Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a6164383a336638303a3a2f34312d3431203d3e20323632343934.roa
File:                     323830343a6164383a336638303a3a2f34312d3431203d3e20323632343934.roa (raw, json)
Hash identifier:          XVIkXCL3zAYQjnOjvYeLeaUeoTvplwsEznsKTo/hlgs=
Subject key identifier:   64:13:AC:2E:74:10:50:16:4A:84:4E:5F:2F:8F:A4:05:11:E1:C3:C2
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       3ECD393DA6C927CA1663B4C2C2E62EBE4B1748B7
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a6164383a336638303a3a2f34312d3431203d3e20323632343934.roa
Signing time:             Sat 24 Feb 2024 01:13:09 +0000
ROA not before:           Sat 24 Feb 2024 01:08:09 +0000
ROA not after:            Mon 24 Feb 2025 01:13:09 +0000
asID:                     262494
IP address blocks:        2804:ad8:3f80::/41 maxlen: 41
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:cd:39:3d:a6:c9:27:ca:16:63:b4:c2:c2:e6:2e:be:4b:17:48:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Feb 24 01:08:09 2024 GMT
            Not After : Feb 24 01:13:09 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:7e:5b:36:1f:c5:07:c7:f8:d7:86:12:1d:81:
                    1e:c6:9e:1c:8d:69:0f:11:3f:85:0d:d9:dc:05:c0:
                    02:7a:27:65:bc:9c:8a:9a:36:ae:ba:d2:37:26:24:
                    e9:f6:a9:b1:6f:21:a9:c0:a0:8a:78:80:13:e0:0c:
                    2e:b6:ae:e6:3f:54:52:f7:e3:39:21:5d:be:cd:f4:
                    aa:66:93:ac:6d:75:30:f0:bc:62:26:01:b8:4d:f6:
                    36:78:84:a4:b2:80:e8:bb:ca:f8:8c:41:58:02:87:
                    a7:4d:57:7e:cb:7a:e6:26:f4:8e:5b:e4:2f:fe:ff:
                    43:2e:ab:5b:8d:f9:2e:88:aa:7b:7f:63:c9:97:11:
                    af:44:d2:1c:bb:aa:ad:0b:90:06:1e:09:c1:29:52:
                    51:4b:83:b3:17:fb:17:e4:98:6e:a6:db:d5:0d:af:
                    00:33:d2:5b:f0:5e:f4:e4:25:ca:e2:e9:90:41:f6:
                    14:38:43:18:d6:b8:bf:85:5d:c3:99:12:0d:f5:ad:
                    2f:eb:78:67:16:ef:8e:ec:c8:9d:ec:63:e2:a6:ea:
                    a9:fa:be:24:64:84:0d:2a:5a:65:74:c1:18:9e:92:
                    ba:16:b8:20:c9:ee:85:63:e3:2c:95:5c:8c:23:b3:
                    37:dc:91:b1:eb:ba:04:98:61:bc:38:9b:88:51:65:
                    25:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:13:AC:2E:74:10:50:16:4A:84:4E:5F:2F:8F:A4:05:11:E1:C3:C2
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a6164383a336638303a3a2f34312d3431203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ad8:3f80::/41

    Signature Algorithm: sha256WithRSAEncryption
         10:4a:26:65:e4:a4:3e:8a:dc:b1:7c:45:5f:19:52:e6:1e:3b:
         d7:a7:54:0a:b8:d2:2a:71:c4:02:bf:7a:3a:5e:ec:e3:10:7f:
         54:b6:7a:da:95:c7:4f:b8:75:69:53:65:b5:24:a5:82:ae:12:
         35:0d:a5:fa:9b:77:c9:21:64:56:e9:7b:3d:80:ed:2c:c0:4a:
         17:ba:0a:1c:3e:52:19:07:39:ce:d7:ea:f8:0b:5e:ef:bd:c5:
         60:8e:93:ff:71:09:93:de:f5:d8:c2:d2:91:eb:6d:85:a3:6c:
         44:e5:1f:cf:90:6d:f5:c0:70:9c:11:7e:c6:61:25:91:5e:3d:
         18:2d:47:38:a1:87:01:f5:16:5b:9f:f1:94:f7:07:f4:bb:ea:
         16:bd:18:2a:b9:1f:3c:f4:25:fa:fc:50:64:10:31:e7:9a:9a:
         bc:32:30:83:1c:87:33:d9:d7:23:ae:52:5a:8b:63:47:30:2a:
         77:b2:36:ba:dc:da:1f:58:ee:c1:c6:c2:4c:1a:8f:3b:f7:5f:
         b1:ad:29:c6:af:33:6f:1a:24:d8:7d:8a:3c:8c:f7:3d:fe:95:
         a9:28:0d:fa:07:0e:e6:ac:8d:47:64:5e:45:fb:58:47:6d:aa:
         57:1e:a4:e4:d4:cd:46:69:3c:99:25:58:2e:f2:bc:60:b1:94:
         15:6f:39:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:27:44 2025 by rpki-client