Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/1/323830343a3265383a323a3a2f34382d3438203d3e20323632383437.roa
File:                     323830343a3265383a323a3a2f34382d3438203d3e20323632383437.roa (raw, json)
Hash identifier:          bklgShltvJhMefsLygmVw3cZy1/4hnePQ/FCOSKhUn4=
Subject key identifier:   6C:64:50:77:47:D9:2B:8E:A1:36:84:58:95:82:A5:7C:CA:6C:8C:E2
Certificate issuer:       /CN=7E89C742D551BF248E147A7AC13D94D12B15C8F6
Certificate serial:       7F8641425BEA5A688EFC9E03B30DA850420A283F
Authority key identifier: 7E:89:C7:42:D5:51:BF:24:8E:14:7A:7A:C1:3D:94:D1:2B:15:C8:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E89C742D551BF248E147A7AC13D94D12B15C8F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/1/323830343a3265383a323a3a2f34382d3438203d3e20323632383437.roa
Signing time:             Fri 29 Dec 2023 18:38:35 +0000
ROA not before:           Fri 29 Dec 2023 18:33:35 +0000
ROA not after:            Fri 27 Dec 2024 18:38:35 +0000
asID:                     262847
IP address blocks:        2804:2e8:2::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:86:41:42:5b:ea:5a:68:8e:fc:9e:03:b3:0d:a8:50:42:0a:28:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E89C742D551BF248E147A7AC13D94D12B15C8F6
        Validity
            Not Before: Dec 29 18:33:35 2023 GMT
            Not After : Dec 27 18:38:35 2024 GMT
        Subject: CN=6C64507747D92B8EA13684589582A57CCA6C8CE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:33:b4:e8:d8:16:c6:a5:a2:7e:c3:43:9b:b3:
                    49:ca:96:83:9d:19:9b:74:11:58:4c:75:cf:77:24:
                    69:db:7c:66:2e:3b:91:b7:7c:16:da:83:fa:d2:02:
                    9b:23:4d:6d:ad:14:9c:3c:d4:61:80:5a:85:e3:8c:
                    33:49:f1:7e:45:57:a5:ee:02:ad:ee:66:64:78:32:
                    b6:85:6a:4e:e1:27:80:6f:a8:31:6f:19:fa:5d:89:
                    da:de:88:5a:ab:4c:21:fc:08:d6:e4:fb:65:1e:04:
                    34:05:cc:7a:37:db:13:81:01:1c:9d:94:0a:78:64:
                    95:b8:49:14:22:64:cd:57:1b:44:c7:d1:17:54:e8:
                    e5:e4:dc:3c:f8:e6:cb:93:03:40:7f:e2:20:09:9e:
                    51:0d:9b:71:48:fe:dd:90:53:51:6a:96:1b:e8:bb:
                    3e:3d:71:69:ba:4f:61:16:b0:88:e6:70:23:40:f1:
                    3c:ad:50:37:b5:6e:3d:eb:ab:d9:ae:64:cf:d2:87:
                    01:03:f3:5a:f8:bb:a0:12:90:32:f5:8b:f4:2d:b9:
                    6d:1d:a2:9e:89:98:ef:6f:88:07:3f:cb:43:6f:b4:
                    22:9a:b9:ce:94:84:06:83:60:dc:4d:2e:fa:b1:75:
                    c6:7a:f4:e4:c4:d2:b8:2a:db:f0:26:c5:2f:d4:2a:
                    4e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:64:50:77:47:D9:2B:8E:A1:36:84:58:95:82:A5:7C:CA:6C:8C:E2
            X509v3 Authority Key Identifier:
                keyid:7E:89:C7:42:D5:51:BF:24:8E:14:7A:7A:C1:3D:94:D1:2B:15:C8:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/1/7E89C742D551BF248E147A7AC13D94D12B15C8F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E89C742D551BF248E147A7AC13D94D12B15C8F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/1/323830343a3265383a323a3a2f34382d3438203d3e20323632383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e8:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:53:6c:14:2a:84:fe:d7:41:6d:64:6c:62:27:22:51:6e:5b:
         07:3e:85:cf:81:ec:7b:2e:15:0c:fd:4e:02:bd:1f:17:07:77:
         15:fd:9f:eb:5c:48:5f:d7:44:fe:a3:cb:ab:b4:d0:e8:6e:4a:
         6c:ee:66:c5:fe:fc:01:ee:21:93:59:ea:bd:b9:6e:30:61:e7:
         87:53:fa:41:4b:71:01:24:13:e5:41:e9:9a:46:65:b9:07:e8:
         87:b2:32:6d:c2:25:62:23:8d:24:31:c4:9f:86:b6:09:f5:a7:
         43:ea:d7:25:96:0e:3d:0d:8a:22:a4:8c:fc:39:10:23:36:d0:
         87:46:c9:61:cc:2a:63:27:3c:72:91:4e:df:3c:3e:37:e9:7f:
         fa:59:62:ae:24:21:a5:85:c5:f5:dd:26:5a:f9:11:78:d0:c0:
         bf:da:d7:24:f6:ca:11:bd:47:cc:ea:9e:4b:70:64:27:81:af:
         e3:5e:78:ab:e6:e9:e1:69:25:20:9f:1b:3c:6f:9a:fc:78:50:
         d3:87:ed:c7:3f:94:0c:74:76:70:89:0a:9c:33:fe:ec:00:ff:
         6c:29:b5:f7:ef:6d:1d:86:10:56:54:98:bf:14:d6:0f:c7:20:
         58:b0:d2:2f:1a:3c:30:3d:13:5c:02:79:d8:38:b2:b5:a3:4c:
         ca:b3:6e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:13:57 2025 by rpki-client