Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3dY59Jjuhvq93StbvhHy5pMXkcb6bSV8SKwjTaExiNqH/0/323830343a363338383a3a2f33322d3438203d3e20323639333637.roa
File:                     323830343a363338383a3a2f33322d3438203d3e20323639333637.roa (raw, json)
Hash identifier:          Tn0I8mckZt/nPyo7W+1nHp7nsvOq1W0cHJJnZ46T++I=
Subject key identifier:   85:E7:DE:D7:04:97:66:D7:64:EB:4A:96:BB:FB:6F:AB:7E:72:51:CE
Certificate issuer:       /CN=5820A7350809BA171F6B4004D5F8AD4654AD3A9C
Certificate serial:       524ABDBB6088E92F03DC444B302A426C54A942CD
Authority key identifier: 58:20:A7:35:08:09:BA:17:1F:6B:40:04:D5:F8:AD:46:54:AD:3A:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5820A7350809BA171F6B4004D5F8AD4654AD3A9C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3dY59Jjuhvq93StbvhHy5pMXkcb6bSV8SKwjTaExiNqH/0/323830343a363338383a3a2f33322d3438203d3e20323639333637.roa
Signing time:             Sat 10 Feb 2024 02:24:31 +0000
ROA not before:           Sat 10 Feb 2024 02:19:31 +0000
ROA not after:            Sat 08 Feb 2025 02:24:31 +0000
asID:                     269367
IP address blocks:        2804:6388::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:4a:bd:bb:60:88:e9:2f:03:dc:44:4b:30:2a:42:6c:54:a9:42:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5820A7350809BA171F6B4004D5F8AD4654AD3A9C
        Validity
            Not Before: Feb 10 02:19:31 2024 GMT
            Not After : Feb  8 02:24:31 2025 GMT
        Subject: CN=85E7DED7049766D764EB4A96BBFB6FAB7E7251CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ea:d0:a8:65:ca:2b:ff:42:d8:a1:62:d2:fa:
                    5f:71:6f:b4:e5:01:3e:9d:e7:81:ea:d8:68:3a:52:
                    b6:9c:67:e8:f2:d3:d3:0d:8d:e3:80:a5:df:5f:89:
                    bb:42:b6:ae:c4:cc:83:ec:b8:ec:6f:88:1e:db:d0:
                    e8:6f:4c:91:e5:15:c0:52:79:2a:cf:15:18:c3:ef:
                    f4:85:c8:64:6a:87:89:c8:e2:66:fa:77:59:80:bb:
                    dc:07:30:bc:22:6c:07:1b:1c:c2:ed:0e:0c:aa:97:
                    56:af:c7:08:b9:ba:7e:64:6a:ce:ee:b6:65:7c:17:
                    e1:f8:0f:50:42:4b:8a:c1:8f:6d:da:0a:d8:68:f2:
                    7f:c9:44:23:e8:1f:85:51:42:96:f8:17:90:ab:da:
                    2f:38:4f:c3:70:2f:3b:ec:56:7b:c9:8a:13:c0:43:
                    e7:5b:c8:da:a5:f3:cf:1a:52:a0:a2:ed:62:39:1a:
                    09:fc:91:a7:a4:84:71:73:0f:48:f2:4d:fc:0a:47:
                    e3:40:ce:a1:6c:9b:8b:9f:84:4e:0f:43:23:5a:5e:
                    34:69:0d:e6:f5:0e:c6:31:cc:98:c5:a9:31:5b:80:
                    80:a3:02:83:17:48:d4:2a:42:14:c7:86:0a:f3:1e:
                    73:7f:92:ab:f7:41:ec:2e:aa:19:e6:7c:b6:18:50:
                    73:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:E7:DE:D7:04:97:66:D7:64:EB:4A:96:BB:FB:6F:AB:7E:72:51:CE
            X509v3 Authority Key Identifier:
                keyid:58:20:A7:35:08:09:BA:17:1F:6B:40:04:D5:F8:AD:46:54:AD:3A:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3dY59Jjuhvq93StbvhHy5pMXkcb6bSV8SKwjTaExiNqH/0/5820A7350809BA171F6B4004D5F8AD4654AD3A9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5820A7350809BA171F6B4004D5F8AD4654AD3A9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3dY59Jjuhvq93StbvhHy5pMXkcb6bSV8SKwjTaExiNqH/0/323830343a363338383a3a2f33322d3438203d3e20323639333637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6388::/32

    Signature Algorithm: sha256WithRSAEncryption
         b8:fe:79:e8:41:ad:60:f9:48:4d:46:b2:66:da:62:14:f8:c6:
         f0:72:a5:dc:ea:f3:fe:4f:33:15:8f:3f:78:8e:58:bc:4f:92:
         12:c5:d7:7f:db:42:0b:b3:6f:b1:c8:78:fd:db:0f:ad:49:b9:
         f5:b2:c8:3e:35:ce:ff:54:ab:78:b9:94:c2:05:10:e8:d8:f6:
         c2:7c:55:88:36:0a:aa:dc:0e:83:71:66:ea:15:a2:32:a6:f5:
         a6:24:6a:95:c8:08:de:1b:5b:75:42:aa:7f:3f:f7:c1:1f:6a:
         24:27:53:ef:0a:94:35:31:11:e4:23:a4:14:12:d3:eb:53:a2:
         1c:71:ca:d2:af:e4:26:f0:6f:70:cc:2b:c3:6e:5a:34:39:ff:
         0e:78:05:fd:7d:27:93:38:1e:68:94:a9:6e:8d:e1:f6:98:b7:
         3c:21:4a:ce:5e:a0:e0:15:ab:40:1c:05:6c:ef:f5:8b:f8:d6:
         c6:17:65:2b:42:b6:fc:f1:fe:26:3f:b9:ec:2d:6e:4a:97:50:
         4c:11:e6:9b:10:b7:8e:47:bd:69:39:ca:22:06:26:1a:42:a8:
         7c:56:f4:f0:97:2c:b1:ae:ea:03:72:5a:ec:03:78:60:1a:62:
         89:e4:e9:e4:94:75:ac:d5:73:66:74:6b:ab:58:4d:7d:64:6b:
         52:1f:ab:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 08:15:01 2025 by rpki-client