Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a333a3a2f34382d313238203d3e203532353830.roa
File:                     323830343a6366383a333a3a2f34382d313238203d3e203532353830.roa (raw, json)
Hash identifier:          dvDWoiAfOvDwF8lauxQ36r/RLMmzQenaQDyiKIMi7DI=
Subject key identifier:   04:56:2A:DA:30:5A:78:96:61:4C:70:ED:45:60:B0:6D:1C:A4:99:70
Certificate issuer:       /CN=FF36173E097169BA044538B64258000B42FABD8C
Certificate serial:       198A05D792F01636A15BAF6E103C74389251384D
Authority key identifier: FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a333a3a2f34382d313238203d3e203532353830.roa
Signing time:             Fri 14 Feb 2025 19:23:23 +0000
ROA not before:           Fri 14 Feb 2025 19:18:23 +0000
ROA not after:            Fri 13 Feb 2026 19:23:23 +0000
asID:                     52580
IP address blocks:        2804:cf8:3::/48 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:8a:05:d7:92:f0:16:36:a1:5b:af:6e:10:3c:74:38:92:51:38:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF36173E097169BA044538B64258000B42FABD8C
        Validity
            Not Before: Feb 14 19:18:23 2025 GMT
            Not After : Feb 13 19:23:23 2026 GMT
        Subject: CN=04562ADA305A7896614C70ED4560B06D1CA49970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:d2:32:9b:56:9a:1e:4f:b0:18:c3:41:5e:74:
                    44:8e:1a:20:2c:fd:03:86:93:71:6e:51:6b:f9:76:
                    c1:aa:45:4f:da:bc:a0:ee:9e:5d:79:79:79:8c:01:
                    eb:1f:92:cf:54:7a:8a:90:e8:37:c5:54:4d:ac:01:
                    19:61:57:df:27:8b:d4:97:00:7f:bb:99:fd:35:cd:
                    28:68:bd:b6:c4:64:7b:e4:d7:39:34:d6:1f:af:d4:
                    3a:4a:9f:d9:2c:76:d3:44:c1:f3:80:27:15:4c:e5:
                    03:ee:a9:00:34:56:be:aa:0f:30:32:c6:3e:91:8e:
                    e0:9f:ed:c2:46:43:a8:6a:03:02:f0:1e:af:da:1f:
                    af:b7:4b:fb:94:3b:ff:f5:8d:a2:cd:d2:d1:05:2f:
                    98:7d:d1:6c:0a:94:2f:62:f8:f6:34:09:dd:f5:6f:
                    d8:5b:bf:2f:93:d2:7b:4c:63:83:c5:63:27:b5:8d:
                    fc:66:50:2f:84:b8:b8:b9:90:05:d5:79:78:c4:68:
                    e4:62:74:15:8b:63:2c:a7:d6:0e:79:aa:1b:c3:21:
                    e6:a0:47:dc:99:b7:66:93:f8:17:b0:a3:37:ea:95:
                    ba:63:c4:61:be:f0:a1:d1:46:19:af:f1:6e:b8:78:
                    ce:70:de:f6:a4:7c:75:44:e2:16:d3:4a:cd:fb:32:
                    f4:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:56:2A:DA:30:5A:78:96:61:4C:70:ED:45:60:B0:6D:1C:A4:99:70
            X509v3 Authority Key Identifier:
                keyid:FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/FF36173E097169BA044538B64258000B42FABD8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a333a3a2f34382d313238203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cf8:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         2c:92:a7:bf:0f:20:b3:46:35:81:be:f2:88:8b:8b:99:f5:be:
         b9:5f:d0:4b:15:4e:4c:37:65:81:3d:1d:cf:7a:01:db:65:1c:
         59:b0:a9:73:25:9e:84:83:71:58:4e:29:ce:49:31:8c:c2:85:
         42:d0:18:d0:91:60:29:a3:cd:53:0c:56:e3:92:7c:d1:c8:98:
         bf:c8:f4:9f:ca:f7:68:8e:3e:1f:8d:69:0d:88:05:1d:aa:24:
         2e:45:c8:24:bf:9c:99:3e:e2:5f:ef:13:5d:7a:76:f6:c3:a5:
         07:37:e4:a2:fd:af:0a:6e:d5:80:41:e0:a3:7c:d7:b0:46:75:
         19:5a:20:86:b1:c0:ab:79:48:0e:54:8a:cc:b6:28:dd:aa:49:
         5d:d2:c0:fd:e7:3c:b2:ee:cf:c8:1f:45:ba:a0:57:6f:6b:b1:
         2f:3d:61:9d:b4:08:71:6f:89:cd:40:44:3e:cc:5b:59:08:45:
         b1:6e:7b:74:12:d4:d9:d7:c3:1e:64:87:5a:01:bd:a8:89:ce:
         23:65:f9:bc:9a:d6:1e:0d:85:4d:59:1d:8d:a2:f3:93:5b:09:
         26:be:c5:4a:46:ee:b2:95:b9:9c:ad:d5:5c:ef:16:ef:99:3b:
         46:cd:55:4a:4d:f7:07:5a:f3:7c:3f:e8:5d:1d:79:73:e9:72:
         bc:40:22:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:46:21 2025 by rpki-client