Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3h976ZbRYcTTieSueVCACFLGDmREDD3CxhjCHQTLeQXw/0/323830343a343533343a383030303a3a2f33332d3333203d3e20323636393131.roa
File:                     323830343a343533343a383030303a3a2f33332d3333203d3e20323636393131.roa (raw, json)
Hash identifier:          74fFl3Ryv+TNwxl4gSorRMpHne/XlOfi6BpaLIk1x0A=
Subject key identifier:   20:FE:99:A0:6D:52:20:6A:CA:12:30:F8:9B:07:00:F8:C1:86:41:CA
Certificate issuer:       /CN=2970A36B0D430502A569554FE4F85E73508EA7CF
Certificate serial:       26DA2798B18E84CAB0C5007FD5A2AB2842A7A073
Authority key identifier: 29:70:A3:6B:0D:43:05:02:A5:69:55:4F:E4:F8:5E:73:50:8E:A7:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2970A36B0D430502A569554FE4F85E73508EA7CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3h976ZbRYcTTieSueVCACFLGDmREDD3CxhjCHQTLeQXw/0/323830343a343533343a383030303a3a2f33332d3333203d3e20323636393131.roa
Signing time:             Wed 16 Aug 2023 13:49:40 +0000
ROA not before:           Wed 16 Aug 2023 13:44:40 +0000
ROA not after:            Wed 14 Aug 2024 13:49:40 +0000
asID:                     266911
IP address blocks:        2804:4534:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:da:27:98:b1:8e:84:ca:b0:c5:00:7f:d5:a2:ab:28:42:a7:a0:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2970A36B0D430502A569554FE4F85E73508EA7CF
        Validity
            Not Before: Aug 16 13:44:40 2023 GMT
            Not After : Aug 14 13:49:40 2024 GMT
        Subject: CN=20FE99A06D52206ACA1230F89B0700F8C18641CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a0:a2:58:17:46:c0:cd:80:37:cb:db:6f:58:
                    1f:7d:15:ed:aa:02:ce:37:2e:ff:ae:42:c9:87:44:
                    42:7a:35:29:77:4b:23:f7:e0:c7:09:83:9a:1b:0c:
                    5f:91:10:8b:fb:89:bd:15:90:ca:05:37:e7:c5:3c:
                    d9:b1:f2:7a:19:46:45:00:af:37:c1:ea:df:45:21:
                    46:38:a4:d8:06:b9:6a:84:d2:6c:79:1a:9a:f7:a3:
                    ad:75:f4:2d:f6:41:04:11:9f:78:a3:56:a0:1f:c0:
                    00:76:54:7d:a8:8c:8d:2f:4a:27:e3:de:83:90:b6:
                    8a:20:46:0f:0f:f9:bb:de:ee:d0:85:71:34:06:ae:
                    09:b8:61:40:e6:19:a6:8d:a9:66:f0:c7:22:d4:d2:
                    b8:02:84:e7:c3:25:02:c7:70:7c:01:40:03:03:c4:
                    5c:b5:3b:29:48:a3:21:e4:34:b2:fb:9a:e0:4a:ee:
                    79:3f:74:44:38:bb:19:d2:94:26:3e:d8:1f:58:48:
                    ee:94:e4:b6:0f:10:5f:0f:bd:50:65:f3:84:41:08:
                    83:f2:1a:6c:17:49:2d:2a:9e:a3:88:44:c8:02:b3:
                    3e:34:0d:b8:ef:63:9d:87:a7:94:90:5a:a5:53:2e:
                    aa:74:46:3b:39:ca:9f:de:80:c0:98:98:14:e1:48:
                    4c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:FE:99:A0:6D:52:20:6A:CA:12:30:F8:9B:07:00:F8:C1:86:41:CA
            X509v3 Authority Key Identifier:
                keyid:29:70:A3:6B:0D:43:05:02:A5:69:55:4F:E4:F8:5E:73:50:8E:A7:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3h976ZbRYcTTieSueVCACFLGDmREDD3CxhjCHQTLeQXw/0/2970A36B0D430502A569554FE4F85E73508EA7CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2970A36B0D430502A569554FE4F85E73508EA7CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3h976ZbRYcTTieSueVCACFLGDmREDD3CxhjCHQTLeQXw/0/323830343a343533343a383030303a3a2f33332d3333203d3e20323636393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4534:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         80:7e:09:36:81:1d:db:f0:39:e0:3e:64:31:fe:ed:25:74:17:
         40:d7:c6:e4:0b:36:02:9b:d0:91:c0:86:50:28:5e:7d:ab:f0:
         8b:f4:ad:61:75:b8:e5:c1:20:e6:31:31:a9:05:93:02:47:6c:
         52:72:91:df:69:c2:50:cb:b5:ad:9d:2a:e0:69:d1:fa:a2:19:
         da:d0:b7:a9:6c:c6:6e:97:d0:cb:2b:1c:b9:55:bf:50:11:08:
         71:09:dc:58:7b:58:d8:01:d1:02:88:65:40:30:9c:b8:4b:5a:
         63:98:b1:75:0f:ce:10:29:cb:27:d3:2f:91:81:4f:4b:f8:81:
         14:81:cc:76:ff:57:39:8b:14:72:b4:05:9f:7f:3d:e6:9c:77:
         02:d1:85:4f:2f:40:15:db:ec:18:0c:44:47:45:cc:2a:28:e8:
         48:fd:62:f6:45:fc:8e:51:d8:2a:41:9c:e7:9d:cf:2b:1a:53:
         45:76:ff:2a:0b:9e:64:4c:be:81:42:44:da:81:9a:0e:94:8e:
         29:85:ce:e7:2e:80:7e:5d:4a:13:7f:ee:d0:42:47:43:7d:b6:
         6c:ba:dd:d3:2d:60:99:44:88:c7:b6:58:d0:17:e9:f7:ce:51:
         94:dc:fb:96:6a:b7:8d:aa:28:a0:e3:74:43:1d:63:d7:5a:76:
         c9:96:a5:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 21:18:08 2025 by rpki-client