Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a313a3a2f34382d313238203d3e203532353830.roa
File:                     323830343a6366383a313a3a2f34382d313238203d3e203532353830.roa (raw, json)
Hash identifier:          OMDC9vWVroF7gDbKsWTiP4xKcBlGwXBbnUR4XjQ0VEo=
Subject key identifier:   9C:96:29:A0:56:9E:CA:4A:6D:25:86:9A:9D:51:77:5C:2E:E4:1E:1D
Certificate issuer:       /CN=FF36173E097169BA044538B64258000B42FABD8C
Certificate serial:       70D52FF0EC770C24886A97EABD461EC4A2AA6D0F
Authority key identifier: FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a313a3a2f34382d313238203d3e203532353830.roa
Signing time:             Fri 14 Feb 2025 19:28:33 +0000
ROA not before:           Fri 14 Feb 2025 19:23:33 +0000
ROA not after:            Fri 13 Feb 2026 19:28:33 +0000
asID:                     52580
IP address blocks:        2804:cf8:1::/48 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:d5:2f:f0:ec:77:0c:24:88:6a:97:ea:bd:46:1e:c4:a2:aa:6d:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF36173E097169BA044538B64258000B42FABD8C
        Validity
            Not Before: Feb 14 19:23:33 2025 GMT
            Not After : Feb 13 19:28:33 2026 GMT
        Subject: CN=9C9629A0569ECA4A6D25869A9D51775C2EE41E1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:8b:6e:90:fa:48:f2:4d:b0:b1:09:38:07:7c:
                    65:60:58:90:30:d0:14:67:b9:2d:22:0d:1c:af:0a:
                    26:fa:04:e6:c7:97:a9:4e:5d:bb:1b:3f:a7:9b:d6:
                    e9:f0:cd:33:0e:d3:ff:25:4a:92:de:ac:66:d9:f2:
                    bb:62:a8:f7:65:23:9a:cd:ab:54:da:70:06:00:55:
                    29:8c:43:7e:ca:91:13:8a:93:4a:de:7c:e8:26:17:
                    86:a7:b0:39:e4:83:84:c1:2f:4b:60:3c:72:5e:bb:
                    f2:19:28:86:30:90:70:20:51:ab:1f:12:83:48:f9:
                    71:f2:02:1a:7d:21:9a:a7:e0:26:89:66:02:cd:d9:
                    89:ed:70:17:ea:b7:ed:c8:54:d9:59:f9:64:db:d7:
                    bd:91:38:87:00:34:99:06:98:89:7d:92:20:40:f8:
                    b2:6a:bf:e1:12:37:d3:16:8a:7b:96:01:1b:4e:20:
                    46:b6:6f:d8:00:a0:20:fa:bb:4c:82:75:48:c7:c3:
                    b9:1f:1a:d3:1d:8a:65:d7:a7:9d:df:d1:21:c5:59:
                    0d:cc:0b:83:1a:29:00:28:09:82:c3:2f:7f:9a:e5:
                    76:7b:55:8e:48:b9:98:5a:fb:ce:98:08:49:d8:93:
                    53:af:86:45:ab:bb:27:5f:a0:10:dc:df:54:34:c4:
                    24:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:96:29:A0:56:9E:CA:4A:6D:25:86:9A:9D:51:77:5C:2E:E4:1E:1D
            X509v3 Authority Key Identifier:
                keyid:FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/FF36173E097169BA044538B64258000B42FABD8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a313a3a2f34382d313238203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cf8:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:c1:c1:15:23:42:8f:c5:a3:9b:0c:ce:c7:e5:2d:e6:04:cd:
         5a:8c:91:d5:3c:94:91:96:be:72:2f:e7:69:5b:9a:f5:bb:28:
         3d:8e:d9:27:29:5d:b6:cf:03:34:8a:7b:8b:d6:e8:0a:79:84:
         31:36:cb:99:31:1e:d3:3a:2e:d5:7f:9c:de:8d:ee:49:07:c0:
         9e:ea:db:4f:08:89:de:6c:fc:1b:09:17:31:bf:20:69:74:8a:
         31:7b:6d:f3:8d:bf:d3:d7:6c:f5:dc:73:8c:c1:89:5e:c2:e7:
         ce:0e:99:35:f1:f8:0e:da:19:d5:84:09:f4:7b:8c:ee:b4:db:
         43:09:8d:d2:3c:c5:6a:79:8f:90:df:b7:b2:04:b1:d8:44:04:
         d1:86:18:53:57:ee:c2:b8:e4:2a:73:20:49:52:ce:80:ef:be:
         7f:7a:e1:50:e5:b7:a2:04:a6:be:9c:29:0c:b5:4f:06:c5:36:
         a7:23:ba:2a:8e:78:13:20:9b:91:d1:92:45:b3:fb:11:e6:ae:
         bf:3f:c6:f7:28:64:a8:7b:55:f3:48:8e:03:3e:dd:a5:79:d7:
         a9:b7:fa:df:ee:24:aa:b2:43:73:c8:e8:2e:7e:13:03:9e:06:
         bd:c1:a7:b0:f3:94:3e:3a:37:f8:49:21:9f:02:71:f8:cf:d5:
         8c:75:1a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:18:20 2025 by rpki-client