Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqibKHfDfMftQJtyixcqNQf5fiouDuf4bfhZ4usQHcG4/0/323830343a343866303a663132373a38353a3a2f36342d3634203d3e203631353839.roa
File:                     323830343a343866303a663132373a38353a3a2f36342d3634203d3e203631353839.roa (raw, json)
Hash identifier:          cRedjSTF5vzGLo3KDJR2cSpET4lGSzhIwVE0gGI/xJs=
Subject key identifier:   80:FD:6F:F0:06:60:DB:CC:5B:1C:EC:5D:E9:A2:FF:48:4E:25:31:4E
Certificate issuer:       /CN=644FDBBE4743E5D56B8A177FBF2E3251F42D92E9
Certificate serial:       0F8D10B1405D4417880FF6D8933A5EF11AC40894
Authority key identifier: 64:4F:DB:BE:47:43:E5:D5:6B:8A:17:7F:BF:2E:32:51:F4:2D:92:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/644FDBBE4743E5D56B8A177FBF2E3251F42D92E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqibKHfDfMftQJtyixcqNQf5fiouDuf4bfhZ4usQHcG4/0/323830343a343866303a663132373a38353a3a2f36342d3634203d3e203631353839.roa
Signing time:             Tue 21 Mar 2023 13:29:52 +0000
ROA not before:           Tue 21 Mar 2023 13:24:52 +0000
ROA not after:            Tue 19 Mar 2024 13:29:52 +0000
asID:                     61589
IP address blocks:        2804:48f0:f127:85::/64 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:8d:10:b1:40:5d:44:17:88:0f:f6:d8:93:3a:5e:f1:1a:c4:08:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=644FDBBE4743E5D56B8A177FBF2E3251F42D92E9
        Validity
            Not Before: Mar 21 13:24:52 2023 GMT
            Not After : Mar 19 13:29:52 2024 GMT
        Subject: CN=80FD6FF00660DBCC5B1CEC5DE9A2FF484E25314E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b3:cd:9e:49:ec:af:08:74:11:9b:90:0c:61:
                    d2:60:e5:0c:0d:a1:05:0a:2d:74:54:31:0d:3c:d5:
                    bb:50:ea:7a:d0:0b:9d:a0:2f:34:8f:d5:53:5f:19:
                    db:06:63:52:c0:dd:a3:d5:7f:73:65:35:fc:dd:f2:
                    aa:3b:58:b0:48:bf:98:3d:75:90:71:08:5e:c7:0f:
                    67:22:e8:3a:9b:02:32:48:fd:eb:42:3a:92:6a:9e:
                    47:84:e1:de:b3:30:9b:b7:90:51:32:be:9a:10:ff:
                    4d:50:26:7f:97:88:0f:7c:86:c3:06:5d:79:19:f7:
                    1d:04:c8:a7:44:a8:fa:cd:7c:29:74:1b:e8:83:20:
                    4f:c0:36:f5:d2:d6:ff:c2:6b:29:fe:a3:fe:53:77:
                    1d:d4:a5:f1:00:87:54:95:5e:10:e7:74:33:34:53:
                    45:63:75:74:82:32:1e:24:b4:33:82:5f:97:f8:a5:
                    bc:b8:d5:7a:d7:e0:99:42:b7:7a:95:9d:3e:36:29:
                    81:e2:59:78:d1:ce:41:4e:f1:df:41:07:3a:14:38:
                    b7:a8:20:2c:52:20:ed:6c:bd:18:da:ee:89:c2:3a:
                    4c:3a:f1:0b:02:ba:0c:11:6a:2d:fc:84:c0:53:ea:
                    1a:9f:13:d6:95:40:0d:ee:c8:05:96:a1:23:93:1b:
                    b3:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:FD:6F:F0:06:60:DB:CC:5B:1C:EC:5D:E9:A2:FF:48:4E:25:31:4E
            X509v3 Authority Key Identifier:
                keyid:64:4F:DB:BE:47:43:E5:D5:6B:8A:17:7F:BF:2E:32:51:F4:2D:92:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqibKHfDfMftQJtyixcqNQf5fiouDuf4bfhZ4usQHcG4/0/644FDBBE4743E5D56B8A177FBF2E3251F42D92E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/644FDBBE4743E5D56B8A177FBF2E3251F42D92E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqibKHfDfMftQJtyixcqNQf5fiouDuf4bfhZ4usQHcG4/0/323830343a343866303a663132373a38353a3a2f36342d3634203d3e203631353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:48f0:f127:85::/64

    Signature Algorithm: sha256WithRSAEncryption
         6c:1b:08:dc:99:bb:1f:e7:80:9b:19:22:72:f8:62:39:10:77:
         54:25:aa:88:02:cd:28:f6:8a:21:b6:b5:23:49:ad:6e:ed:6d:
         63:f4:26:17:07:20:d2:12:59:87:f7:b3:b1:8d:02:a2:df:53:
         a6:0e:28:1d:f5:0f:93:17:c7:b6:df:bf:c4:72:c2:dc:94:b4:
         00:15:95:ea:9c:b9:b5:fe:7f:2a:19:83:54:12:59:6a:38:7f:
         d3:35:bd:7c:4d:42:4d:c3:20:ca:5a:6b:53:9b:41:9c:fe:e3:
         9f:e7:31:db:f3:39:e3:c4:cb:92:54:a8:65:3a:e5:6b:79:ec:
         20:45:83:35:5c:7d:6d:93:71:de:6b:35:13:8b:45:54:0c:60:
         f2:54:b1:fc:91:25:3c:85:4b:51:08:01:f1:a9:35:d5:ee:b4:
         da:58:0c:c9:02:a2:b3:cf:28:ab:45:dc:b5:07:8a:0d:da:b7:
         7d:71:c7:0b:06:0b:e8:dd:4b:03:1a:40:af:60:9f:05:87:a8:
         33:d5:1f:25:ae:0d:c6:b0:0c:8f:fa:53:da:8d:f0:17:12:c9:
         4f:ad:0d:bc:ee:b6:50:cc:45:5d:45:04:85:76:f5:b3:7a:14:
         c2:c3:2b:1c:ea:0a:35:5a:f7:22:01:7d:60:00:97:08:94:55:
         ca:de:e9:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:43:09 2025 by rpki-client