Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44L5mqFbmPQ4e5WPfNQEJUvK3QQZ9VZSJcm4mMHTAis3/0/323830343a376362633a3a2f33332d3333203d3e20323731353135.roa
File:                     323830343a376362633a3a2f33332d3333203d3e20323731353135.roa (raw, json)
Hash identifier:          t4h3KgYwtcXZCTHerjB1TwbLiHKuyseii3FmTCqf2i0=
Subject key identifier:   B0:23:28:70:69:8D:05:9B:08:77:DA:4C:31:AE:B3:F9:55:8B:76:93
Certificate issuer:       /CN=C966BFE75D740DECD5CC886F943F0FBC4390193F
Certificate serial:       718C871CB98DBD9B51328020857E8C575A64EA73
Authority key identifier: C9:66:BF:E7:5D:74:0D:EC:D5:CC:88:6F:94:3F:0F:BC:43:90:19:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C966BFE75D740DECD5CC886F943F0FBC4390193F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44L5mqFbmPQ4e5WPfNQEJUvK3QQZ9VZSJcm4mMHTAis3/0/323830343a376362633a3a2f33332d3333203d3e20323731353135.roa
Signing time:             Tue 22 Aug 2023 15:25:43 +0000
ROA not before:           Tue 22 Aug 2023 15:20:43 +0000
ROA not after:            Tue 20 Aug 2024 15:25:43 +0000
asID:                     271515
IP address blocks:        2804:7cbc::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:8c:87:1c:b9:8d:bd:9b:51:32:80:20:85:7e:8c:57:5a:64:ea:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C966BFE75D740DECD5CC886F943F0FBC4390193F
        Validity
            Not Before: Aug 22 15:20:43 2023 GMT
            Not After : Aug 20 15:25:43 2024 GMT
        Subject: CN=B0232870698D059B0877DA4C31AEB3F9558B7693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:35:3b:f1:7d:a8:be:ac:83:01:c2:26:4d:42:
                    62:1c:8b:66:54:30:81:4a:2f:9f:2b:87:87:95:b7:
                    c9:1b:04:e0:ad:03:b9:d3:d9:e1:a6:47:8b:0c:14:
                    c2:f1:b4:78:8f:b9:7f:1b:ba:9f:2d:ac:9a:ae:dc:
                    86:8f:13:17:52:9d:ea:59:5e:75:d3:99:9c:84:b6:
                    40:f4:d0:f6:ce:af:f1:35:11:9f:07:f1:15:71:49:
                    90:1c:17:13:ba:ac:b1:13:ac:8d:29:cf:ac:36:64:
                    cf:d2:df:2c:29:7c:83:c5:cc:22:e8:c4:f2:48:23:
                    8d:24:b1:b5:e2:a1:c2:06:00:7c:6b:ea:ed:63:6a:
                    0d:56:48:69:1c:a0:c8:c2:7e:a4:3e:e3:0d:b2:11:
                    05:b5:0d:56:17:f7:e6:2b:0e:94:f0:70:9e:64:26:
                    3a:4b:4d:73:7f:c8:30:a5:c2:28:8e:5d:08:55:e6:
                    b4:52:84:0e:9a:33:15:a5:e5:29:0f:18:aa:49:80:
                    44:5c:c1:e0:40:a5:2f:c2:2c:80:82:30:ff:4b:2b:
                    bd:50:61:97:c6:0f:a5:97:2d:3d:94:d8:b8:ed:f9:
                    25:fd:69:7c:47:37:c1:07:8b:23:2a:e9:a4:41:b6:
                    60:b1:d2:b4:2b:35:c0:24:32:3d:55:3f:d8:04:b3:
                    e7:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:23:28:70:69:8D:05:9B:08:77:DA:4C:31:AE:B3:F9:55:8B:76:93
            X509v3 Authority Key Identifier:
                keyid:C9:66:BF:E7:5D:74:0D:EC:D5:CC:88:6F:94:3F:0F:BC:43:90:19:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44L5mqFbmPQ4e5WPfNQEJUvK3QQZ9VZSJcm4mMHTAis3/0/C966BFE75D740DECD5CC886F943F0FBC4390193F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C966BFE75D740DECD5CC886F943F0FBC4390193F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44L5mqFbmPQ4e5WPfNQEJUvK3QQZ9VZSJcm4mMHTAis3/0/323830343a376362633a3a2f33332d3333203d3e20323731353135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7cbc::/33

    Signature Algorithm: sha256WithRSAEncryption
         4c:b9:a2:8e:8a:c2:ff:8b:d3:e9:1f:15:3c:d9:bd:e8:13:d6:
         97:98:cc:06:53:c2:81:27:54:cd:3a:58:c4:f6:d7:5e:10:c1:
         4c:91:8c:cd:6e:fa:c1:d8:20:cd:a4:45:1a:08:fd:c9:f3:b6:
         31:51:4a:65:17:19:bf:47:88:8d:0d:1f:37:3f:a6:ba:8c:34:
         a4:96:e3:48:8b:55:bb:7d:1e:2d:2f:b9:f1:51:71:e2:21:ec:
         50:6f:10:92:45:d0:53:db:3d:92:8a:3a:c0:2d:d1:2e:33:ef:
         16:40:cc:8a:ab:8b:c3:c1:aa:4a:7a:d0:08:3b:7c:00:77:5f:
         32:2c:04:5c:eb:18:48:85:ec:e3:01:83:75:78:48:7f:03:ae:
         a5:35:7a:56:25:01:62:73:c9:42:0b:08:9e:76:04:a1:ab:a2:
         c5:93:2b:6b:6f:a8:f6:6a:e3:24:de:8a:a4:53:4b:17:7e:91:
         21:67:b9:d4:76:d4:34:de:87:bb:e9:44:f6:1c:4e:a9:7c:78:
         ae:e8:a5:0f:71:34:bd:a5:22:96:05:31:43:d5:08:b2:02:e8:
         0b:e9:b6:49:57:f3:71:3d:69:fc:e8:45:55:80:8a:af:7c:e0:
         45:19:b1:dd:f1:ea:fe:62:be:df:23:e0:b4:24:df:6a:57:16:
         4f:8a:eb:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 15:51:02 2025 by rpki-client