Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BMUSYRu4t6eVwwmktEQjzGW4kjjXfFHnkTC1pTwZM7EF/0/323830343a316461633a3a2f33322d3435203d3e20323634333835.roa
File:                     323830343a316461633a3a2f33322d3435203d3e20323634333835.roa (raw, json)
Hash identifier:          BKZ5/+3rcYvd7vNFOcsTZuKWEQnxmV1UWBPDX903sYc=
Subject key identifier:   24:1D:A5:5A:24:9F:8E:EC:BE:6B:68:00:22:56:A4:82:CE:6D:95:BB
Certificate issuer:       /CN=4F8D0C704227A42DB2A4039E324000F4D79DFEF8
Certificate serial:       3E10C2EE18445B6C8218574099EFFDFC62037332
Authority key identifier: 4F:8D:0C:70:42:27:A4:2D:B2:A4:03:9E:32:40:00:F4:D7:9D:FE:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4F8D0C704227A42DB2A4039E324000F4D79DFEF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BMUSYRu4t6eVwwmktEQjzGW4kjjXfFHnkTC1pTwZM7EF/0/323830343a316461633a3a2f33322d3435203d3e20323634333835.roa
Signing time:             Wed 18 Oct 2023 17:42:49 +0000
ROA not before:           Wed 18 Oct 2023 17:37:49 +0000
ROA not after:            Wed 16 Oct 2024 17:42:49 +0000
asID:                     264385
IP address blocks:        2804:1dac::/32 maxlen: 45
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:10:c2:ee:18:44:5b:6c:82:18:57:40:99:ef:fd:fc:62:03:73:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F8D0C704227A42DB2A4039E324000F4D79DFEF8
        Validity
            Not Before: Oct 18 17:37:49 2023 GMT
            Not After : Oct 16 17:42:49 2024 GMT
        Subject: CN=241DA55A249F8EECBE6B68002256A482CE6D95BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9a:a6:2c:5f:18:00:4e:33:c1:50:9a:ea:71:
                    c7:3f:5f:7d:0d:63:b4:5d:79:80:10:3a:78:6f:b7:
                    c9:0c:8b:e4:78:e2:58:ac:d2:84:44:37:43:cd:eb:
                    06:ca:63:19:6c:6d:cf:6f:fd:1f:32:95:02:8a:33:
                    b0:6c:28:61:c3:c8:37:d0:a1:9f:13:a5:a6:15:42:
                    54:9a:bd:79:94:7d:d5:d9:df:c3:f2:8b:46:8b:02:
                    9a:7d:0d:3f:8a:bf:4a:4b:66:e2:f3:f8:66:5e:bc:
                    c0:e7:38:14:fd:62:1e:9e:75:27:c4:27:14:1b:9f:
                    4f:0d:89:4f:5a:fc:fd:01:12:4d:ce:cc:06:cd:14:
                    be:05:27:5b:cd:79:29:89:e6:06:0f:87:3a:ef:14:
                    b1:02:18:60:b2:cc:cd:0b:0a:ee:f6:88:b3:ce:a3:
                    54:00:90:63:49:0c:48:f2:57:f5:a5:14:32:31:cc:
                    5f:5f:58:19:b4:b7:73:3e:f2:da:5f:5e:13:89:ff:
                    8c:69:57:8a:f0:8e:b1:e5:ed:94:91:3b:2a:c5:76:
                    b7:52:b9:32:99:0c:78:b3:ef:f7:b1:b8:61:25:78:
                    d0:d8:6e:f0:1f:a3:88:04:79:f7:05:7c:19:72:f2:
                    ca:bd:9e:22:91:1f:67:22:bc:d2:d1:4a:50:b8:b5:
                    25:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:1D:A5:5A:24:9F:8E:EC:BE:6B:68:00:22:56:A4:82:CE:6D:95:BB
            X509v3 Authority Key Identifier:
                keyid:4F:8D:0C:70:42:27:A4:2D:B2:A4:03:9E:32:40:00:F4:D7:9D:FE:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BMUSYRu4t6eVwwmktEQjzGW4kjjXfFHnkTC1pTwZM7EF/0/4F8D0C704227A42DB2A4039E324000F4D79DFEF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4F8D0C704227A42DB2A4039E324000F4D79DFEF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BMUSYRu4t6eVwwmktEQjzGW4kjjXfFHnkTC1pTwZM7EF/0/323830343a316461633a3a2f33322d3435203d3e20323634333835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1dac::/32

    Signature Algorithm: sha256WithRSAEncryption
         a9:98:7f:9c:70:f5:73:a6:d4:e5:83:12:b6:83:27:5f:3f:ed:
         36:c0:ed:89:43:62:73:ca:9e:e9:d2:af:f5:4b:ca:bc:95:d5:
         ab:3f:b2:40:b2:90:a8:8d:bd:8e:2f:6f:77:6f:27:70:68:b2:
         71:60:46:53:d6:c1:5b:74:7e:30:a3:f4:66:2c:02:01:f7:8c:
         0f:bf:f7:e5:ae:36:fa:d0:4c:d6:7b:4b:26:30:82:0b:5b:eb:
         b8:55:35:8e:06:28:ca:27:45:38:ae:76:24:04:4e:bf:4a:dc:
         bc:de:e6:29:f6:2b:5b:5c:d1:87:b5:14:be:b1:26:b9:93:b5:
         34:fe:d4:75:cb:ba:c8:c9:1a:a9:c2:5d:72:92:63:47:bb:b0:
         f0:b8:fb:6a:4f:8b:80:d1:88:67:e1:83:0d:ab:6e:f4:1c:7e:
         ea:80:13:67:34:76:bb:7c:00:04:90:bc:8d:88:78:6a:3f:16:
         c7:b0:bf:aa:94:40:69:7b:0c:97:0c:41:2c:bb:63:03:d3:eb:
         4e:5d:55:dc:3e:8c:0a:98:92:18:1d:b2:50:65:aa:61:91:5f:
         b3:17:55:d9:09:d6:28:f2:d6:03:1f:da:2a:08:5f:5f:57:a7:
         38:9d:c1:79:06:ee:5e:b9:28:00:c5:ba:90:35:7f:33:f2:e0:
         96:b8:84:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 08:51:41 2025 by rpki-client