Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/13tawb9D7kseaZCDoeNq5FyeE7cr3UygixJb5g4KvKHN/0/323830343a323132343a3a2f33322d313238203d3e20323634353338.roa
File:                     323830343a323132343a3a2f33322d313238203d3e20323634353338.roa (raw, json)
Hash identifier:          tl1d8IMtqunHz9wSwC1isNmybObkXolPCzYxa/zqzf0=
Subject key identifier:   D0:BB:7A:5E:96:80:E3:8D:0E:D3:DD:03:45:18:B9:E1:78:E1:BC:54
Certificate issuer:       /CN=A5517DDFA3CE9B3626553FD5F843D3B05D1626A7
Certificate serial:       3E7C9343AC52D69C79719B57302713AB912BFC0F
Authority key identifier: A5:51:7D:DF:A3:CE:9B:36:26:55:3F:D5:F8:43:D3:B0:5D:16:26:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5517DDFA3CE9B3626553FD5F843D3B05D1626A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/13tawb9D7kseaZCDoeNq5FyeE7cr3UygixJb5g4KvKHN/0/323830343a323132343a3a2f33322d313238203d3e20323634353338.roa
Signing time:             Tue 03 Oct 2023 18:11:05 +0000
ROA not before:           Tue 03 Oct 2023 18:06:05 +0000
ROA not after:            Tue 01 Oct 2024 18:11:05 +0000
asID:                     264538
IP address blocks:        2804:2124::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:7c:93:43:ac:52:d6:9c:79:71:9b:57:30:27:13:ab:91:2b:fc:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5517DDFA3CE9B3626553FD5F843D3B05D1626A7
        Validity
            Not Before: Oct  3 18:06:05 2023 GMT
            Not After : Oct  1 18:11:05 2024 GMT
        Subject: CN=D0BB7A5E9680E38D0ED3DD034518B9E178E1BC54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ea:6e:ad:76:9e:21:58:27:09:4d:cd:5c:4b:
                    1f:a8:73:13:3b:8b:85:fb:52:17:39:53:cb:f9:29:
                    60:0d:a4:4a:52:3e:73:ea:7d:b5:10:7b:ea:c9:a9:
                    cc:09:4f:d2:28:c6:d7:69:6f:5d:03:4d:a9:1c:08:
                    6d:1a:21:39:9c:b2:24:99:78:48:cf:eb:e4:f3:11:
                    33:5a:74:64:32:71:4f:f3:1e:7e:ce:4b:76:22:79:
                    17:0b:d2:8a:ec:44:88:ae:29:36:b7:66:f1:a5:94:
                    17:ca:ad:e5:07:8c:0d:c8:f2:88:ea:c4:15:62:b4:
                    7e:4b:07:ae:7a:0c:1b:e3:d7:54:83:29:35:ae:07:
                    d6:f2:67:ff:d7:29:0e:2d:7b:ed:12:63:a9:6a:20:
                    3a:01:fd:94:d2:a8:53:1f:37:5f:db:c5:e6:79:4d:
                    7c:8c:90:c5:43:56:61:c6:14:f5:46:f4:c6:61:e6:
                    38:26:98:41:5d:94:00:1a:1f:9b:56:ab:ab:2c:a1:
                    0f:9b:70:8e:96:05:3f:07:21:07:b0:aa:35:2f:12:
                    a3:32:87:e9:b0:af:39:01:91:82:bb:bd:59:07:04:
                    5c:99:d3:4e:68:59:1d:a3:89:37:42:5d:97:63:77:
                    af:d0:6f:b0:f7:b0:04:56:6c:3a:8e:7d:73:b8:c3:
                    71:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:BB:7A:5E:96:80:E3:8D:0E:D3:DD:03:45:18:B9:E1:78:E1:BC:54
            X509v3 Authority Key Identifier:
                keyid:A5:51:7D:DF:A3:CE:9B:36:26:55:3F:D5:F8:43:D3:B0:5D:16:26:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/13tawb9D7kseaZCDoeNq5FyeE7cr3UygixJb5g4KvKHN/0/A5517DDFA3CE9B3626553FD5F843D3B05D1626A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5517DDFA3CE9B3626553FD5F843D3B05D1626A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/13tawb9D7kseaZCDoeNq5FyeE7cr3UygixJb5g4KvKHN/0/323830343a323132343a3a2f33322d313238203d3e20323634353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2124::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:8f:34:54:82:83:77:cc:84:a3:7e:bc:0a:b7:2e:42:eb:82:
         b3:6e:f6:74:ff:20:36:3d:62:1f:52:e1:91:44:9c:bd:02:de:
         a6:0e:48:5a:c6:c5:e1:11:75:9b:a9:d4:c4:6d:6e:85:90:2a:
         58:98:70:a6:1b:88:81:cb:bb:9a:7b:9a:bc:1b:92:e5:1b:f1:
         dd:80:cd:2b:91:d1:26:30:53:3a:78:b0:9c:64:4f:b5:35:5e:
         5c:e3:61:2b:e3:d1:e7:90:da:7d:9d:37:a7:28:0b:6f:ec:43:
         20:f0:7d:ac:0c:e7:04:05:31:7b:82:eb:07:a8:65:4c:97:fd:
         b9:81:c7:b8:9a:cb:0a:3d:8b:fa:96:7b:38:5d:a8:9a:51:17:
         54:f7:42:87:79:4b:6f:25:89:4a:c6:35:49:fe:81:48:cc:07:
         7b:0f:24:c5:28:b0:96:b7:6c:05:ab:8d:a2:da:77:97:e9:c7:
         c2:32:97:84:71:d4:87:47:09:19:b6:03:a8:bd:df:8f:b7:ad:
         5c:02:ad:63:0c:9a:28:af:24:24:12:9f:f8:2c:d5:f6:39:bd:
         bb:c3:87:37:89:ab:99:fc:f7:e4:40:fe:f4:f1:72:a0:b7:a8:
         5e:c5:14:ac:bd:b6:48:fc:60:c3:be:c1:b5:38:fa:c9:eb:7d:
         8b:c0:95:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:48:52 2025 by rpki-client