Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2uYSSDn2V2TM4qegQMVAyVC9MkvCBYoyHhbaQrxmH587/0/323830343a333163303a3a2f33322d3438203d3e20323632343338.roa
File:                     323830343a333163303a3a2f33322d3438203d3e20323632343338.roa (raw, json)
Hash identifier:          Nqck8WgvQAKrcOZojIIg8caQwhZaHsLYU74VYSjovik=
Subject key identifier:   80:33:85:99:7A:5A:40:EC:93:3D:5E:EE:96:F6:37:93:B7:AE:AE:5D
Certificate issuer:       /CN=AFB37E8982591B18DBDE9E8217274DFABCEAA945
Certificate serial:       709B01396D97011AC46F6A4E8C7E9FBA13EFA389
Authority key identifier: AF:B3:7E:89:82:59:1B:18:DB:DE:9E:82:17:27:4D:FA:BC:EA:A9:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFB37E8982591B18DBDE9E8217274DFABCEAA945.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2uYSSDn2V2TM4qegQMVAyVC9MkvCBYoyHhbaQrxmH587/0/323830343a333163303a3a2f33322d3438203d3e20323632343338.roa
Signing time:             Mon 23 Dec 2024 16:08:08 +0000
ROA not before:           Mon 23 Dec 2024 16:03:08 +0000
ROA not after:            Mon 22 Dec 2025 16:08:08 +0000
asID:                     262438
IP address blocks:        2804:31c0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:9b:01:39:6d:97:01:1a:c4:6f:6a:4e:8c:7e:9f:ba:13:ef:a3:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFB37E8982591B18DBDE9E8217274DFABCEAA945
        Validity
            Not Before: Dec 23 16:03:08 2024 GMT
            Not After : Dec 22 16:08:08 2025 GMT
        Subject: CN=803385997A5A40EC933D5EEE96F63793B7AEAE5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:94:1f:ea:ce:5c:97:29:fb:80:a7:f3:ea:84:
                    fd:7d:9c:85:7f:3c:19:3f:46:26:86:72:9a:17:8f:
                    27:b5:89:a8:2b:7d:17:74:ba:ae:48:ef:83:08:c3:
                    dc:fe:d5:0c:11:e4:53:0a:2f:f3:6f:3b:1f:37:db:
                    38:d9:44:2c:47:ab:7c:d8:41:96:f1:b7:e1:4b:0c:
                    55:3d:e0:5a:f2:55:8b:a6:88:bc:99:9f:5e:96:de:
                    c3:f9:93:7c:ee:2c:a3:98:d7:ad:fc:e0:c6:b3:cb:
                    c9:0e:53:0e:08:e9:5c:47:10:0d:05:40:c5:46:7a:
                    e7:b5:27:0b:77:89:e9:6b:66:13:eb:be:78:13:f5:
                    96:bc:ec:c6:9a:ee:0a:64:04:d7:1b:f2:07:44:e5:
                    5b:2d:d8:9e:c0:7f:f9:4b:18:87:02:05:65:59:19:
                    fe:00:da:58:d7:04:ac:b7:c9:e0:7e:74:e3:5b:d6:
                    9d:f1:4c:53:98:2e:f8:f7:42:f9:74:aa:4d:55:0a:
                    71:f3:0e:fa:f3:fd:19:33:78:3d:db:0e:eb:0d:7d:
                    c7:39:46:a2:a1:a5:64:5b:49:20:f2:b2:95:b6:cf:
                    f6:ea:19:3f:55:09:cf:dc:24:5a:41:a8:82:53:a9:
                    fa:8d:59:2d:3d:04:2d:e5:3a:7d:a4:29:8a:41:14:
                    2e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:33:85:99:7A:5A:40:EC:93:3D:5E:EE:96:F6:37:93:B7:AE:AE:5D
            X509v3 Authority Key Identifier:
                keyid:AF:B3:7E:89:82:59:1B:18:DB:DE:9E:82:17:27:4D:FA:BC:EA:A9:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2uYSSDn2V2TM4qegQMVAyVC9MkvCBYoyHhbaQrxmH587/0/AFB37E8982591B18DBDE9E8217274DFABCEAA945.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFB37E8982591B18DBDE9E8217274DFABCEAA945.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2uYSSDn2V2TM4qegQMVAyVC9MkvCBYoyHhbaQrxmH587/0/323830343a333163303a3a2f33322d3438203d3e20323632343338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:31c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:28:5f:94:e3:68:e8:36:1f:47:c8:b7:ca:a0:b2:aa:a6:4e:
         c1:ea:44:f8:ec:f0:78:97:79:14:d9:00:3c:dc:e9:f4:ff:5b:
         e7:65:ae:b9:e9:bd:64:e5:e6:8e:e4:f3:ea:c8:bd:1c:31:55:
         90:d0:0b:a2:22:98:c2:04:1a:ad:32:cf:58:ae:2c:3d:29:fa:
         25:48:96:9e:d0:17:ca:54:0a:48:60:e9:ba:cf:d4:43:ff:21:
         6b:34:0b:69:ef:cc:c0:ca:a6:56:a9:0e:da:12:40:d4:e4:86:
         6c:b3:53:75:87:2d:10:a5:f7:71:00:07:3c:9c:de:ec:aa:ff:
         d2:59:4e:0b:92:52:ad:fa:55:3f:5e:29:6e:c6:ea:93:56:c3:
         c5:e7:db:a5:bd:a6:08:fe:62:c3:58:af:a0:dd:b2:b7:64:11:
         d4:8f:8d:4e:b1:07:0d:f4:c6:a0:87:b7:79:32:bf:d1:7a:07:
         df:9d:64:f0:58:ba:fc:27:11:43:cd:d6:ee:21:54:be:de:72:
         56:50:dd:00:2e:fc:a6:53:a1:4a:64:a6:bf:10:0f:54:c8:7e:
         27:14:c2:42:5c:4c:ba:f2:86:6d:ee:82:b5:cb:18:08:80:a6:
         d6:db:07:9e:54:63:a9:54:b0:0d:25:b8:c1:ea:2e:b9:af:f8:
         49:94:e9:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:35:31 2025 by rpki-client