Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/323830343a346332303a3a2f33322d313238203d3e20323637333531.roa
File:                     323830343a346332303a3a2f33322d313238203d3e20323637333531.roa (raw, json)
Hash identifier:          O6PzAUdfcdAbBYEQ/tNuV5tFGPWG9J/+NxnIfIMj4k8=
Subject key identifier:   FF:37:7D:28:1F:91:D1:33:3D:F2:8B:39:EB:2B:A0:88:F4:1F:43:4F
Certificate issuer:       /CN=5092FA94D2896359852FB3091B53D54770445896
Certificate serial:       051BE52B5DDD01C28070842A724FAE216F8A13F4
Authority key identifier: 50:92:FA:94:D2:89:63:59:85:2F:B3:09:1B:53:D5:47:70:44:58:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5092FA94D2896359852FB3091B53D54770445896.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/323830343a346332303a3a2f33322d313238203d3e20323637333531.roa
Signing time:             Thu 30 Jan 2025 22:33:12 +0000
ROA not before:           Thu 30 Jan 2025 22:28:12 +0000
ROA not after:            Thu 29 Jan 2026 22:33:12 +0000
asID:                     267351
IP address blocks:        2804:4c20::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:1b:e5:2b:5d:dd:01:c2:80:70:84:2a:72:4f:ae:21:6f:8a:13:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5092FA94D2896359852FB3091B53D54770445896
        Validity
            Not Before: Jan 30 22:28:12 2025 GMT
            Not After : Jan 29 22:33:12 2026 GMT
        Subject: CN=FF377D281F91D1333DF28B39EB2BA088F41F434F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e7:ad:c1:eb:29:35:cb:23:d6:91:6f:0b:64:
                    bf:07:8f:dd:b4:58:e0:fd:5a:fd:48:9d:fb:9d:db:
                    7f:e4:ae:18:3b:36:c3:5f:2d:dc:c2:0e:f9:de:33:
                    9d:df:35:a8:68:54:45:8e:7b:f6:f7:a2:92:c0:1e:
                    e5:fe:18:c8:c6:3e:de:fc:9e:c7:26:53:45:bf:48:
                    b2:45:c9:61:c0:85:46:e7:9b:aa:dc:24:f4:22:62:
                    13:a9:79:0c:c7:97:d7:fd:5e:5a:66:63:21:96:49:
                    5c:b8:e4:38:f7:6e:b6:b9:72:7e:0d:d3:29:24:61:
                    41:53:cc:6f:01:f3:17:ea:1c:c6:bb:0f:e9:1c:b2:
                    8c:bb:e2:75:82:e5:59:52:dc:40:ba:be:a6:a8:da:
                    cf:bb:14:f9:7f:10:a3:12:72:7e:4c:9c:3f:d3:26:
                    72:a6:f2:e3:c9:fe:54:91:1f:49:79:7b:d4:90:5f:
                    35:42:61:bd:fc:2e:38:80:d1:5a:b4:20:e6:0c:21:
                    c4:fd:bd:8e:01:42:25:d0:19:95:12:dc:f0:2e:f8:
                    bb:74:f8:a8:e5:21:82:9f:98:2b:ab:c5:ff:50:63:
                    cb:00:bd:28:a0:f8:0a:9e:ac:ad:5d:da:d5:e7:c5:
                    3c:44:4d:05:98:b2:71:2f:95:8c:10:ab:70:55:69:
                    34:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:37:7D:28:1F:91:D1:33:3D:F2:8B:39:EB:2B:A0:88:F4:1F:43:4F
            X509v3 Authority Key Identifier:
                keyid:50:92:FA:94:D2:89:63:59:85:2F:B3:09:1B:53:D5:47:70:44:58:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/5092FA94D2896359852FB3091B53D54770445896.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5092FA94D2896359852FB3091B53D54770445896.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/323830343a346332303a3a2f33322d313238203d3e20323637333531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c20::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:86:63:62:dc:49:2e:08:03:b8:33:74:69:e7:46:0a:4f:63:
         76:70:df:d1:cf:6d:db:7e:b5:cc:20:63:60:42:e3:da:88:0a:
         48:ea:57:d1:ab:81:6d:0f:8e:bb:8c:6a:2c:3b:67:a6:e3:70:
         79:98:78:66:8d:21:6f:7b:23:29:b2:cd:0c:8f:b3:c9:a2:46:
         a5:f1:42:24:ee:59:3a:f9:31:4a:2a:09:66:c5:8a:9c:a6:49:
         97:2d:b7:66:23:88:4c:d0:f3:36:52:fd:d9:e8:03:12:29:1a:
         6e:96:df:98:97:9d:7e:07:a0:c7:0e:d3:e1:70:17:90:51:f3:
         1a:b2:ef:3f:f8:41:9a:e7:65:3a:82:65:84:ed:f0:2e:cf:ff:
         1d:ff:07:fb:aa:07:65:b6:15:a7:f0:90:e5:e4:3b:98:73:22:
         77:d9:b8:93:eb:88:c5:79:98:fd:31:77:18:2f:ca:cf:ab:84:
         fe:a0:6e:86:b9:b7:e8:7a:a1:eb:ae:6f:8e:20:99:4d:98:8f:
         e7:b8:fc:ea:76:16:17:4b:e1:26:46:ea:2a:07:46:fb:bf:a4:
         cd:3b:ad:5c:40:b4:16:49:fd:de:73:11:f4:49:48:ea:d3:19:
         bd:81:b6:d8:6e:5f:6f:d8:55:0c:67:14:95:dc:38:75:f0:07:
         f1:cf:3c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:15:53 2025 by rpki-client