Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/323830343a363164633a363030303a3a2f33362d3336203d3e20323639323631.roa
File:                     323830343a363164633a363030303a3a2f33362d3336203d3e20323639323631.roa (raw, json)
Hash identifier:          oqgyKH5f65pOhF9Fr9CG8qC9CVDEBziXb+OWlDSTfdE=
Subject key identifier:   EA:76:3F:47:C2:6C:3E:78:51:9D:15:4F:FA:C4:AB:8E:44:0F:8D:6C
Certificate issuer:       /CN=95F1E34D9E98C4BDC4C9351D8BC93C26B167D9F3
Certificate serial:       728142F8F2EE37BED91831D066B58785BE524829
Authority key identifier: 95:F1:E3:4D:9E:98:C4:BD:C4:C9:35:1D:8B:C9:3C:26:B1:67:D9:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95F1E34D9E98C4BDC4C9351D8BC93C26B167D9F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/323830343a363164633a363030303a3a2f33362d3336203d3e20323639323631.roa
Signing time:             Fri 21 Jul 2023 18:43:32 +0000
ROA not before:           Fri 21 Jul 2023 18:38:32 +0000
ROA not after:            Fri 19 Jul 2024 18:43:32 +0000
asID:                     269261
IP address blocks:        2804:61dc:6000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:81:42:f8:f2:ee:37:be:d9:18:31:d0:66:b5:87:85:be:52:48:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95F1E34D9E98C4BDC4C9351D8BC93C26B167D9F3
        Validity
            Not Before: Jul 21 18:38:32 2023 GMT
            Not After : Jul 19 18:43:32 2024 GMT
        Subject: CN=EA763F47C26C3E78519D154FFAC4AB8E440F8D6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:79:07:42:e6:20:44:56:37:cd:bc:f8:ef:42:
                    e4:10:60:5a:ad:e0:0d:70:bc:64:7c:6f:ac:71:36:
                    a5:11:4d:28:40:9e:b8:ff:e4:7e:cd:12:e6:81:ee:
                    ca:77:8a:c4:5c:0d:bd:68:11:2f:50:4a:8f:a4:44:
                    af:4e:c0:75:03:eb:7a:d7:1f:7c:9a:bc:47:4f:38:
                    8e:c0:f2:48:62:11:da:40:4c:07:eb:d5:2d:7c:2d:
                    3d:44:e8:5c:70:b2:2b:20:aa:c5:65:27:56:30:44:
                    08:7c:dd:a2:6d:f6:01:60:20:63:9d:62:d4:27:b7:
                    c9:7e:81:a2:78:69:51:09:44:6e:72:dd:8a:0a:a0:
                    9e:0e:29:50:cf:80:be:e8:68:06:a0:28:bc:19:fe:
                    71:9f:d1:44:e2:66:7d:29:ab:2e:3f:86:ce:62:74:
                    2b:6a:83:4a:2d:17:f2:5d:73:7e:2c:7b:ba:42:19:
                    e3:6f:c6:81:b8:28:b6:a3:a4:93:78:a4:3a:44:43:
                    d3:50:24:4b:58:64:af:4a:92:78:1b:20:cd:8e:17:
                    e4:f8:4c:7c:a4:41:44:fb:5c:0a:32:b8:1e:24:8c:
                    4e:2f:ad:00:8c:9e:92:73:85:87:77:1b:12:03:f3:
                    d2:ea:6b:67:31:2d:61:3b:46:34:1d:84:89:3d:ce:
                    fb:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:76:3F:47:C2:6C:3E:78:51:9D:15:4F:FA:C4:AB:8E:44:0F:8D:6C
            X509v3 Authority Key Identifier:
                keyid:95:F1:E3:4D:9E:98:C4:BD:C4:C9:35:1D:8B:C9:3C:26:B1:67:D9:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/95F1E34D9E98C4BDC4C9351D8BC93C26B167D9F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95F1E34D9E98C4BDC4C9351D8BC93C26B167D9F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/323830343a363164633a363030303a3a2f33362d3336203d3e20323639323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:61dc:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         9a:75:9f:65:12:56:8b:d8:70:40:50:79:05:fa:c6:36:24:3c:
         7b:fc:90:be:b8:bd:9d:d2:f9:c1:85:f7:b1:35:88:01:42:97:
         6b:38:7a:9c:71:f2:46:c2:2c:46:87:ea:93:d3:8c:a8:9e:e0:
         71:d4:fe:a7:fe:ba:a2:cd:11:af:3d:0f:47:2b:d4:d1:d8:bd:
         cb:83:e9:09:90:e8:e0:53:9a:9c:1b:3d:b1:47:90:5c:6b:b8:
         3c:a6:92:88:30:8c:14:75:8b:90:f0:d1:ba:48:3d:b6:50:4e:
         a7:a6:dd:62:b4:de:4b:ca:94:66:2f:bc:7b:03:36:51:b0:63:
         ec:5a:b6:8e:68:1a:b4:5e:4a:0a:7e:b9:a5:62:44:b7:67:1a:
         e7:fe:ee:de:8c:12:ba:35:95:bf:c5:72:54:dc:9a:fd:87:a7:
         87:92:98:f2:d7:a3:93:6b:3f:1f:d4:2f:37:a2:ec:86:cd:4b:
         d3:b7:b7:d3:fe:84:49:9d:9a:8b:12:89:f9:d9:16:c8:d4:1b:
         ca:62:3e:72:0b:0f:ed:a8:87:e9:51:6b:73:c2:9f:3d:bb:44:
         1f:b6:53:28:db:d5:c9:4f:76:51:ed:77:d0:9a:87:c5:65:df:
         28:9c:03:24:9b:2d:a5:0f:d2:2a:fe:1e:3a:b4:74:01:f4:ff:
         8e:3d:ab:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 14:24:12 2025 by rpki-client