Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31383a3a2f34382d313238203d3e203532353830.roa
File:                     323830343a6366383a31383a3a2f34382d313238203d3e203532353830.roa (raw, json)
Hash identifier:          0wGPaIKJabIeUqrAP7qVjOnmKgRpKwE/upvpS4Y0DMk=
Subject key identifier:   8D:C3:15:3D:E4:DF:4B:B7:91:32:C0:68:B9:48:9C:40:E2:FE:7A:B9
Certificate issuer:       /CN=FF36173E097169BA044538B64258000B42FABD8C
Certificate serial:       379343CF957531CC498A565EEE53CF97BC48FCD9
Authority key identifier: FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31383a3a2f34382d313238203d3e203532353830.roa
Signing time:             Fri 14 Feb 2025 19:27:00 +0000
ROA not before:           Fri 14 Feb 2025 19:22:00 +0000
ROA not after:            Fri 13 Feb 2026 19:27:00 +0000
asID:                     52580
IP address blocks:        2804:cf8:18::/48 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:93:43:cf:95:75:31:cc:49:8a:56:5e:ee:53:cf:97:bc:48:fc:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF36173E097169BA044538B64258000B42FABD8C
        Validity
            Not Before: Feb 14 19:22:00 2025 GMT
            Not After : Feb 13 19:27:00 2026 GMT
        Subject: CN=8DC3153DE4DF4BB79132C068B9489C40E2FE7AB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c4:81:bf:9f:24:1c:89:83:66:44:0d:ab:32:
                    71:57:0d:c6:43:db:35:ff:09:9c:35:11:78:d8:f2:
                    5c:8c:55:24:bf:74:d5:49:86:e0:22:f9:ea:77:a6:
                    e0:f1:23:39:fe:46:2b:37:cc:f0:ac:9e:42:fd:1c:
                    b2:2f:58:43:2f:7a:77:13:13:ce:d5:9a:34:4d:63:
                    90:78:c8:80:87:0b:d5:d1:bb:8c:88:b9:90:4f:9f:
                    11:68:5c:b3:8c:18:e5:74:e7:7d:69:ac:57:05:3e:
                    0a:70:d3:48:54:7e:5a:af:c1:85:61:66:5b:4a:73:
                    0b:7b:6c:c5:4a:6f:50:94:5d:0b:8a:6f:62:f8:d9:
                    0a:ae:c7:d7:64:d7:b2:03:56:d1:d6:c7:e1:9f:93:
                    53:ac:aa:74:fc:e4:94:4a:0b:b0:e1:0c:78:fe:3a:
                    8d:f1:1e:3e:4b:a4:66:98:ad:72:b9:b1:07:eb:32:
                    1f:89:21:ae:87:09:49:0a:fd:ea:6f:6f:0a:cd:dd:
                    f0:40:b3:03:a5:df:6a:96:34:e0:1a:6e:14:bf:8c:
                    b4:de:31:2a:f7:09:59:ff:96:21:78:7f:4e:b1:86:
                    23:85:96:9b:61:f3:e7:89:01:7c:71:7b:20:53:6c:
                    e1:2b:81:29:01:be:0f:0f:de:c2:e8:13:62:ad:53:
                    ad:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:C3:15:3D:E4:DF:4B:B7:91:32:C0:68:B9:48:9C:40:E2:FE:7A:B9
            X509v3 Authority Key Identifier:
                keyid:FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/FF36173E097169BA044538B64258000B42FABD8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31383a3a2f34382d313238203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cf8:18::/48

    Signature Algorithm: sha256WithRSAEncryption
         9e:f7:b9:55:3a:01:55:9f:67:cc:b9:a9:f0:30:20:d5:dd:b9:
         14:e4:4f:4a:79:17:e7:5f:ea:7a:56:fe:98:a2:51:34:37:eb:
         44:77:20:ab:b3:a5:f9:8b:2f:e6:3a:51:ba:29:11:50:e5:13:
         15:b3:33:ff:63:e7:34:d1:42:70:d1:4c:3a:e9:55:53:98:79:
         d0:3f:d5:17:07:8f:74:35:42:8e:44:40:32:c5:f9:0a:97:94:
         aa:dd:89:04:3d:80:63:0b:d1:4e:bd:ea:8c:a6:50:e6:0d:5e:
         71:00:91:ad:2d:01:49:d9:a1:68:07:e4:50:df:6b:49:a9:97:
         00:4a:0a:39:54:ad:3e:01:04:eb:84:fa:27:ac:56:8d:c7:77:
         69:b0:04:b8:76:58:29:5e:e1:8d:d6:c9:e8:1a:e2:c1:b1:d9:
         18:22:41:0e:13:55:5b:d0:05:36:15:a0:57:bf:dc:8e:4b:04:
         a3:e8:e3:af:85:8b:af:22:32:1a:4f:1a:e5:18:75:1a:54:1d:
         cd:ff:42:62:50:b7:d9:42:28:88:eb:ba:de:e5:f8:19:d5:2c:
         59:6b:4d:89:2b:19:2f:0d:75:ff:5f:90:f8:06:19:96:4d:ff:
         cf:28:46:3a:c8:13:a4:26:f5:a3:b5:bd:e4:60:69:2b:c4:d1:
         4e:a6:3a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:15:14 2025 by rpki-client