Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/323830343a313165303a383030303a3a2f33332d3333203d3e20323633343435.roa
File:                     323830343a313165303a383030303a3a2f33332d3333203d3e20323633343435.roa (raw, json)
Hash identifier:          qxwYmuLMWcCC1qszfGh8B1wvAUB3Hsl8dAbWUd9Q2R8=
Subject key identifier:   3B:26:46:2F:43:83:12:39:03:35:FB:78:4F:B0:2C:E1:57:04:F0:D8
Certificate issuer:       /CN=F1076108B5AD0183155EEC96C47E216B36ED588E
Certificate serial:       1A5EC64F322B649C5A6F5291C16132B6FBD1E585
Authority key identifier: F1:07:61:08:B5:AD:01:83:15:5E:EC:96:C4:7E:21:6B:36:ED:58:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F1076108B5AD0183155EEC96C47E216B36ED588E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/323830343a313165303a383030303a3a2f33332d3333203d3e20323633343435.roa
Signing time:             Thu 04 Jan 2024 14:41:47 +0000
ROA not before:           Thu 04 Jan 2024 14:36:47 +0000
ROA not after:            Thu 02 Jan 2025 14:41:47 +0000
asID:                     263445
IP address blocks:        2804:11e0:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:5e:c6:4f:32:2b:64:9c:5a:6f:52:91:c1:61:32:b6:fb:d1:e5:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1076108B5AD0183155EEC96C47E216B36ED588E
        Validity
            Not Before: Jan  4 14:36:47 2024 GMT
            Not After : Jan  2 14:41:47 2025 GMT
        Subject: CN=3B26462F438312390335FB784FB02CE15704F0D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:13:e6:8f:9f:db:00:a5:05:46:b8:43:97:0d:
                    b6:61:d5:b3:9a:5f:ec:85:38:70:93:95:8d:8a:91:
                    87:5c:02:33:40:96:b0:da:e5:ba:79:95:ab:9c:ed:
                    65:aa:2a:01:45:a4:56:f7:06:14:8b:2a:4f:2d:c6:
                    cb:04:eb:82:48:3a:dd:10:31:9c:0a:3a:0d:b4:39:
                    6c:c9:08:80:c1:e2:ee:be:46:ee:af:ba:f1:27:fe:
                    82:be:2b:5b:76:1e:ae:36:13:63:6d:45:e8:2f:d5:
                    f2:40:75:f2:0a:53:4c:40:f9:39:96:bb:40:6b:a0:
                    ca:93:11:44:43:38:14:b4:ba:f8:e8:8e:f5:d7:67:
                    72:ec:1c:5a:2c:0a:d5:26:08:49:e9:93:30:a0:d7:
                    c1:fe:d1:da:df:91:5a:41:34:2d:d9:83:c0:ff:9d:
                    2e:72:39:4b:e8:71:b2:3f:e6:b8:e2:7b:03:3e:cf:
                    d6:ba:00:b3:28:9d:5b:a2:5c:f5:5d:b3:a7:77:29:
                    d5:b0:b6:30:6e:da:61:ec:a6:17:6a:c1:35:67:8e:
                    ac:4b:d4:8d:33:48:88:82:2f:ba:3e:b2:ce:aa:37:
                    c7:92:6e:24:46:ee:11:c3:26:9e:58:2f:b9:11:a6:
                    38:2a:75:d8:ff:af:5a:51:2a:13:4b:ee:06:ad:b9:
                    47:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:26:46:2F:43:83:12:39:03:35:FB:78:4F:B0:2C:E1:57:04:F0:D8
            X509v3 Authority Key Identifier:
                keyid:F1:07:61:08:B5:AD:01:83:15:5E:EC:96:C4:7E:21:6B:36:ED:58:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/F1076108B5AD0183155EEC96C47E216B36ED588E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F1076108B5AD0183155EEC96C47E216B36ED588E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/323830343a313165303a383030303a3a2f33332d3333203d3e20323633343435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:11e0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         8e:48:2e:94:a8:79:6a:55:29:ea:83:b0:2a:61:49:fa:18:e6:
         1d:85:05:55:f1:73:5d:4e:59:40:42:5e:0e:0d:1e:56:09:5f:
         69:88:18:79:18:3c:53:ab:0e:91:fd:24:c4:33:d8:1a:a3:78:
         7f:34:b4:5c:05:36:25:8d:9f:f8:38:90:8a:70:fb:d1:c0:67:
         8b:77:86:0e:de:43:9f:c5:76:02:7d:73:4c:68:f5:b5:40:c0:
         ac:09:41:2e:60:fd:aa:5d:04:28:4f:2d:24:5b:e1:0a:9d:d1:
         3b:41:d1:e5:9d:f7:d9:13:12:33:b8:5f:da:a8:e5:1c:36:12:
         60:57:af:87:7d:7b:70:13:8a:8e:65:7b:c2:37:f2:0d:56:ac:
         a9:b6:f9:21:39:d1:47:e2:5d:19:e6:26:c6:82:36:ea:ca:37:
         e0:23:22:20:b1:3b:a7:c9:c5:62:51:46:e0:89:75:27:dc:97:
         d5:eb:13:2e:5e:6e:e4:83:50:a0:ea:05:85:16:69:67:0c:87:
         5f:1b:e7:a9:a4:d5:49:6d:e6:84:4a:32:ca:79:fe:1b:2f:ec:
         6a:d5:85:5a:8f:ae:61:6b:4f:0f:15:1b:e5:50:e6:58:56:f1:
         e2:cf:9f:31:41:e6:6a:3e:38:49:57:eb:70:ad:55:93:8f:d7:
         56:eb:0c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:29:34 2025 by rpki-client