Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31313a3a2f34382d313238203d3e203532353830.roa
File:                     323830343a6366383a31313a3a2f34382d313238203d3e203532353830.roa (raw, json)
Hash identifier:          9Gsj6HTHUsozR6sTP9Yupc4X3FecsL5CtfFf6G7DMQ8=
Subject key identifier:   39:C8:21:D4:8D:8B:29:A3:19:29:CA:B5:53:3A:04:DC:6E:F0:94:E2
Certificate issuer:       /CN=FF36173E097169BA044538B64258000B42FABD8C
Certificate serial:       013ECABC1D1DC70A0201C7476F5CCDA9112EF650
Authority key identifier: FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31313a3a2f34382d313238203d3e203532353830.roa
Signing time:             Fri 14 Feb 2025 19:28:50 +0000
ROA not before:           Fri 14 Feb 2025 19:23:50 +0000
ROA not after:            Fri 13 Feb 2026 19:28:50 +0000
asID:                     52580
IP address blocks:        2804:cf8:11::/48 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:3e:ca:bc:1d:1d:c7:0a:02:01:c7:47:6f:5c:cd:a9:11:2e:f6:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF36173E097169BA044538B64258000B42FABD8C
        Validity
            Not Before: Feb 14 19:23:50 2025 GMT
            Not After : Feb 13 19:28:50 2026 GMT
        Subject: CN=39C821D48D8B29A31929CAB5533A04DC6EF094E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9e:b0:6c:a2:0c:49:3f:e5:9e:ba:14:cc:de:
                    d5:d7:31:10:05:5f:e3:71:d4:29:bc:fe:10:d8:eb:
                    a4:e6:3e:ac:59:af:3f:99:ce:21:d8:06:35:a5:15:
                    38:c1:e5:04:7d:62:bb:42:33:f8:2b:b4:f0:29:e9:
                    a2:5b:24:dd:d1:23:67:06:78:5b:ba:ce:7d:70:cc:
                    33:0d:d5:bc:86:51:dd:18:00:60:38:33:50:ee:6d:
                    90:62:5d:84:34:2a:be:4d:9b:af:81:c5:0d:40:91:
                    08:ae:0b:1f:63:58:af:7a:75:05:06:5f:11:ba:01:
                    d3:c1:ee:c3:3c:b4:3f:3d:4b:a5:ae:80:67:a5:f0:
                    cf:b9:04:2a:d8:ee:e4:68:6c:1a:3d:c6:78:ec:07:
                    ab:e0:d5:7d:c4:a6:cc:b5:e9:36:c6:ea:ab:9e:dc:
                    a6:55:d4:7a:56:b1:c4:90:84:56:a2:e7:63:87:65:
                    aa:47:e2:c8:5f:5f:ef:71:bf:91:78:3b:40:bd:9c:
                    8c:f1:48:fa:2a:03:c4:da:c4:3b:2d:00:85:ad:87:
                    08:18:c0:62:92:05:77:39:18:c8:1e:43:bc:1d:d1:
                    12:45:bd:17:92:26:3a:6d:56:1c:cb:e8:a3:51:76:
                    f5:9e:c2:42:a1:c1:f0:dd:51:e2:0a:ee:92:3a:80:
                    ad:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:C8:21:D4:8D:8B:29:A3:19:29:CA:B5:53:3A:04:DC:6E:F0:94:E2
            X509v3 Authority Key Identifier:
                keyid:FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/FF36173E097169BA044538B64258000B42FABD8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31313a3a2f34382d313238203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cf8:11::/48

    Signature Algorithm: sha256WithRSAEncryption
         a8:25:40:1d:1c:bb:1c:ff:cc:0c:9c:eb:e1:8f:6d:87:e8:74:
         8f:b0:b8:07:f5:29:c6:7e:7d:9e:1e:d2:cb:ed:dc:c5:35:42:
         a1:62:66:62:79:dc:e3:96:71:8f:5a:d1:c1:4a:df:70:2f:8f:
         5b:b7:e4:93:c5:0f:c9:ed:2e:53:0b:87:d0:03:ff:1b:ef:42:
         f7:64:eb:92:a8:c3:b6:bf:d1:91:3f:92:d3:4c:39:6b:47:72:
         67:af:2c:35:2d:05:b6:33:ac:18:9d:c7:80:a3:ae:77:f7:a8:
         97:7a:17:3e:a3:7c:07:d2:9c:95:72:87:4d:4e:af:1d:ee:20:
         32:c1:d4:27:33:39:09:e0:33:3b:16:0c:92:91:0b:1a:41:dc:
         4a:48:3c:d2:49:9e:64:f2:18:e0:33:71:c3:c6:b8:ab:b7:51:
         3e:ac:aa:08:90:e4:e5:a7:2f:14:f3:05:28:ee:ee:59:42:bf:
         c7:0f:04:1c:81:f3:6b:ab:73:c3:27:6d:83:aa:4c:b1:6d:bf:
         1e:6a:ce:78:59:97:18:e6:71:60:7c:4f:d5:ea:0e:45:22:44:
         63:3a:22:ce:8e:a7:16:5e:66:5f:61:a9:6d:3e:3a:71:b8:1f:
         f8:9d:04:22:b6:03:64:0e:95:8e:be:64:38:0d:2b:ea:45:76:
         d0:7f:e5:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:17:52 2025 by rpki-client