Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31303a3a2f34382d313238203d3e203532353830.roa
File:                     323830343a6366383a31303a3a2f34382d313238203d3e203532353830.roa (raw, json)
Hash identifier:          C392Pqo9STXq+HaOEVi8vIZO71pj3bBLCUEjnAtp3/8=
Subject key identifier:   47:8B:AE:1E:57:01:FD:11:06:75:11:3C:30:9C:A2:F5:B6:24:E8:75
Certificate issuer:       /CN=FF36173E097169BA044538B64258000B42FABD8C
Certificate serial:       7B9730A38BD39FC7B3B657637CA5C8CC67B83E41
Authority key identifier: FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31303a3a2f34382d313238203d3e203532353830.roa
Signing time:             Fri 14 Feb 2025 19:26:10 +0000
ROA not before:           Fri 14 Feb 2025 19:21:10 +0000
ROA not after:            Fri 13 Feb 2026 19:26:10 +0000
asID:                     52580
IP address blocks:        2804:cf8:10::/48 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:97:30:a3:8b:d3:9f:c7:b3:b6:57:63:7c:a5:c8:cc:67:b8:3e:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF36173E097169BA044538B64258000B42FABD8C
        Validity
            Not Before: Feb 14 19:21:10 2025 GMT
            Not After : Feb 13 19:26:10 2026 GMT
        Subject: CN=478BAE1E5701FD110675113C309CA2F5B624E875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:16:6c:e5:9a:13:6d:c6:45:ce:be:29:06:29:
                    90:36:35:42:10:7c:32:dd:73:82:90:c1:43:46:97:
                    79:f3:7d:57:43:52:a7:4e:3c:35:7d:30:6d:b0:11:
                    dc:aa:51:7c:ed:31:16:a5:75:8d:17:78:66:e4:24:
                    a9:ba:f4:13:64:b1:f7:45:68:d0:ed:0a:30:cd:cc:
                    b8:53:b0:e8:fb:2e:08:c5:df:45:47:5b:47:97:d2:
                    e5:01:15:06:15:4f:56:a6:58:d6:df:ba:14:15:05:
                    49:8c:81:ea:70:33:b3:c7:5c:7a:f1:24:e6:ac:ef:
                    2b:36:fd:6c:0f:d2:42:dc:4b:45:f0:76:14:d5:96:
                    19:ce:50:3c:fe:98:1d:14:10:5d:56:e3:3f:ad:d0:
                    0d:7b:83:2c:5e:96:b9:e9:cb:37:d2:4d:b3:3b:eb:
                    3e:76:e3:00:d4:2f:8a:c4:e0:65:f2:b1:32:36:d8:
                    cd:2a:6b:ed:93:52:7c:fc:09:d9:32:1d:e5:28:a4:
                    83:70:9d:34:3e:b2:03:a9:1c:16:6e:0e:46:4b:a8:
                    c8:86:ce:a0:a2:17:60:24:67:93:1b:b9:40:d5:5f:
                    f8:9b:24:a3:61:47:31:48:56:61:01:c1:9b:39:51:
                    df:7a:15:97:8f:43:aa:ef:28:e5:71:c2:15:74:cb:
                    5f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:8B:AE:1E:57:01:FD:11:06:75:11:3C:30:9C:A2:F5:B6:24:E8:75
            X509v3 Authority Key Identifier:
                keyid:FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/FF36173E097169BA044538B64258000B42FABD8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31303a3a2f34382d313238203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cf8:10::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:77:97:ce:6b:55:09:f9:15:b2:5d:da:7a:7f:18:3e:21:f5:
         a5:6b:17:67:ea:cd:cd:4b:0b:e1:45:5e:88:f6:b5:ea:a1:74:
         92:cd:36:72:db:5c:6b:1c:1d:cc:4f:7d:64:29:d4:2b:65:0e:
         44:2e:d4:5a:65:22:29:66:50:4d:d5:eb:0b:ab:70:0a:2c:4e:
         14:6c:ba:90:91:00:5c:2a:e3:34:0d:ac:22:84:43:d0:95:71:
         e1:b2:24:f5:c3:d0:78:e4:0a:3e:f0:51:e4:2c:25:15:32:2a:
         ac:41:d2:00:b8:b7:bc:65:a7:4a:36:ea:2d:48:02:f7:2d:40:
         cd:1e:47:a7:21:5c:75:bd:31:03:20:3f:8f:cb:18:3e:ba:9c:
         b0:75:f8:87:d9:10:e4:5b:c7:c7:85:0b:36:ec:2b:bf:ca:0a:
         aa:34:6d:e5:13:4e:ae:e2:43:8b:ac:44:be:32:b8:02:8f:49:
         5f:ac:59:65:e0:de:88:9b:fc:25:33:bb:d4:45:01:9f:ca:ca:
         65:46:a2:2c:a6:6c:08:09:b6:8c:4b:c1:36:1c:be:a0:3d:5a:
         dc:c3:1a:51:ae:6d:66:d3:cf:05:ef:63:89:08:b3:f1:d3:2b:
         46:84:5f:5c:00:9d:4f:3a:82:2b:7d:51:fc:bd:83:39:9f:4c:
         db:c7:17:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:23:41 2025 by rpki-client