Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/1/323830343a323438383a3a2f33322d3332203d3e20323634323238.roa
File:                     323830343a323438383a3a2f33322d3332203d3e20323634323238.roa (raw, json)
Hash identifier:          hFaNmT9/nroyOH/lse3mris3yZOvIGwOuhiFBPeveSM=
Subject key identifier:   C3:F7:DD:81:04:3A:02:DA:4E:A3:2E:A3:AE:E8:2B:0C:9A:86:DC:2B
Certificate issuer:       /CN=318D4DCFA494762EAD6051048B9A3488DEA4BE40
Certificate serial:       26B63484EA4B44151889E743E157DA1D58F921F8
Authority key identifier: 31:8D:4D:CF:A4:94:76:2E:AD:60:51:04:8B:9A:34:88:DE:A4:BE:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/318D4DCFA494762EAD6051048B9A3488DEA4BE40.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/1/323830343a323438383a3a2f33322d3332203d3e20323634323238.roa
Signing time:             Mon 17 Oct 2022 20:40:12 +0000
ROA not before:           Mon 17 Oct 2022 20:35:12 +0000
ROA not after:            Mon 16 Oct 2023 20:40:12 +0000
asID:                     264228
IP address blocks:        2804:2488::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:b6:34:84:ea:4b:44:15:18:89:e7:43:e1:57:da:1d:58:f9:21:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=318D4DCFA494762EAD6051048B9A3488DEA4BE40
        Validity
            Not Before: Oct 17 20:35:12 2022 GMT
            Not After : Oct 16 20:40:12 2023 GMT
        Subject: CN=C3F7DD81043A02DA4EA32EA3AEE82B0C9A86DC2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5e:a7:1a:ce:af:cd:c8:c5:67:c8:5c:1f:0e:
                    cb:2f:eb:a1:6b:5b:d6:f3:4f:4d:9d:55:56:5d:d3:
                    10:57:85:8b:48:8e:fe:40:f7:ac:2c:93:e7:b1:f2:
                    cf:b3:28:3f:05:10:83:84:9f:1e:ec:a0:9d:5a:b4:
                    61:8a:37:4b:70:72:a1:59:d1:1d:cc:c5:9c:47:2e:
                    4a:7f:cc:9f:3e:62:e0:aa:a7:6c:e3:eb:f6:5d:3d:
                    36:82:65:13:ec:91:91:56:e9:aa:e4:5f:fd:2e:77:
                    7e:a7:85:4d:b3:ed:a2:bc:c1:4c:30:2e:e9:17:05:
                    7d:c1:70:86:a6:22:0f:b6:93:ea:d6:58:93:de:ad:
                    0b:9c:0e:a5:60:0b:f6:10:d2:77:5c:70:38:a0:53:
                    b0:21:f2:42:06:62:78:7c:ff:11:04:f6:c4:23:44:
                    7b:74:19:6a:61:d7:62:77:09:98:8b:87:ed:af:5f:
                    3f:3b:11:de:3d:c7:e5:24:07:a1:15:84:58:7e:68:
                    88:bc:fd:cc:87:c2:db:d0:45:de:93:c1:6c:75:be:
                    3b:50:64:da:38:66:27:22:48:c5:a9:48:95:0e:7e:
                    fe:d4:6e:b0:d2:5c:59:db:c2:d3:cb:12:06:ea:0d:
                    78:27:d7:9f:2b:bc:3c:b9:e3:79:13:ac:00:83:5d:
                    2c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F7:DD:81:04:3A:02:DA:4E:A3:2E:A3:AE:E8:2B:0C:9A:86:DC:2B
            X509v3 Authority Key Identifier:
                keyid:31:8D:4D:CF:A4:94:76:2E:AD:60:51:04:8B:9A:34:88:DE:A4:BE:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/1/318D4DCFA494762EAD6051048B9A3488DEA4BE40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/318D4DCFA494762EAD6051048B9A3488DEA4BE40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/1/323830343a323438383a3a2f33322d3332203d3e20323634323238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2488::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:45:2a:9a:00:17:a7:45:ec:33:05:c3:32:34:02:18:c1:d7:
         2e:4f:2b:e7:66:8e:f0:9d:92:11:19:12:3a:c1:5b:26:07:d8:
         69:66:17:9a:b4:77:90:57:f5:0a:ca:bc:19:41:a7:1a:85:13:
         69:68:bd:cb:0b:92:b9:bd:1f:24:74:e0:01:85:71:4f:6e:b4:
         a6:20:2c:21:bf:9d:82:ac:64:3b:52:da:79:8b:67:60:1d:e5:
         1f:79:82:f3:12:7e:76:7f:5c:94:29:28:40:8d:d4:28:cf:94:
         20:f7:b9:b0:84:5c:28:da:b3:24:7a:1f:ec:6d:00:ce:c9:d2:
         53:a8:38:f0:f8:b0:56:1f:58:77:0d:3b:b8:e7:10:9a:08:f4:
         16:53:9b:5d:c0:67:7b:c9:9f:e3:c3:5a:8d:a6:8d:81:0d:f3:
         10:0e:44:63:1a:5b:49:46:8b:87:4e:48:94:e3:0a:44:71:be:
         42:9d:4f:9a:77:52:72:aa:8b:55:d4:8e:86:bc:59:71:1e:92:
         97:75:fc:c3:c4:8a:82:a8:ec:9b:20:88:bc:e9:bd:cf:42:cd:
         9c:19:45:67:93:bc:d1:9e:37:84:58:f8:a3:69:80:4f:56:65:
         41:11:a8:47:11:e2:d2:3a:e1:9d:66:fb:82:70:ba:40:f8:8a:
         9f:6e:61:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:13:51 2025 by rpki-client