Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ryRE7VRKo2XYqkYuhiTvgzBHVL58xgofovLw6b8DdXe/0/323830343a343030633a3a2f33322d3332203d3e20323635393330.roa
File:                     323830343a343030633a3a2f33322d3332203d3e20323635393330.roa (raw, json)
Hash identifier:          N62ApzsoE9ZXtn1HJ0spYFp778OU53o8frI88PpdXy4=
Subject key identifier:   37:41:A4:10:E2:C7:CB:16:A3:FC:5B:23:FC:27:E6:3A:1A:C9:4D:E6
Certificate issuer:       /CN=3233E2EDC348AC978221BFAE80C08A1A69277683
Certificate serial:       1862A47CFDED554BB8290158CEB8CBE4D8ACECC3
Authority key identifier: 32:33:E2:ED:C3:48:AC:97:82:21:BF:AE:80:C0:8A:1A:69:27:76:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3233E2EDC348AC978221BFAE80C08A1A69277683.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ryRE7VRKo2XYqkYuhiTvgzBHVL58xgofovLw6b8DdXe/0/323830343a343030633a3a2f33322d3332203d3e20323635393330.roa
Signing time:             Mon 06 Mar 2023 19:07:11 +0000
ROA not before:           Mon 06 Mar 2023 19:02:11 +0000
ROA not after:            Mon 04 Mar 2024 19:07:11 +0000
asID:                     265930
IP address blocks:        2804:400c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:62:a4:7c:fd:ed:55:4b:b8:29:01:58:ce:b8:cb:e4:d8:ac:ec:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3233E2EDC348AC978221BFAE80C08A1A69277683
        Validity
            Not Before: Mar  6 19:02:11 2023 GMT
            Not After : Mar  4 19:07:11 2024 GMT
        Subject: CN=3741A410E2C7CB16A3FC5B23FC27E63A1AC94DE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ee:c4:3b:ca:13:12:1b:0d:6c:32:e3:c7:e9:
                    c3:53:b7:3c:71:1a:20:ea:c1:4a:6f:80:40:13:bb:
                    1a:56:11:21:90:ea:f1:56:ef:a1:ce:64:1b:42:19:
                    e6:89:db:68:ff:13:26:d1:97:d5:3c:22:3a:57:d0:
                    d7:b6:29:bc:1a:5e:ab:71:8e:66:76:83:46:5c:7a:
                    fd:64:04:bb:d8:e3:51:80:24:59:a7:43:13:57:99:
                    e9:06:e9:54:bb:16:e1:ed:20:da:d4:2c:66:1b:99:
                    66:eb:c6:99:d2:aa:0f:80:c6:da:10:be:48:8b:34:
                    a7:c0:f1:0d:06:32:79:22:16:1b:da:76:f9:8b:8a:
                    9b:ec:c7:0d:68:3b:6f:49:a7:62:04:7a:85:af:2c:
                    35:2d:65:74:5c:6c:29:c0:40:3b:76:9d:53:af:e2:
                    99:9f:70:db:eb:d4:f0:1c:6c:f2:c4:2a:57:ac:b6:
                    5a:c3:c8:8e:f3:22:28:52:14:fe:f2:f3:df:9b:ab:
                    34:b3:48:1d:92:26:40:88:49:67:d7:fd:83:41:bd:
                    7b:f4:94:c0:fd:93:68:61:12:b0:da:fa:0c:4d:98:
                    49:36:41:58:60:5f:4e:10:21:48:d7:d4:f1:c7:90:
                    6f:2a:a7:5f:0a:f6:2c:ea:fd:4f:1c:86:9a:0f:9b:
                    04:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:41:A4:10:E2:C7:CB:16:A3:FC:5B:23:FC:27:E6:3A:1A:C9:4D:E6
            X509v3 Authority Key Identifier:
                keyid:32:33:E2:ED:C3:48:AC:97:82:21:BF:AE:80:C0:8A:1A:69:27:76:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ryRE7VRKo2XYqkYuhiTvgzBHVL58xgofovLw6b8DdXe/0/3233E2EDC348AC978221BFAE80C08A1A69277683.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3233E2EDC348AC978221BFAE80C08A1A69277683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ryRE7VRKo2XYqkYuhiTvgzBHVL58xgofovLw6b8DdXe/0/323830343a343030633a3a2f33322d3332203d3e20323635393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:400c::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:ba:9f:0a:13:bc:c4:3c:0c:ec:97:c0:af:7c:33:9f:ee:1f:
         b0:ab:00:f8:b5:58:d7:a2:9b:7e:63:50:73:f7:70:66:dd:df:
         fa:d6:c6:0e:31:df:f5:a5:cf:b8:b5:33:e8:a6:7c:64:82:ab:
         68:2c:2c:8c:73:57:2d:76:b3:0c:03:64:8d:e9:07:17:9c:ad:
         11:8a:d5:ea:e2:0c:44:27:29:c3:3a:08:c6:df:a3:bd:8b:c6:
         cf:e8:42:c4:c3:b7:66:1f:96:c9:e8:9f:c3:2f:6d:a5:ab:95:
         39:4e:70:22:6f:cc:dc:d7:52:c1:e1:51:b4:a7:a3:1c:5d:d1:
         66:3b:9a:5d:13:64:91:32:c8:69:37:ba:23:5c:1b:00:02:d6:
         67:c5:15:30:39:e7:30:cd:a5:e3:3a:3b:45:17:97:fd:ad:77:
         e7:63:f0:1e:15:d9:0a:4b:8b:07:e9:51:30:ca:41:88:e8:ef:
         4c:9f:44:73:f2:8b:ca:94:8b:54:eb:96:0f:8d:8f:e4:3f:87:
         76:3f:bd:1f:99:f1:ab:8e:4f:b8:a8:95:df:6f:e9:f0:0f:85:
         42:42:41:05:52:5a:5f:cc:8b:f2:59:45:2f:01:77:3c:2f:b7:
         c4:81:a1:ee:68:e6:bc:0d:00:1b:bc:58:78:3b:86:a7:85:ef:
         0a:0d:ac:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:27:32 2025 by rpki-client