Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3vxbPjVs5RkHJ6PV2LBHGzhmUaBYjrCptPKRHrJCMEJu/0/323830343a376562383a3a2f33322d3332203d3e20323731363433.roa
File:                     323830343a376562383a3a2f33322d3332203d3e20323731363433.roa (raw, json)
Hash identifier:          AtXV0c7dalM/9tNgKz2hc9qkiqfOIp2taCOj4RNHZKo=
Subject key identifier:   10:CD:FC:79:80:27:E6:FC:05:0E:51:49:89:35:29:64:24:84:3B:3F
Certificate issuer:       /CN=A5AD026080AD9FE55C60BEDFE74E0CA87D7BF228
Certificate serial:       7284E8EA1458D03F31AB3B604BAA66F1740F0B97
Authority key identifier: A5:AD:02:60:80:AD:9F:E5:5C:60:BE:DF:E7:4E:0C:A8:7D:7B:F2:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5AD026080AD9FE55C60BEDFE74E0CA87D7BF228.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3vxbPjVs5RkHJ6PV2LBHGzhmUaBYjrCptPKRHrJCMEJu/0/323830343a376562383a3a2f33322d3332203d3e20323731363433.roa
Signing time:             Tue 24 Oct 2023 04:36:42 +0000
ROA not before:           Tue 24 Oct 2023 04:31:42 +0000
ROA not after:            Tue 22 Oct 2024 04:36:42 +0000
asID:                     271643
IP address blocks:        2804:7eb8::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:84:e8:ea:14:58:d0:3f:31:ab:3b:60:4b:aa:66:f1:74:0f:0b:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5AD026080AD9FE55C60BEDFE74E0CA87D7BF228
        Validity
            Not Before: Oct 24 04:31:42 2023 GMT
            Not After : Oct 22 04:36:42 2024 GMT
        Subject: CN=10CDFC798027E6FC050E51498935296424843B3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e5:98:e9:7a:3d:c4:52:b5:3a:81:16:a1:51:
                    e3:8a:ce:9e:17:44:07:d7:c2:f4:c7:b7:88:8b:1c:
                    9e:3d:ba:40:fd:f9:b2:e1:3e:1d:1a:50:9e:16:f5:
                    14:4d:e3:c4:94:fd:32:4a:f0:cb:d2:87:11:5b:41:
                    cd:ad:c3:bb:a4:24:7e:fd:f6:19:bf:a5:1f:49:7f:
                    58:14:f8:dd:94:b2:b3:7b:27:b3:34:47:0d:d4:2a:
                    81:e9:b5:23:41:ae:27:cd:77:9c:f2:d3:b4:4c:ae:
                    c5:ba:5f:cd:09:bc:6a:1b:79:99:11:51:39:35:7c:
                    5f:6b:ad:34:0d:a4:95:05:b4:f6:48:a4:ba:7f:aa:
                    86:aa:60:43:76:60:75:90:0d:34:f2:29:fe:47:e6:
                    d1:bd:5a:1f:ed:74:85:4f:06:f5:de:14:04:02:4e:
                    9d:08:38:f2:85:97:a0:9c:c0:58:e7:4e:ac:70:6d:
                    85:99:ed:03:55:7e:a2:45:6e:c3:a8:1a:0c:f0:74:
                    3c:af:15:04:86:90:07:47:1f:de:e5:cf:78:a1:dc:
                    fa:27:09:e9:8a:9f:b7:68:5b:4a:fd:20:8f:19:e0:
                    97:3f:fd:9e:fc:19:a3:b2:59:a6:d8:b8:c1:75:e7:
                    99:e2:a7:57:06:d1:2e:11:0b:a6:fb:ba:05:32:f7:
                    43:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:CD:FC:79:80:27:E6:FC:05:0E:51:49:89:35:29:64:24:84:3B:3F
            X509v3 Authority Key Identifier:
                keyid:A5:AD:02:60:80:AD:9F:E5:5C:60:BE:DF:E7:4E:0C:A8:7D:7B:F2:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3vxbPjVs5RkHJ6PV2LBHGzhmUaBYjrCptPKRHrJCMEJu/0/A5AD026080AD9FE55C60BEDFE74E0CA87D7BF228.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5AD026080AD9FE55C60BEDFE74E0CA87D7BF228.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3vxbPjVs5RkHJ6PV2LBHGzhmUaBYjrCptPKRHrJCMEJu/0/323830343a376562383a3a2f33322d3332203d3e20323731363433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7eb8::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:56:a8:7b:2f:40:cf:8d:a1:8f:07:bf:eb:05:13:1e:dc:65:
         c1:c3:6c:79:a7:f5:68:02:69:76:0a:f3:02:17:29:65:4e:9d:
         df:89:e9:6a:d8:71:b8:53:7e:ab:f2:82:e0:5f:1c:b7:87:66:
         3a:ad:e0:f5:e8:80:f3:98:3a:c3:a0:a0:5d:9e:5b:85:f8:9d:
         4f:91:32:87:3e:2a:a9:5e:7b:dd:36:6a:35:7a:d5:7a:f5:af:
         b6:4e:55:20:81:6e:ef:f2:46:04:fd:ac:3b:3a:d7:7f:e6:85:
         72:91:21:8e:b2:5e:ac:13:c2:43:f8:7b:99:b2:95:29:39:b0:
         5f:7e:b2:36:10:3b:4d:4d:a5:a0:05:70:29:d0:55:b0:24:28:
         34:f2:a6:7f:4d:62:dd:c1:1b:c7:d0:0d:c8:4a:ca:9a:40:5d:
         cc:b2:39:f1:d0:e2:d3:bc:a4:0b:21:f8:a0:90:7c:bd:f0:75:
         10:a8:9b:1b:98:3d:9a:d7:e1:0a:95:ec:24:af:7f:c0:54:78:
         69:24:91:20:20:86:67:d6:e7:fa:6e:39:2a:2a:5f:4d:3f:3e:
         c8:69:97:7d:a9:b9:0e:3b:81:f7:c1:41:0b:76:41:c4:a0:44:
         f7:8b:ef:7c:b4:ec:36:ee:65:18:22:21:7c:8c:1f:44:07:3e:
         17:59:36:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:40:33 2025 by rpki-client