Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a323a3a2f34382d313238203d3e203532353830.roa
File:                     323830343a6366383a323a3a2f34382d313238203d3e203532353830.roa (raw, json)
Hash identifier:          Z6GOu8wX9Z95xVqfK2YfJRI/IzkyorQANnZunT9yZuc=
Subject key identifier:   88:02:27:FA:70:9A:AE:3B:0D:8E:D4:17:D6:AA:3B:76:C9:48:D2:7A
Certificate issuer:       /CN=FF36173E097169BA044538B64258000B42FABD8C
Certificate serial:       0D2888766BFD3023B50E9A86E932C066082721BF
Authority key identifier: FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a323a3a2f34382d313238203d3e203532353830.roa
Signing time:             Fri 14 Feb 2025 19:28:41 +0000
ROA not before:           Fri 14 Feb 2025 19:23:41 +0000
ROA not after:            Fri 13 Feb 2026 19:28:41 +0000
asID:                     52580
IP address blocks:        2804:cf8:2::/48 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:28:88:76:6b:fd:30:23:b5:0e:9a:86:e9:32:c0:66:08:27:21:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF36173E097169BA044538B64258000B42FABD8C
        Validity
            Not Before: Feb 14 19:23:41 2025 GMT
            Not After : Feb 13 19:28:41 2026 GMT
        Subject: CN=880227FA709AAE3B0D8ED417D6AA3B76C948D27A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ae:48:a0:b9:bf:4e:d1:71:b8:b8:3a:39:f7:
                    0a:30:e3:72:65:b1:2b:7c:0d:8b:ea:4c:d2:4f:1a:
                    22:66:20:04:19:57:ca:dc:03:12:90:fa:2b:a4:93:
                    9c:b8:cb:e6:da:21:af:e5:62:5f:ac:42:78:ee:f7:
                    9d:77:e5:c2:7c:8a:df:6d:97:9e:76:ad:1e:98:ea:
                    96:42:a3:43:0f:65:2a:5e:bf:84:98:ed:c9:57:f5:
                    d8:72:4d:fd:49:3b:60:a5:e9:dd:cb:e5:ae:78:d0:
                    b1:54:b3:c0:4a:13:b2:06:31:29:1e:cd:c8:73:cd:
                    e8:88:9c:4b:ec:71:0c:23:0a:1c:92:f2:47:bd:64:
                    72:e3:e8:ee:b8:c9:fc:cf:aa:e5:1c:fc:54:3e:ab:
                    56:4e:7b:38:0d:3f:28:50:1c:36:94:d6:74:39:a1:
                    eb:17:15:37:aa:e8:ca:ed:5e:d3:47:d8:7a:f0:8f:
                    f7:84:02:0b:3c:32:35:4d:c1:57:45:b3:25:1e:a5:
                    77:5f:61:13:95:d9:82:28:c8:18:7d:7e:f2:e2:71:
                    92:30:d3:f7:7f:69:ea:a6:c7:82:77:fe:e3:e5:ae:
                    7f:fc:4b:c2:e3:1b:51:91:6f:57:d0:2e:ed:82:b1:
                    f8:02:00:33:d4:ab:6f:3d:ca:79:84:9c:36:a4:99:
                    c4:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:02:27:FA:70:9A:AE:3B:0D:8E:D4:17:D6:AA:3B:76:C9:48:D2:7A
            X509v3 Authority Key Identifier:
                keyid:FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/FF36173E097169BA044538B64258000B42FABD8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a323a3a2f34382d313238203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cf8:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         8e:63:13:20:13:36:ab:2f:a7:fa:b2:8b:dd:cd:92:b3:a5:9f:
         b5:0f:a8:f1:92:2a:6b:c2:b8:e9:19:7d:98:db:e7:5e:fa:5d:
         a3:46:0e:dd:b4:4a:98:98:56:eb:7b:c2:76:69:64:a0:5c:f3:
         4b:44:aa:e8:41:9e:ca:a4:18:35:02:69:b1:15:07:e2:d0:96:
         8c:c0:32:1d:6c:fa:ec:aa:7a:8e:13:9b:17:e4:9c:3f:cf:08:
         3c:f2:fa:ba:86:92:4f:cb:89:21:10:b5:b5:96:76:5a:70:7a:
         ad:4b:69:7b:ce:7e:6c:90:ae:5f:9f:9e:63:b7:b1:f5:7c:7a:
         29:35:59:4a:1c:ab:ec:10:34:26:cf:8a:c3:bb:a2:59:88:11:
         97:4f:78:60:e7:5d:f2:2c:d3:b6:1f:ef:89:9e:92:fb:98:96:
         13:2b:96:e1:d2:2e:10:38:9c:2b:fa:1f:73:01:84:45:e3:40:
         ba:2d:53:4a:14:cd:43:4e:72:c3:2d:21:af:84:f4:78:15:87:
         e6:60:da:e3:03:5c:30:bf:4f:ae:31:5a:5e:6e:66:79:4f:d1:
         fd:fb:43:46:bf:31:3b:05:fc:a7:e1:bf:c7:37:47:83:17:69:
         32:0b:94:33:5f:5d:32:83:ec:05:75:47:f7:3e:85:be:e4:d0:
         d1:f3:8b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:22:17 2025 by rpki-client