Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/1/323830343a323438383a3a2f33362d3336203d3e20323634323238.roa
File:                     323830343a323438383a3a2f33362d3336203d3e20323634323238.roa (raw, json)
Hash identifier:          vFC+sK+5ZZHsAxT4daizigPYnW0UmPIjQxHcdNA1Sjc=
Subject key identifier:   90:ED:E8:E5:FE:3F:1C:85:91:3F:F1:01:4D:6E:9B:9F:2F:F5:8A:CD
Certificate issuer:       /CN=318D4DCFA494762EAD6051048B9A3488DEA4BE40
Certificate serial:       4DD315FBC3743EC8966CA183A9088CEB3E0F2307
Authority key identifier: 31:8D:4D:CF:A4:94:76:2E:AD:60:51:04:8B:9A:34:88:DE:A4:BE:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/318D4DCFA494762EAD6051048B9A3488DEA4BE40.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/1/323830343a323438383a3a2f33362d3336203d3e20323634323238.roa
Signing time:             Mon 17 Oct 2022 20:40:12 +0000
ROA not before:           Mon 17 Oct 2022 20:35:12 +0000
ROA not after:            Mon 16 Oct 2023 20:40:12 +0000
asID:                     264228
IP address blocks:        2804:2488::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:d3:15:fb:c3:74:3e:c8:96:6c:a1:83:a9:08:8c:eb:3e:0f:23:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=318D4DCFA494762EAD6051048B9A3488DEA4BE40
        Validity
            Not Before: Oct 17 20:35:12 2022 GMT
            Not After : Oct 16 20:40:12 2023 GMT
        Subject: CN=90EDE8E5FE3F1C85913FF1014D6E9B9F2FF58ACD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:65:e1:3b:2f:2b:dc:0c:83:85:7c:1b:a1:e1:
                    ef:fa:df:88:9f:d2:6f:a2:b8:af:06:5a:ab:09:ee:
                    e9:68:10:56:28:56:74:74:39:14:cb:a4:93:45:7b:
                    c0:b2:80:d4:15:61:1d:3c:38:35:39:a9:a2:d6:1b:
                    c2:41:1e:04:f9:7e:56:44:07:89:2f:56:54:96:6a:
                    b3:de:f4:68:b9:af:20:f2:20:89:0b:1c:60:49:77:
                    3e:c3:ab:ed:31:3f:07:cb:3e:47:92:20:de:0a:e1:
                    82:b8:3b:16:6e:a2:7f:7b:3d:6d:2b:f2:42:41:dd:
                    a2:0c:d5:b5:fc:c2:24:c6:2e:b7:95:8e:c8:f8:49:
                    f2:a2:48:d9:a6:5c:29:81:47:81:e6:e2:2e:bc:ba:
                    53:e4:e1:76:12:ff:51:50:9e:03:97:73:ef:13:a8:
                    f0:2e:56:f6:ea:0c:33:a7:c8:42:af:24:8f:24:c8:
                    25:b9:95:90:65:96:4e:25:6b:05:a4:df:25:a5:c7:
                    f5:e0:3a:20:81:3b:48:e0:61:2e:9f:2e:a3:75:b4:
                    93:9c:be:4f:27:b8:a2:ca:6a:7b:a6:5a:bb:9c:64:
                    d7:ce:9d:a8:39:cd:a3:e8:bc:12:82:e3:50:6d:d1:
                    f6:53:ba:6b:77:88:a6:a9:4f:a8:6b:04:4f:c8:ce:
                    b7:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:ED:E8:E5:FE:3F:1C:85:91:3F:F1:01:4D:6E:9B:9F:2F:F5:8A:CD
            X509v3 Authority Key Identifier:
                keyid:31:8D:4D:CF:A4:94:76:2E:AD:60:51:04:8B:9A:34:88:DE:A4:BE:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/1/318D4DCFA494762EAD6051048B9A3488DEA4BE40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/318D4DCFA494762EAD6051048B9A3488DEA4BE40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/1/323830343a323438383a3a2f33362d3336203d3e20323634323238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2488::/36

    Signature Algorithm: sha256WithRSAEncryption
         48:ae:ab:8a:f7:6b:1a:d7:99:3f:4c:d2:b7:1e:ae:44:07:a3:
         20:79:ff:fd:50:ed:4d:16:e4:b5:eb:77:68:56:d2:10:8b:9d:
         b6:73:3c:62:2f:f1:16:f0:f9:ce:de:6e:42:d2:03:24:5d:46:
         c2:21:d9:4b:a8:10:ab:64:ad:fa:a2:2c:39:7b:3e:45:55:99:
         06:41:fd:6b:fc:9d:e2:e8:b1:31:f9:60:f9:0c:46:5c:9a:d2:
         ce:a4:53:5b:2f:37:bf:a5:d5:73:02:d8:fe:89:d9:7f:50:4c:
         fa:bf:e7:b2:e4:db:6a:d1:10:c9:95:a7:f3:90:19:39:ef:a6:
         b4:f1:b1:13:a4:8b:04:a5:9c:5e:ef:95:8d:9f:ff:53:f6:10:
         c9:33:0b:4d:5f:35:cf:98:57:b4:0d:7f:20:a6:c6:4d:c4:df:
         31:95:62:0b:a1:31:5b:12:d0:01:bc:c0:03:71:6f:5d:7e:e6:
         56:f8:01:44:b1:17:ca:60:15:fc:17:a7:98:fb:e0:13:c5:19:
         ac:c5:22:02:2b:57:ae:1b:20:80:eb:f4:6c:3d:7d:8b:5e:4c:
         31:4a:2c:3e:9a:a5:41:13:c9:30:64:56:74:83:21:f4:5c:37:
         cb:a4:e5:84:f4:3e:80:0d:8d:0f:d5:7e:6c:05:f5:79:7d:32:
         a4:1f:67:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:49:31 2025 by rpki-client