Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/323830343a346466303a343030303a3a2f33342d3334203d3e20323638323239.roa
File:                     323830343a346466303a343030303a3a2f33342d3334203d3e20323638323239.roa (raw, json)
Hash identifier:          Mm8CN3kMePtc3eWDgKsV6WM5b8hVGMD06s+1es6dadA=
Subject key identifier:   C8:A0:9E:56:B7:51:63:E8:A3:F4:B2:26:AD:7F:76:93:40:93:2E:45
Certificate issuer:       /CN=321510E0836AA48D9EE42A00551338BB403CE659
Certificate serial:       3DBEBD97DF2C9F436DC1992760FE6AD17A63761B
Authority key identifier: 32:15:10:E0:83:6A:A4:8D:9E:E4:2A:00:55:13:38:BB:40:3C:E6:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/321510E0836AA48D9EE42A00551338BB403CE659.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/323830343a346466303a343030303a3a2f33342d3334203d3e20323638323239.roa
Signing time:             Wed 03 Jul 2024 21:10:24 +0000
ROA not before:           Wed 03 Jul 2024 21:05:24 +0000
ROA not after:            Wed 02 Jul 2025 21:10:24 +0000
asID:                     268229
IP address blocks:        2804:4df0:4000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:be:bd:97:df:2c:9f:43:6d:c1:99:27:60:fe:6a:d1:7a:63:76:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=321510E0836AA48D9EE42A00551338BB403CE659
        Validity
            Not Before: Jul  3 21:05:24 2024 GMT
            Not After : Jul  2 21:10:24 2025 GMT
        Subject: CN=C8A09E56B75163E8A3F4B226AD7F769340932E45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:23:73:44:04:33:bb:38:e1:81:9e:e5:97:5d:
                    70:81:a7:79:d5:b6:d2:12:bf:0d:d7:6a:47:8e:0a:
                    98:2e:f9:44:ef:20:40:1f:53:31:77:28:37:28:b2:
                    08:35:85:68:69:53:90:89:e8:ac:ad:96:42:58:a6:
                    8c:da:07:b9:f8:0c:35:c0:97:a6:10:b4:5f:2a:31:
                    4c:69:a2:fd:2b:3e:3a:b4:68:c2:72:5f:b9:ee:d8:
                    3a:ee:34:6a:fa:38:40:52:e9:e9:17:42:ec:11:d3:
                    d7:36:bf:29:b9:19:d2:da:be:55:a5:68:3b:b2:61:
                    c5:d8:89:5c:5a:42:6d:75:a1:18:f6:64:2d:b4:d2:
                    25:64:f1:f8:f1:02:33:c6:89:8b:e0:7d:78:3b:8e:
                    71:88:b7:6d:18:ad:35:1d:c8:58:76:c3:7c:11:15:
                    4b:1e:51:72:80:09:c1:31:d8:c0:6a:3a:9d:c2:31:
                    7a:e9:c0:38:d1:74:00:32:2d:ed:c5:c2:86:6e:b7:
                    4b:ac:0e:67:b7:3c:15:19:5a:26:f4:0d:4b:c9:09:
                    8a:70:bf:78:22:3a:cb:b3:e2:3e:4b:5a:98:de:9c:
                    99:4a:b1:2b:cb:62:49:dd:82:e4:df:c3:a6:37:92:
                    8a:c4:25:85:be:0e:c8:97:42:d9:47:69:46:0e:11:
                    c1:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:A0:9E:56:B7:51:63:E8:A3:F4:B2:26:AD:7F:76:93:40:93:2E:45
            X509v3 Authority Key Identifier:
                keyid:32:15:10:E0:83:6A:A4:8D:9E:E4:2A:00:55:13:38:BB:40:3C:E6:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/321510E0836AA48D9EE42A00551338BB403CE659.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/321510E0836AA48D9EE42A00551338BB403CE659.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/323830343a346466303a343030303a3a2f33342d3334203d3e20323638323239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4df0:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         28:83:86:15:a4:ea:9a:f3:fd:ea:95:17:fe:8a:3a:d9:39:ae:
         e1:38:d3:cb:8f:6e:83:39:a2:3c:e4:19:36:90:11:46:f7:d8:
         98:e0:b5:fa:75:e8:ee:44:b3:95:6a:27:c0:bb:da:19:84:39:
         00:ee:29:35:c5:78:4b:c5:59:84:1a:74:09:d7:ed:2c:29:b7:
         66:c2:48:9a:e2:3f:af:b2:77:a5:2e:11:e1:8a:40:d5:f5:0d:
         d7:9c:8a:30:50:1c:a7:1f:39:bb:07:71:b8:90:b4:8e:f1:4c:
         52:a2:b5:ab:7b:70:f0:82:4a:cb:c2:e1:22:bf:f5:bd:5b:97:
         5b:bc:af:cc:82:21:7d:e0:21:4b:00:73:34:a8:cd:b7:74:fb:
         dc:33:80:8b:e8:fc:70:e6:21:b9:f5:50:73:54:ca:4e:04:f1:
         b2:0c:de:4a:98:1f:e5:88:93:ec:0a:9d:2a:c1:94:7b:29:19:
         97:14:d7:ee:94:28:51:70:a0:45:48:cf:60:3f:18:53:05:ab:
         6a:0b:f1:d5:ed:09:88:06:44:78:14:8b:8e:91:5c:c1:ac:2a:
         f3:7f:4d:a4:81:09:f1:53:64:d3:0e:12:22:ea:8e:a0:bd:07:
         29:22:1d:83:93:e4:09:76:1f:4f:17:e7:16:50:36:ce:94:e1:
         58:5d:5f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:29:26 2025 by rpki-client