Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/0/323830343a6438303a3a2f33332d3333203d3e203532363335.roa
File:                     323830343a6438303a3a2f33332d3333203d3e203532363335.roa (raw, json)
Hash identifier:          47XgMhCsYEQi3P98kgOTpat/dUNaCYIArjaNQSWBaic=
Subject key identifier:   3B:54:7C:B0:BF:4D:6C:70:1A:04:65:DF:4B:B3:EC:2C:44:A4:F7:73
Certificate issuer:       /CN=63ED338701F5B4BCE8EF3D9881EE5EF1299FD237
Certificate serial:       08B2C5F00A546F4836A2501160249463383002CB
Authority key identifier: 63:ED:33:87:01:F5:B4:BC:E8:EF:3D:98:81:EE:5E:F1:29:9F:D2:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/63ED338701F5B4BCE8EF3D9881EE5EF1299FD237.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/0/323830343a6438303a3a2f33332d3333203d3e203532363335.roa
Signing time:             Sat 24 Sep 2022 18:48:28 +0000
ROA not before:           Sat 24 Sep 2022 18:43:28 +0000
ROA not after:            Sat 23 Sep 2023 18:48:28 +0000
asID:                     52635
IP address blocks:        2804:d80::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:b2:c5:f0:0a:54:6f:48:36:a2:50:11:60:24:94:63:38:30:02:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63ED338701F5B4BCE8EF3D9881EE5EF1299FD237
        Validity
            Not Before: Sep 24 18:43:28 2022 GMT
            Not After : Sep 23 18:48:28 2023 GMT
        Subject: CN=3B547CB0BF4D6C701A0465DF4BB3EC2C44A4F773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:29:cd:7a:61:34:44:84:68:e6:cd:e2:59:7b:
                    fc:df:e4:23:d7:4d:65:8b:a2:37:10:d9:49:fd:d0:
                    0e:0b:1f:23:da:3f:d5:ea:e0:d6:d7:f6:78:ff:e1:
                    03:e5:84:06:41:16:b2:65:c9:bb:bb:39:e4:89:58:
                    22:6a:c7:c2:9e:4f:56:73:f1:84:72:ad:0b:60:06:
                    38:df:e8:06:93:5a:fb:e4:5b:2b:08:ff:6c:d6:e4:
                    50:b2:4a:44:5f:20:62:82:ad:a7:56:95:45:89:e5:
                    6c:ba:88:fd:c6:13:3c:01:4f:0c:de:e7:42:e3:cc:
                    8d:41:fe:b0:4e:95:38:31:31:a8:3c:d7:f9:59:59:
                    34:6e:93:b7:d4:48:a1:77:5b:c6:b1:38:74:4e:67:
                    fb:ae:be:7c:97:b8:8f:25:f6:04:1a:5f:23:50:9b:
                    68:df:3b:c7:44:44:bd:3f:e7:df:78:ad:7f:1c:b8:
                    16:5c:f6:90:3b:e4:1d:14:52:80:66:26:61:74:e9:
                    1d:c2:81:ef:8c:bc:93:8d:32:5c:47:10:06:9e:a9:
                    2e:3c:1c:fc:5f:4a:c9:b5:a5:e7:df:84:cd:e6:6c:
                    34:ee:f8:a5:10:e2:d3:50:a3:b2:0e:ae:b4:cd:5d:
                    d4:a6:68:28:c6:97:cc:42:77:66:0e:67:d2:98:9e:
                    9e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:54:7C:B0:BF:4D:6C:70:1A:04:65:DF:4B:B3:EC:2C:44:A4:F7:73
            X509v3 Authority Key Identifier:
                keyid:63:ED:33:87:01:F5:B4:BC:E8:EF:3D:98:81:EE:5E:F1:29:9F:D2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/0/63ED338701F5B4BCE8EF3D9881EE5EF1299FD237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/63ED338701F5B4BCE8EF3D9881EE5EF1299FD237.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/0/323830343a6438303a3a2f33332d3333203d3e203532363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d80::/33

    Signature Algorithm: sha256WithRSAEncryption
         6c:c5:f0:06:e9:7d:b0:ba:3b:a3:48:7c:c5:aa:4b:04:48:4e:
         f9:16:1e:0f:dd:64:85:97:de:70:fa:da:41:61:cf:ac:3e:54:
         8a:e2:6b:7e:96:15:a8:5e:fd:b5:1e:7a:93:15:f0:d9:54:45:
         04:ed:b7:f2:8e:52:3f:a4:33:43:86:96:40:a1:40:95:f2:8d:
         7f:7d:b9:f1:d7:b0:a6:84:06:d1:37:96:07:90:56:cd:53:0f:
         59:8f:07:7b:a6:dd:a3:6e:7c:2c:02:a9:27:f9:d6:ce:94:8c:
         27:76:1a:b4:00:60:87:a4:5e:23:6f:78:03:28:07:5e:31:58:
         df:cc:23:81:c8:e5:c7:04:a7:4a:72:55:80:3d:c8:93:e1:f7:
         43:e5:03:40:ce:8a:c8:55:82:ea:0c:1e:16:59:75:b3:12:03:
         b3:a1:49:dc:3a:25:9a:fd:03:31:30:ea:9f:aa:f9:6f:25:60:
         1c:eb:8e:9d:27:33:b7:df:14:69:af:dd:2f:2a:73:0b:11:a8:
         b3:99:3e:a7:26:23:9a:66:1f:d4:c3:8c:4d:5f:ac:73:24:10:
         96:56:62:e0:3c:cf:0b:ab:52:4a:0c:00:c8:cd:ed:e7:f5:b1:
         32:ac:09:36:68:08:be:c7:55:47:32:a6:09:3e:52:c3:54:35:
         a7:f9:92:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:43 2025 by rpki-client