Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/0/323830313a62363a3a2f33322d3332203d3e20323633303833.roa
File:                     323830313a62363a3a2f33322d3332203d3e20323633303833.roa (raw, json)
Hash identifier:          7i2XwdJL3jdYjOb8x/YIVGonQUQ32lZWm/Kkf0qxd18=
Subject key identifier:   C3:45:4D:57:C4:80:88:4E:46:8A:92:C2:F2:41:54:16:C0:EF:93:DE
Certificate issuer:       /CN=142F10DB203FAFE2CD170E5639DCA6B17B056BA3
Certificate serial:       76C1DFE153D0673B8E4FCD5B8D1867B991EC2239
Authority key identifier: 14:2F:10:DB:20:3F:AF:E2:CD:17:0E:56:39:DC:A6:B1:7B:05:6B:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/142F10DB203FAFE2CD170E5639DCA6B17B056BA3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/0/323830313a62363a3a2f33322d3332203d3e20323633303833.roa
Signing time:             Wed 25 Jan 2023 19:42:35 +0000
ROA not before:           Wed 25 Jan 2023 19:37:35 +0000
ROA not after:            Wed 24 Jan 2024 19:42:35 +0000
asID:                     263083
IP address blocks:        2801:b6::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:c1:df:e1:53:d0:67:3b:8e:4f:cd:5b:8d:18:67:b9:91:ec:22:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=142F10DB203FAFE2CD170E5639DCA6B17B056BA3
        Validity
            Not Before: Jan 25 19:37:35 2023 GMT
            Not After : Jan 24 19:42:35 2024 GMT
        Subject: CN=C3454D57C480884E468A92C2F2415416C0EF93DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:23:2d:70:8c:6f:eb:68:9e:f1:f4:c6:50:6e:
                    88:ff:44:22:09:c0:2a:53:9c:7c:f2:f5:50:78:cf:
                    3a:08:19:d0:10:57:e6:7c:df:01:69:8b:b3:53:34:
                    ee:a1:92:55:ca:27:17:2f:ea:f2:e5:dd:70:a9:2c:
                    7f:d1:bf:c0:13:31:2b:f7:b3:ee:a9:00:db:69:4b:
                    d8:76:40:a1:fb:54:ed:b4:7a:21:8f:b2:11:3a:21:
                    dc:7c:db:9a:a8:9c:b6:7c:53:80:cd:76:24:a6:44:
                    4d:f9:d8:88:61:57:3c:62:d8:e7:e5:d1:78:9f:20:
                    f9:23:e4:52:62:cb:e5:58:b4:37:fb:00:7e:71:d9:
                    29:e0:27:02:e3:0e:68:23:8d:30:69:43:fe:12:c1:
                    24:86:38:a3:75:d8:38:7a:56:c1:1b:dc:95:25:b7:
                    bf:66:d0:3b:08:7e:36:43:c2:42:eb:38:7c:f7:f7:
                    34:90:cb:8f:f7:36:2d:ce:8e:df:5f:35:9c:77:39:
                    81:62:b4:45:73:e8:56:c6:87:62:03:f0:dc:68:bf:
                    f0:3a:cf:6e:ac:08:71:f3:12:09:14:c9:fd:e8:c4:
                    f5:11:04:04:ac:2d:ef:c0:ab:da:4a:fb:60:53:5c:
                    0e:70:7a:af:ea:4c:4b:00:fb:b2:50:29:71:ab:5d:
                    2f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:45:4D:57:C4:80:88:4E:46:8A:92:C2:F2:41:54:16:C0:EF:93:DE
            X509v3 Authority Key Identifier:
                keyid:14:2F:10:DB:20:3F:AF:E2:CD:17:0E:56:39:DC:A6:B1:7B:05:6B:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/0/142F10DB203FAFE2CD170E5639DCA6B17B056BA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/142F10DB203FAFE2CD170E5639DCA6B17B056BA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/0/323830313a62363a3a2f33322d3332203d3e20323633303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:b6::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:b3:39:2d:7e:2e:07:ab:94:45:5b:b2:a8:d3:79:5b:74:5b:
         d1:05:ed:77:e1:6f:8a:6e:bf:1d:1a:1b:cd:dd:ea:e6:47:59:
         a1:65:cd:8b:70:c1:e1:38:d6:88:48:3b:74:cc:50:bf:47:fc:
         11:54:25:fc:7e:4a:6a:cb:e7:6a:c1:8f:13:cf:0b:a3:dc:9d:
         67:4a:dd:9b:9f:f4:ff:9e:e6:f7:47:39:f6:3c:64:c1:4b:97:
         84:ca:0d:93:26:3c:12:57:c8:d3:17:7f:83:92:44:df:a9:d8:
         6e:1c:d1:52:fd:6e:df:6e:09:e1:bb:ba:c7:40:ed:77:7d:06:
         35:32:ed:d2:66:55:96:cd:1d:c8:b8:1b:8b:a7:c3:87:a5:01:
         70:c3:e5:36:e4:82:dc:ab:28:b5:d9:75:f8:75:e4:24:22:c5:
         45:46:7a:39:cb:04:b5:3f:12:3d:3c:3a:f5:58:bb:be:ff:cd:
         5a:2b:a0:e8:1d:85:4f:78:9d:9c:1d:ac:f9:be:01:bc:ba:00:
         eb:af:54:e5:45:19:e6:ca:ff:08:2a:ed:e7:1d:56:bb:57:6d:
         77:e6:7b:0b:b9:15:dc:31:d3:f7:0e:d9:f4:e0:a3:af:23:b5:
         0d:d7:82:95:23:f6:a4:ca:07:95:d4:db:4d:aa:51:6b:4b:d4:
         5d:04:66:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:02 2025 by rpki-client