Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Vs5mJ5W2NmbeRfyZKuE4bRKbNMnHASaMzf8cfhGfzp/0/323830343a373961383a3a2f33322d3336203d3e20323731333139.roa
File:                     323830343a373961383a3a2f33322d3336203d3e20323731333139.roa (raw, json)
Hash identifier:          npIJyMakCo0B8nto0lhVZ1ucwRkfoMkv5OkiCSt5BYM=
Subject key identifier:   97:C9:F6:E6:DF:9B:BA:CA:A2:EA:DC:48:99:47:BA:2B:15:57:14:72
Certificate issuer:       /CN=851AE993A8C9FB95FFC90A307B454F18C398DCEA
Certificate serial:       54FAF022FBE285990C41F5E3A59FA01F7C65AFFB
Authority key identifier: 85:1A:E9:93:A8:C9:FB:95:FF:C9:0A:30:7B:45:4F:18:C3:98:DC:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/851AE993A8C9FB95FFC90A307B454F18C398DCEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Vs5mJ5W2NmbeRfyZKuE4bRKbNMnHASaMzf8cfhGfzp/0/323830343a373961383a3a2f33322d3336203d3e20323731333139.roa
Signing time:             Sat 19 Nov 2022 12:16:27 +0000
ROA not before:           Sat 19 Nov 2022 12:11:27 +0000
ROA not after:            Sat 18 Nov 2023 12:16:27 +0000
asID:                     271319
IP address blocks:        2804:79a8::/32 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:fa:f0:22:fb:e2:85:99:0c:41:f5:e3:a5:9f:a0:1f:7c:65:af:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=851AE993A8C9FB95FFC90A307B454F18C398DCEA
        Validity
            Not Before: Nov 19 12:11:27 2022 GMT
            Not After : Nov 18 12:16:27 2023 GMT
        Subject: CN=97C9F6E6DF9BBACAA2EADC489947BA2B15571472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:68:43:f2:fd:53:70:11:b4:80:50:02:77:3f:
                    15:ed:0b:a3:7f:4c:5e:6a:63:40:b4:6f:d0:84:75:
                    66:17:57:65:6a:d5:50:ac:f5:21:04:30:74:58:bc:
                    2f:de:22:5b:25:f0:59:b3:a3:a8:13:0b:8d:8d:6f:
                    ce:32:1b:13:cb:b9:44:3b:c2:35:29:7d:cb:69:26:
                    c5:3c:9d:69:58:81:96:0b:0a:c4:70:14:3a:17:4a:
                    3f:70:0f:b5:4e:7f:94:ae:13:cd:ce:16:d5:65:57:
                    f8:dd:52:3c:2c:b3:ea:6b:63:7d:9d:7c:c0:e9:ee:
                    b1:83:92:ae:6d:45:57:af:48:68:4d:7d:11:41:7f:
                    e2:4d:6c:8d:a4:8e:3d:d1:27:cc:f0:3c:52:87:09:
                    83:bf:67:d2:f3:e8:44:67:c7:76:95:83:5c:ce:1d:
                    b7:50:31:55:7d:cd:43:a7:9a:12:ce:c7:16:5d:57:
                    6b:b6:6e:90:bb:51:18:f5:aa:35:3e:66:0d:cf:a4:
                    61:45:c5:38:7d:ce:11:dc:52:9e:47:58:76:72:15:
                    32:29:72:9f:3f:35:c1:75:7b:9f:1e:5b:a5:bd:3e:
                    02:30:0a:d0:27:cb:52:d7:1a:21:e0:ba:d9:7f:e3:
                    12:f5:8c:ef:13:9e:5d:47:9d:66:60:37:aa:1b:d7:
                    f2:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:C9:F6:E6:DF:9B:BA:CA:A2:EA:DC:48:99:47:BA:2B:15:57:14:72
            X509v3 Authority Key Identifier:
                keyid:85:1A:E9:93:A8:C9:FB:95:FF:C9:0A:30:7B:45:4F:18:C3:98:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Vs5mJ5W2NmbeRfyZKuE4bRKbNMnHASaMzf8cfhGfzp/0/851AE993A8C9FB95FFC90A307B454F18C398DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/851AE993A8C9FB95FFC90A307B454F18C398DCEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Vs5mJ5W2NmbeRfyZKuE4bRKbNMnHASaMzf8cfhGfzp/0/323830343a373961383a3a2f33322d3336203d3e20323731333139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:79a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:09:b3:5c:9a:db:ed:e1:c7:98:ba:0f:85:05:10:6c:64:7f:
         ef:27:06:1f:d2:d0:91:3d:33:29:be:d1:00:1c:57:aa:88:06:
         9b:84:ce:c3:8e:fa:eb:50:c0:b9:36:2e:eb:bc:ed:5b:36:00:
         fc:d6:a6:cf:6d:0d:4e:4f:37:39:60:58:b5:02:a3:50:45:d7:
         9c:5f:42:3c:54:06:97:de:24:9d:15:bd:6f:c3:9f:e3:f2:72:
         55:68:fd:a4:e4:ed:d7:f0:7f:2f:d2:72:52:67:24:cb:8c:1e:
         11:98:5a:19:8e:51:4e:53:16:5f:2a:ee:20:3c:57:e8:92:6b:
         fc:c8:56:da:2a:15:9c:b4:5e:65:96:b8:b5:d0:26:66:7c:19:
         92:8e:a3:4d:e9:28:bb:4f:41:a5:35:e0:3d:a2:ec:bb:ad:c9:
         e6:31:a8:17:ce:b5:73:41:dd:ea:b7:f0:ef:0a:bf:50:9d:35:
         ac:74:09:44:b5:d1:ca:f8:7d:52:90:28:3b:d2:45:25:5a:e0:
         a7:46:dc:4f:3d:05:d0:5b:0d:4a:58:93:cd:8c:b1:ae:cf:b3:
         77:82:7a:92:76:49:f7:ac:68:97:3f:7e:ae:9f:b1:3a:33:0c:
         49:08:74:c1:6c:a1:0b:b4:d3:0c:b5:df:f0:65:dd:68:af:c9:
         3f:c8:2f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:46:08 2025 by rpki-client