Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a633030323a3a2f34382d313238203d3e203532353830.roa
File:                     323830343a6366383a633030323a3a2f34382d313238203d3e203532353830.roa (raw, json)
Hash identifier:          UA4Pr6bazx9eny0GpWYGrHF1wH3jxsA5xiZvxct5OkM=
Subject key identifier:   CF:DA:9E:61:89:A3:99:E3:EF:FD:F7:6F:E1:FE:F1:83:11:CF:47:4D
Certificate issuer:       /CN=FF36173E097169BA044538B64258000B42FABD8C
Certificate serial:       0477339E0F61B246BF38FE04E98C02D5C686D178
Authority key identifier: FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a633030323a3a2f34382d313238203d3e203532353830.roa
Signing time:             Fri 14 Feb 2025 19:26:15 +0000
ROA not before:           Fri 14 Feb 2025 19:21:15 +0000
ROA not after:            Fri 13 Feb 2026 19:26:15 +0000
asID:                     52580
IP address blocks:        2804:cf8:c002::/48 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:77:33:9e:0f:61:b2:46:bf:38:fe:04:e9:8c:02:d5:c6:86:d1:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF36173E097169BA044538B64258000B42FABD8C
        Validity
            Not Before: Feb 14 19:21:15 2025 GMT
            Not After : Feb 13 19:26:15 2026 GMT
        Subject: CN=CFDA9E6189A399E3EFFDF76FE1FEF18311CF474D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:76:b7:b2:e0:e1:2b:c2:a0:7c:7f:d7:27:ef:
                    ac:94:7d:2f:01:78:bc:ad:2d:eb:09:ab:94:fb:6d:
                    7b:ec:5b:0a:ca:b6:78:56:d2:73:4e:cb:12:a0:be:
                    42:44:bc:65:c5:1a:f2:47:bf:36:dd:2f:a5:46:1a:
                    50:6b:06:62:72:61:34:4e:ee:04:ee:ee:09:0b:a5:
                    66:48:88:ff:64:f0:ef:05:9f:f2:4b:57:5f:05:e2:
                    6d:44:04:d6:f6:9a:f2:a9:bb:46:e2:a3:7a:e9:b6:
                    7e:bd:74:5d:66:f0:a1:f9:27:e4:bc:3b:c9:df:da:
                    9a:45:0f:4c:a0:e8:a0:34:15:20:0a:8d:00:b0:dc:
                    0b:33:fd:75:cc:1f:35:61:13:57:68:45:a1:b1:e2:
                    5e:60:82:48:be:5f:8a:01:ff:b9:16:57:73:22:35:
                    8d:0d:64:d3:a4:12:47:03:44:a7:3c:e4:d9:4a:3f:
                    43:4a:5e:49:dc:5d:cc:b8:db:00:61:5e:f2:e0:d5:
                    79:9e:2b:f7:14:06:f1:90:76:9e:1b:61:e3:87:23:
                    7b:e8:13:12:3a:63:36:41:8c:9d:22:a0:4a:0e:fa:
                    ca:eb:ba:11:d9:1b:8a:ce:c0:ee:7b:22:a3:54:b7:
                    f9:88:8b:fe:c4:1c:bf:52:70:87:13:fd:d2:cc:91:
                    41:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:DA:9E:61:89:A3:99:E3:EF:FD:F7:6F:E1:FE:F1:83:11:CF:47:4D
            X509v3 Authority Key Identifier:
                keyid:FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/FF36173E097169BA044538B64258000B42FABD8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a633030323a3a2f34382d313238203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cf8:c002::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:66:9c:10:a6:5d:d7:a4:4b:22:59:bd:3d:11:cc:35:c8:31:
         7a:65:fe:8e:7c:f9:68:8b:d7:7a:91:29:1c:10:1d:2c:1f:ca:
         ea:4a:37:ab:e8:de:dc:89:a7:4e:98:df:ce:57:00:7d:42:89:
         d1:50:2f:9a:1f:65:7b:8e:f6:05:fd:13:a7:ad:a9:4c:2b:4d:
         a3:12:87:e1:d5:7d:61:3c:86:bc:43:52:b6:16:07:21:51:07:
         5f:49:4a:bc:8a:91:8d:f4:b9:5d:c9:a8:41:bc:09:32:fe:ec:
         de:57:26:cd:7c:c6:9c:b7:0c:65:d9:e0:78:aa:71:9b:f7:be:
         48:2a:78:9f:df:7a:b8:f0:e8:56:c5:75:83:ac:e4:f5:64:8c:
         0b:5e:96:0a:a3:54:bd:28:c0:1e:92:6e:c1:41:fb:9e:4b:64:
         8a:b4:05:6b:b5:b6:ab:7d:a8:bd:d1:9e:38:ef:9a:05:e0:c4:
         22:ca:de:5e:b1:77:d1:09:e9:56:8c:d5:17:90:83:88:b9:4c:
         c6:6f:89:d4:e8:86:d0:34:88:eb:7c:3e:e9:a1:b1:24:77:68:
         50:a9:9f:bc:18:7a:c6:aa:61:18:cc:60:a8:50:53:43:4e:67:
         7f:2b:2f:02:6f:e8:ff:88:39:68:54:c9:ee:32:8d:1c:df:22:
         4b:07:4e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:54:26 2025 by rpki-client