Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31343a3a2f34382d313238203d3e203532353830.roa
File:                     323830343a6366383a31343a3a2f34382d313238203d3e203532353830.roa (raw, json)
Hash identifier:          HUnBmh8q0UrU2XY1beCsOjvMxIDPGgtFI50Bb56EmM4=
Subject key identifier:   4A:9D:7E:AF:E4:9A:51:62:1B:13:37:C3:EF:FA:74:2B:29:11:3D:81
Certificate issuer:       /CN=FF36173E097169BA044538B64258000B42FABD8C
Certificate serial:       47BA0BD92E602BAB795435920C5436986EE78EE8
Authority key identifier: FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31343a3a2f34382d313238203d3e203532353830.roa
Signing time:             Fri 14 Feb 2025 19:26:35 +0000
ROA not before:           Fri 14 Feb 2025 19:21:35 +0000
ROA not after:            Fri 13 Feb 2026 19:26:35 +0000
asID:                     52580
IP address blocks:        2804:cf8:14::/48 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:ba:0b:d9:2e:60:2b:ab:79:54:35:92:0c:54:36:98:6e:e7:8e:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF36173E097169BA044538B64258000B42FABD8C
        Validity
            Not Before: Feb 14 19:21:35 2025 GMT
            Not After : Feb 13 19:26:35 2026 GMT
        Subject: CN=4A9D7EAFE49A51621B1337C3EFFA742B29113D81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:96:c7:3e:66:5d:67:d0:6f:42:c2:47:f5:a0:
                    b2:63:01:4e:72:35:b8:80:f8:e8:61:e9:31:96:6d:
                    82:0a:dd:e2:d5:c5:0b:3b:1e:a9:21:96:cf:44:c3:
                    76:bc:8c:82:af:18:51:9e:90:90:a3:00:7d:5f:0a:
                    73:b0:f1:f0:b3:a7:3d:49:50:fc:79:66:8c:f7:f6:
                    2b:b5:dd:c0:80:27:99:14:8d:38:af:46:e2:a4:8c:
                    e0:2f:a4:4b:49:42:27:dc:de:75:1b:6c:4a:69:fd:
                    30:a0:1a:73:55:e0:81:66:2e:23:07:d9:df:2e:69:
                    d7:c5:e5:d1:6a:6b:a9:62:47:95:d0:26:d6:37:71:
                    6b:e0:9f:71:96:0e:a7:2e:88:5d:38:56:a0:5d:e9:
                    13:b7:30:cc:3b:24:c9:40:10:96:81:1f:43:84:30:
                    7d:34:10:ba:01:96:c7:dd:3c:3e:f2:85:d6:e2:03:
                    78:c1:e0:1e:7c:f8:20:c5:91:a7:b3:9b:85:56:76:
                    3a:42:c1:0e:8c:29:1a:51:f2:19:51:cc:8a:d5:da:
                    db:6f:b1:a7:44:da:d2:76:34:04:41:0e:de:b7:6f:
                    d8:6e:10:36:f7:e3:e2:ca:d6:f3:07:6b:82:a2:9c:
                    5f:61:54:36:e6:b3:6a:51:47:62:5b:1a:47:1a:03:
                    71:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:9D:7E:AF:E4:9A:51:62:1B:13:37:C3:EF:FA:74:2B:29:11:3D:81
            X509v3 Authority Key Identifier:
                keyid:FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/FF36173E097169BA044538B64258000B42FABD8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31343a3a2f34382d313238203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cf8:14::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:17:41:35:83:1d:c1:91:93:12:63:42:c9:31:6d:13:12:9d:
         6b:5e:3c:03:02:87:83:e3:cf:ad:0a:a5:02:df:d2:2d:2e:f6:
         59:1f:f3:68:d6:c9:59:1a:12:55:ad:9d:3f:24:5e:59:f3:75:
         01:03:82:4f:2d:37:f4:96:80:bd:0c:7d:8b:c2:9c:ab:9a:4d:
         21:df:d9:7b:81:16:09:c1:1b:b5:49:c0:f5:7c:0f:1e:d5:4a:
         d7:c2:c3:b3:3c:85:e7:01:b0:23:81:9d:91:0a:7a:c4:58:fb:
         2e:ad:7e:12:98:e8:de:aa:65:20:ff:6e:f8:e4:ed:42:f5:2e:
         f8:0b:29:2d:17:39:35:07:7f:b0:42:4f:5f:5c:54:55:61:ec:
         02:f1:70:4b:87:f8:77:9b:53:be:e4:ca:a6:40:5e:2b:03:1b:
         2a:2a:84:b3:1e:b7:9e:15:03:7d:22:5e:1f:64:df:18:03:30:
         7a:f5:26:a1:c0:16:7d:cd:06:75:71:0e:25:0a:cb:48:95:5a:
         c2:47:67:c4:a8:14:56:56:c3:33:14:b1:18:85:fb:7b:06:46:
         3e:f0:a1:75:54:62:e4:fb:da:cc:5a:c2:5e:f3:70:61:79:6c:
         cf:29:7b:dd:2e:0b:9e:e6:b7:60:cb:c2:fa:4d:62:38:81:ce:
         0d:d1:6b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:18:59 2025 by rpki-client