Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a653a3a2f34382d313238203d3e203532353830.roa
File:                     323830343a6366383a653a3a2f34382d313238203d3e203532353830.roa (raw, json)
Hash identifier:          +KzzfRC2bX1r3Wh0OvTSUhPDh2E6NLXmUWWx6bpP1K4=
Subject key identifier:   4F:42:2F:70:A7:F7:19:2F:CA:99:23:CF:92:AD:58:9E:16:BF:0A:EB
Certificate issuer:       /CN=FF36173E097169BA044538B64258000B42FABD8C
Certificate serial:       257397392AEBDFDB5F82F042EE0F8CD09BB8549F
Authority key identifier: FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a653a3a2f34382d313238203d3e203532353830.roa
Signing time:             Fri 14 Feb 2025 19:25:00 +0000
ROA not before:           Fri 14 Feb 2025 19:20:00 +0000
ROA not after:            Fri 13 Feb 2026 19:25:00 +0000
asID:                     52580
IP address blocks:        2804:cf8:e::/48 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:73:97:39:2a:eb:df:db:5f:82:f0:42:ee:0f:8c:d0:9b:b8:54:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF36173E097169BA044538B64258000B42FABD8C
        Validity
            Not Before: Feb 14 19:20:00 2025 GMT
            Not After : Feb 13 19:25:00 2026 GMT
        Subject: CN=4F422F70A7F7192FCA9923CF92AD589E16BF0AEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3a:ea:fb:86:2c:54:1f:ba:d5:dc:52:5d:1f:
                    17:72:b2:c7:82:03:57:c2:b3:21:03:e9:f1:c0:8d:
                    e1:dd:e3:cb:54:e6:a6:ed:d4:9e:68:75:53:f8:9e:
                    5e:aa:b3:44:3c:d8:37:3b:ca:e4:9e:f1:ef:f6:7c:
                    30:5c:e6:26:b5:70:49:6b:f6:76:94:29:6c:a2:4a:
                    d4:57:9c:87:f5:8a:05:11:eb:30:4a:20:67:20:01:
                    7f:c6:35:f5:bc:68:cc:34:e1:f6:ee:83:f7:c0:be:
                    8e:c9:4e:22:e6:9c:d9:2d:b8:cc:fd:5c:6f:f1:ee:
                    b0:1c:bc:06:e1:24:1e:03:d5:50:a4:62:cd:b4:32:
                    2c:bf:08:e1:26:ed:02:3d:14:b1:0d:3b:a9:72:99:
                    be:7c:07:12:aa:79:36:9e:6a:3e:e8:f1:dc:09:2e:
                    1b:92:d7:eb:3e:e7:c9:2b:82:72:7e:c0:e6:cb:c7:
                    39:cd:a1:2b:07:59:d5:47:bf:dd:48:33:60:2a:45:
                    68:f5:0e:6c:7a:ac:47:c9:83:c0:2e:18:d0:e6:54:
                    be:0c:12:df:9b:8f:b4:3c:55:36:9a:9d:ec:96:c0:
                    ad:62:62:32:81:9f:82:b9:03:3a:7e:8b:61:c9:b3:
                    09:12:0f:a0:1b:6d:d4:a6:62:78:de:84:3e:24:f0:
                    dc:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:42:2F:70:A7:F7:19:2F:CA:99:23:CF:92:AD:58:9E:16:BF:0A:EB
            X509v3 Authority Key Identifier:
                keyid:FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/FF36173E097169BA044538B64258000B42FABD8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a653a3a2f34382d313238203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cf8:e::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:2f:ee:dd:eb:42:98:a0:8d:29:e6:22:9c:bb:0f:7b:7d:f0:
         cf:38:0d:f7:22:ce:9c:c8:aa:0b:7a:be:29:57:d4:15:f3:45:
         bb:e2:6b:06:8b:33:62:a6:f5:08:a1:94:4e:d2:7a:31:32:ab:
         8f:67:5b:29:d1:f4:db:a8:39:41:15:a5:ad:39:ab:c7:df:b2:
         ab:66:db:8f:78:b7:e8:26:77:ac:12:e3:01:8f:4e:cc:02:ed:
         c4:fe:b8:d4:fa:95:01:15:23:43:d2:00:ce:21:76:f5:4d:c4:
         43:cd:84:44:6e:21:15:3f:e6:25:94:ac:92:f1:36:fd:20:5c:
         b1:5a:f9:9f:7e:22:c4:40:6b:e7:72:4c:59:bb:8e:4d:90:9a:
         08:2b:4f:4f:b8:8f:f6:e3:e0:c6:f0:30:f0:44:6b:a8:8c:34:
         b0:b8:1e:8a:69:2f:31:cd:9d:5d:73:96:6c:90:91:a6:03:12:
         e4:a5:be:94:1a:b3:2d:fb:df:01:23:0a:8e:e4:fb:f7:91:82:
         1a:10:60:9d:ef:c8:0a:13:46:78:8a:8e:62:6e:ed:e3:c9:40:
         f4:96:0b:8f:ba:36:d5:41:74:d2:96:92:32:c4:11:fa:08:88:
         cd:7d:0e:7e:74:8b:4f:b9:f7:ff:16:c2:58:31:a0:8f:2c:89:
         e8:13:04:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:18:15 2025 by rpki-client