Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/323830343a323732303a633030303a3a2f33342d3334203d3e20323633383738.roa
File:                     323830343a323732303a633030303a3a2f33342d3334203d3e20323633383738.roa (raw, json)
Hash identifier:          RLlSv/Z7iQTNPQH9wufaSCCcej1kqigE8kHP+UE1Y/M=
Subject key identifier:   1C:00:14:1C:EB:40:26:4E:41:6A:C2:86:CB:C5:EB:31:0B:F8:27:85
Certificate issuer:       /CN=3479A07990261201A4636EAD12C16D32507ECB61
Certificate serial:       097CFB4BD9A08B79218E1AD12684A7E5860C6ECC
Authority key identifier: 34:79:A0:79:90:26:12:01:A4:63:6E:AD:12:C1:6D:32:50:7E:CB:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3479A07990261201A4636EAD12C16D32507ECB61.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/323830343a323732303a633030303a3a2f33342d3334203d3e20323633383738.roa
Signing time:             Tue 16 Jan 2024 13:30:27 +0000
ROA not before:           Tue 16 Jan 2024 13:25:27 +0000
ROA not after:            Tue 14 Jan 2025 13:30:27 +0000
asID:                     263878
IP address blocks:        2804:2720:c000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:7c:fb:4b:d9:a0:8b:79:21:8e:1a:d1:26:84:a7:e5:86:0c:6e:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3479A07990261201A4636EAD12C16D32507ECB61
        Validity
            Not Before: Jan 16 13:25:27 2024 GMT
            Not After : Jan 14 13:30:27 2025 GMT
        Subject: CN=1C00141CEB40264E416AC286CBC5EB310BF82785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1d:e3:78:47:75:e4:31:06:5b:13:84:39:61:
                    c4:86:cf:e9:d5:7b:ba:f4:6b:e3:a7:05:f8:0b:0f:
                    8f:15:50:05:21:96:4c:63:36:b7:2a:40:03:5e:e4:
                    f6:83:ea:61:93:9f:82:e0:38:73:7f:08:27:d8:c7:
                    e4:9f:4f:58:3a:8f:9b:9b:5c:64:65:32:1f:99:17:
                    25:6d:b6:3b:ab:75:9d:19:74:04:11:79:e8:6d:77:
                    d1:9c:62:e0:6c:e5:e3:a0:18:73:ce:c5:9e:8a:e1:
                    b4:77:98:22:99:42:70:5a:4f:86:31:a0:57:99:be:
                    35:82:75:2e:d9:8b:dd:4d:29:79:32:d9:15:65:e1:
                    33:14:40:6b:78:0e:e2:10:ba:cb:b7:10:cd:c1:22:
                    31:f0:70:16:ed:52:a4:69:6e:a1:b7:77:6a:c3:df:
                    40:69:59:5e:71:e9:3f:62:b0:9f:44:2b:6d:55:30:
                    28:77:29:3c:86:05:d5:d0:22:9d:5b:2c:be:6b:a9:
                    86:f3:46:97:22:bc:d9:40:59:bb:d8:8a:3f:0f:03:
                    af:fe:a8:45:d2:10:45:de:5a:c0:a4:41:c7:e4:93:
                    f7:b5:ad:3d:a2:0d:1b:a7:93:2c:f3:ea:5d:47:33:
                    56:45:02:2b:ec:5d:02:22:3b:98:e3:21:07:06:60:
                    2c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:00:14:1C:EB:40:26:4E:41:6A:C2:86:CB:C5:EB:31:0B:F8:27:85
            X509v3 Authority Key Identifier:
                keyid:34:79:A0:79:90:26:12:01:A4:63:6E:AD:12:C1:6D:32:50:7E:CB:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/3479A07990261201A4636EAD12C16D32507ECB61.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3479A07990261201A4636EAD12C16D32507ECB61.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/323830343a323732303a633030303a3a2f33342d3334203d3e20323633383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2720:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         59:09:de:5c:e1:83:4b:94:ca:78:52:fc:30:13:90:2d:70:89:
         c4:9c:8f:d5:d7:9e:e3:07:a9:d6:04:32:6b:d6:16:a7:8f:01:
         67:a1:2d:4f:96:f5:56:19:6b:45:11:c6:58:00:b3:36:30:c3:
         4b:5a:64:c5:61:cb:35:39:5d:8d:93:f3:1d:b3:d1:c3:3c:5a:
         c4:ef:17:84:e9:b7:67:0d:ca:50:67:de:11:83:1d:12:9b:1e:
         55:c1:f3:96:30:00:bf:ee:7e:ed:d6:ee:84:70:d1:48:03:24:
         15:df:42:40:21:ef:8d:82:65:e3:27:4e:d2:86:b0:62:1a:08:
         fe:74:60:06:ed:b1:55:0b:dd:3c:40:db:20:99:51:8b:2f:25:
         a7:22:6e:85:f3:7b:30:26:20:ff:a2:73:d4:67:56:4f:89:4a:
         3f:90:16:b6:1a:37:75:28:4c:f7:90:e4:78:9a:b4:be:8a:12:
         e0:78:fa:ed:03:2c:6c:a2:e9:6e:5e:c7:bc:1b:83:09:d5:bc:
         14:10:94:53:a4:3f:37:3f:cf:95:bc:af:3c:7d:6f:bd:e8:d7:
         7e:f0:4a:ed:41:51:ef:0d:9e:df:58:f5:20:ee:54:48:f2:bd:
         18:39:b1:bb:6c:51:d9:bc:60:a2:f4:e6:c5:9b:4b:98:ee:82:
         db:31:3a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 06:01:59 2025 by rpki-client