Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HUXoMFP76a3b3TGtVHVKPD6A7hNjWQG1qDg9LN1RRop/0/323830343a356633383a3334303a3a2f34322d3432203d3e20323639303834.roa
File:                     323830343a356633383a3334303a3a2f34322d3432203d3e20323639303834.roa (raw, json)
Hash identifier:          j6P4uR0yQBkv8RAMRlNQAqPAkanqHemnIkzdXrWaH4w=
Subject key identifier:   FB:2E:F7:2C:1A:F2:16:6B:FF:C1:52:89:2A:8E:11:33:F9:C3:0E:D5
Certificate issuer:       /CN=FC91ABE2B9C46E0650B987CA9366CF084CEAAA96
Certificate serial:       369AD0D1D015E119386C8FC4E6B65198A2037EF2
Authority key identifier: FC:91:AB:E2:B9:C4:6E:06:50:B9:87:CA:93:66:CF:08:4C:EA:AA:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC91ABE2B9C46E0650B987CA9366CF084CEAAA96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HUXoMFP76a3b3TGtVHVKPD6A7hNjWQG1qDg9LN1RRop/0/323830343a356633383a3334303a3a2f34322d3432203d3e20323639303834.roa
Signing time:             Thu 17 Aug 2023 15:57:13 +0000
ROA not before:           Thu 17 Aug 2023 15:52:13 +0000
ROA not after:            Thu 15 Aug 2024 15:57:13 +0000
asID:                     269084
IP address blocks:        2804:5f38:340::/42 maxlen: 42
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:9a:d0:d1:d0:15:e1:19:38:6c:8f:c4:e6:b6:51:98:a2:03:7e:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC91ABE2B9C46E0650B987CA9366CF084CEAAA96
        Validity
            Not Before: Aug 17 15:52:13 2023 GMT
            Not After : Aug 15 15:57:13 2024 GMT
        Subject: CN=FB2EF72C1AF2166BFFC152892A8E1133F9C30ED5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:08:b5:42:10:f9:60:de:77:d6:5a:f1:85:34:
                    b7:6d:97:ec:39:3e:fb:b2:8f:5b:28:d8:52:7c:13:
                    91:d8:01:58:73:d0:05:5c:73:3a:5b:87:93:39:bb:
                    dd:38:55:84:ba:0a:93:e8:bb:12:ff:e1:c5:29:e9:
                    cf:73:75:24:e4:a0:db:b1:9b:fe:99:9a:e2:12:76:
                    b2:ba:eb:99:75:c3:38:21:58:cd:2a:31:a0:3f:1e:
                    2c:47:e7:1a:65:39:65:8b:c3:b4:bd:dc:61:f7:50:
                    9b:ac:d6:63:ec:f5:d0:58:49:37:f8:4f:dc:de:53:
                    3d:65:b5:53:57:95:40:b7:9d:a1:ff:76:90:45:bd:
                    ff:54:a2:64:ce:e9:f8:0e:2e:0a:42:2b:7a:78:cd:
                    7d:8c:51:ae:96:b4:fd:9b:91:19:ef:8c:ae:bf:02:
                    c8:89:94:1e:1d:f4:ca:ff:9a:0e:2c:40:ad:ea:25:
                    49:fa:4b:36:ea:ee:87:36:b0:63:f2:ce:c4:37:63:
                    48:49:60:aa:a3:9e:b3:5d:8a:77:d0:8a:07:67:05:
                    2f:4b:8f:89:0d:77:73:aa:98:e4:dd:ad:7b:4c:3c:
                    ae:17:1f:35:03:01:31:79:d4:3c:a8:f8:81:85:69:
                    4b:21:64:11:2d:83:74:8d:5d:d9:9a:4a:3d:78:a9:
                    45:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:2E:F7:2C:1A:F2:16:6B:FF:C1:52:89:2A:8E:11:33:F9:C3:0E:D5
            X509v3 Authority Key Identifier:
                keyid:FC:91:AB:E2:B9:C4:6E:06:50:B9:87:CA:93:66:CF:08:4C:EA:AA:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HUXoMFP76a3b3TGtVHVKPD6A7hNjWQG1qDg9LN1RRop/0/FC91ABE2B9C46E0650B987CA9366CF084CEAAA96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC91ABE2B9C46E0650B987CA9366CF084CEAAA96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HUXoMFP76a3b3TGtVHVKPD6A7hNjWQG1qDg9LN1RRop/0/323830343a356633383a3334303a3a2f34322d3432203d3e20323639303834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f38:340::/42

    Signature Algorithm: sha256WithRSAEncryption
         20:29:a1:b6:62:92:1a:18:c5:f2:67:58:63:b6:71:a3:94:98:
         e7:a1:97:59:82:b0:b7:14:6e:2a:ad:b9:4c:66:ee:49:75:8c:
         fd:5b:a4:3a:4f:7d:8c:91:3b:49:ea:6e:86:e3:ca:c5:64:1f:
         44:ec:96:e8:37:cb:87:c6:fd:ba:4e:58:1a:66:ba:2d:fd:bc:
         07:f9:02:c9:0e:6c:f1:f7:d1:c5:59:f9:6e:11:98:ca:81:e0:
         67:db:ae:56:a6:05:01:a7:8f:e5:cc:f4:58:a8:02:be:a1:51:
         1e:c9:77:0b:d8:0e:b6:83:fe:7f:47:c1:a7:1e:dd:ae:4f:24:
         4e:b0:9e:78:28:68:91:31:01:bc:b7:be:21:59:67:ab:93:3e:
         24:39:d0:6e:3a:91:d1:46:21:06:95:be:55:0c:0d:59:35:8b:
         5a:74:ec:2b:76:f5:61:51:c8:5b:c4:73:09:61:e4:57:b9:be:
         22:5d:3b:44:3d:97:73:99:1c:3d:53:70:fb:59:63:58:36:33:
         5d:7c:c3:2d:95:5f:7b:0e:45:98:85:b7:30:39:27:7c:e5:18:
         3c:50:0a:73:4d:ea:90:a1:68:fc:c4:8d:83:59:d9:7e:1a:47:
         4c:21:de:24:9a:50:65:66:11:e6:48:da:b7:93:00:94:96:0f:
         ad:67:c2:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 08:50:40 2025 by rpki-client