Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a633030363a3a2f34382d313238203d3e203532353830.roa
File:                     323830343a6366383a633030363a3a2f34382d313238203d3e203532353830.roa (raw, json)
Hash identifier:          m5KdJsNLQcSWc8qM2o0VbbSNqJIhYFRAtYB8Ho7Jd08=
Subject key identifier:   D4:8E:E1:06:32:2E:E3:36:97:87:78:BF:B0:92:03:B3:BA:51:98:06
Certificate issuer:       /CN=FF36173E097169BA044538B64258000B42FABD8C
Certificate serial:       68D421C075DE0D86AF956BCE7357FD2E0ECE4F77
Authority key identifier: FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a633030363a3a2f34382d313238203d3e203532353830.roa
Signing time:             Fri 14 Feb 2025 19:28:06 +0000
ROA not before:           Fri 14 Feb 2025 19:23:06 +0000
ROA not after:            Fri 13 Feb 2026 19:28:06 +0000
asID:                     52580
IP address blocks:        2804:cf8:c006::/48 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:d4:21:c0:75:de:0d:86:af:95:6b:ce:73:57:fd:2e:0e:ce:4f:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF36173E097169BA044538B64258000B42FABD8C
        Validity
            Not Before: Feb 14 19:23:06 2025 GMT
            Not After : Feb 13 19:28:06 2026 GMT
        Subject: CN=D48EE106322EE336978778BFB09203B3BA519806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:fd:0c:77:2e:be:d9:ad:1c:c8:4e:b8:60:6d:
                    0f:4f:25:82:2c:b0:5b:cc:99:bc:d4:7a:8e:51:22:
                    9c:90:b0:79:2e:1a:ea:56:3b:25:51:c4:7c:b3:8c:
                    c2:f5:71:83:66:f3:71:d6:bc:3e:9d:c6:40:42:98:
                    f9:30:6a:54:b5:c2:15:19:1d:e9:b4:38:94:59:df:
                    ef:e9:3f:b2:0a:cb:cb:24:12:f7:fb:40:8e:d2:37:
                    87:3a:9f:5d:a8:08:2b:11:61:df:94:5a:09:e2:07:
                    06:9e:78:72:44:fa:7a:92:d3:69:34:b0:20:0a:f5:
                    25:d6:29:bb:3d:41:ab:a4:f9:19:3d:4b:cc:9f:97:
                    9e:47:dc:0a:39:6f:53:ad:55:32:df:b8:fc:f0:61:
                    1b:24:22:23:9e:01:e0:d4:42:a5:69:3c:4e:66:f0:
                    4e:c8:39:7e:ca:d8:b5:69:a0:a4:a6:6c:8c:17:50:
                    30:75:2c:d9:ab:29:3c:63:12:65:ce:51:c9:9a:77:
                    bc:25:9f:0c:0d:9c:66:84:cb:71:7a:a3:3e:3e:0f:
                    c1:6a:f5:b6:db:de:78:69:97:32:78:56:b4:f1:33:
                    c8:56:59:ba:a1:44:b8:ee:4b:cc:04:ee:2b:93:72:
                    9b:ad:4c:33:e4:d1:2a:ba:cf:06:e3:b8:b9:aa:2d:
                    f1:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:8E:E1:06:32:2E:E3:36:97:87:78:BF:B0:92:03:B3:BA:51:98:06
            X509v3 Authority Key Identifier:
                keyid:FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/FF36173E097169BA044538B64258000B42FABD8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a633030363a3a2f34382d313238203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cf8:c006::/48

    Signature Algorithm: sha256WithRSAEncryption
         a2:90:4d:e5:57:11:2e:1a:1e:bd:8f:e6:e6:dd:ed:e2:78:c2:
         fb:8f:e1:9c:c1:a4:92:76:eb:df:a4:32:af:22:90:38:c5:14:
         fb:95:c4:ff:6b:9f:78:8a:8a:53:dd:18:c4:3a:93:d0:1c:65:
         6e:f0:56:75:53:53:aa:a0:8a:b7:a1:78:0f:89:b3:d4:ae:30:
         c6:06:95:0a:5b:6b:72:5e:f9:04:10:54:3f:25:1f:70:3a:27:
         b4:ec:e6:f6:fe:64:28:70:d1:31:28:b7:2b:45:3b:ee:3f:94:
         74:c6:46:cf:72:a6:20:f6:93:5b:9e:e3:fa:7d:2f:5b:0f:41:
         0c:bd:c1:ef:0a:d7:bd:5e:13:1a:39:d0:e9:49:c7:01:f6:b0:
         5a:1b:2e:9f:32:20:7d:28:46:e0:21:9a:ec:96:90:54:01:13:
         5f:c7:47:97:af:68:fa:ef:06:1f:92:e7:15:7a:5d:49:2a:57:
         b8:05:d0:1e:e8:bb:82:62:95:ee:1a:f3:23:fd:c4:c1:e8:fb:
         74:ee:f9:96:6c:b1:64:c5:0c:fe:ad:c3:06:fa:5f:16:a0:8b:
         6a:43:62:93:02:64:6f:b4:e1:0d:59:a9:39:64:d7:30:40:1d:
         50:2c:b2:ed:3c:0c:ed:15:f2:4c:d3:da:cd:92:0b:aa:32:2e:
         a3:e7:c7:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:49:07 2025 by rpki-client