwkWUaSZrG8g=
Subject key identifier:   9A:D4:B3:CD:DF:B5:0F:F2:67:76:18:83:C0:2C:73:ED:2E:27:BF:96
Certificate issuer:       /CN=FA921E7C3C9FDC4F96D45614C07E02367A255860
Certificate serial:       26FB369409EC60E4E7EBB805B46AB7E319122B75
Authority key identifier: FA:92:1E:7C:3C:9F:DC:4F:96:D4:56:14:C0:7E:02:36:7A:25:58:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA921E7C3C9FDC4F96D45614C07E02367A255860.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HadFShe2BY5mx3E748UfkJX6nzQxJLCVFZ9vksJ1Tmc/0/323830343a353833343a383030303a3a2f33332d3333203d3e20323638313133.roa
Signing time:             Tue 16 Apr 2024 23:17:37 +0000
ROA not before:           Tue 16 Apr 2024 23:12:37 +0000
ROA not after:            Tue 15 Apr 2025 23:17:37 +0000
asID:                     268113
IP address blocks:        2804:5834:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:fb:36:94:09:ec:60:e4:e7:eb:b8:05:b4:6a:b7:e3:19:12:2b:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA921E7C3C9FDC4F96D45614C07E02367A255860
        Validity
            Not Before: Apr 16 23:12:37 2024 GMT
            Not After : Apr 15 23:17:37 2025 GMT
        Subject: CN=9AD4B3CDDFB50FF267761883C02C73ED2E27BF96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:92:d0:17:0f:1f:94:05:ad:5c:07:21:45:d5:
                    6e:5c:34:c4:21:05:f7:25:c0:2a:d8:99:a1:d2:aa:
                    e8:bf:fe:5f:64:10:0e:41:0b:cd:9a:99:3e:da:b9:
                    fc:29:ba:e7:4c:5d:b1:69:d1:e6:f7:24:d4:13:90:
                    b0:2e:07:ed:2a:75:c6:1c:c0:3d:8a:0d:b5:a6:ec:
                    6e:01:6c:2e:fc:63:42:c1:ba:68:a6:d4:12:68:aa:
                    81:db:46:b1:6e:40:e1:f2:1b:e7:d4:11:93:de:32:
                    95:a1:63:5e:f6:b8:ba:1c:f7:fc:93:41:83:ba:85:
                    af:34:66:e6:4c:8a:42:49:76:ad:26:a3:41:90:39:
                    a4:41:98:f9:b5:42:dc:8c:cb:33:2d:01:4e:7d:6f:
                    7b:8f:40:0e:55:7c:fa:2c:f2:11:59:09:83:41:ea:
                    62:6a:e3:af:84:ea:6c:39:da:6d:de:cb:95:46:e7:
                    4c:eb:9c:bd:a2:f4:4d:99:c1:ed:8a:3a:93:64:3f:
                    3b:dd:06:7c:9c:5c:cc:a0:13:b5:bc:b4:ca:fb:ec:
                    b6:5b:79:a3:8c:dd:0c:d6:c5:24:70:e5:f1:cb:de:
                    06:92:97:a6:69:b2:c8:ae:28:f3:e1:e1:17:71:2b:
                    7b:9d:20:f3:7f:8b:9a:2d:02:a6:6e:3e:c9:46:42:
                    ff:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:D4:B3:CD:DF:B5:0F:F2:67:76:18:83:C0:2C:73:ED:2E:27:BF:96
            X509v3 Authority Key Identifier:
                keyid:FA:92:1E:7C:3C:9F:DC:4F:96:D4:56:14:C0:7E:02:36:7A:25:58:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HadFShe2BY5mx3E748UfkJX6nzQxJLCVFZ9vksJ1Tmc/0/FA921E7C3C9FDC4F96D45614C07E02367A255860.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA921E7C3C9FDC4F96D45614C07E02367A255860.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HadFShe2BY5mx3E748UfkJX6nzQxJLCVFZ9vksJ1Tmc/0/323830343a353833343a383030303a3a2f33332d3333203d3e20323638313133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5834:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         60:5f:96:7e:af:3b:49:59:a2:ff:f3:d4:85:6e:df:0a:75:25:
         83:6d:1e:46:85:db:1f:1a:05:90:e4:83:d8:ce:fc:10:e6:fa:
         66:ce:21:f5:6c:13:89:f5:55:32:f7:e8:01:0a:56:9d:7a:f0:
         00:b7:a0:aa:60:f8:9b:d6:6c:00:b0:51:26:76:fa:10:91:12:
         9e:bf:ae:84:71:47:de:f8:e1:17:5b:95:d8:d3:62:44:29:5e:
         29:0f:8c:83:68:33:23:bd:0a:61:c3:bc:df:07:d5:1f:ea:b4:
         14:22:db:d5:c8:78:c3:d9:fa:05:7e:8b:f6:e2:58:5e:f4:2f:
         5f:6d:ba:4d:19:84:a3:09:bc:e5:42:32:59:9c:bf:10:8d:bb:
         69:ad:c4:5e:a4:be:7d:57:1b:0e:e4:2a:4c:81:bd:90:3c:4f:
         f9:45:73:aa:c6:8b:92:8e:1d:6e:e0:3f:d0:40:ff:30:eb:e3:
         1d:ca:2b:4e:47:d8:15:68:13:6e:04:05:4c:d5:98:b5:04:84:
         92:74:d9:0f:a3:9f:39:8b:f2:5f:93:d4:9e:17:17:cc:b6:ae:
         8a:70:4b:20:8c:2b:0b:14:41:34:2f:58:96:aa:45:34:24:74:
         56:47:42:f2:65:8b:53:5b:3c:80:17:c7:3e:d1:19:d1:75:e1:
         13:d6:33:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:29:16 2025 by rpki-client