Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4qZD2BREH61e8emMGG65i8456XSxuHW4ddojjmJvYHVJ/0/323830343a363732343a3a2f33322d3332203d3e20323639363036.roa
File:                     323830343a363732343a3a2f33322d3332203d3e20323639363036.roa (raw, json)
Hash identifier:          MgiVEb5i4CzGUdeRcV7h47bVSOX914XEJ6zEKpXgks0=
Subject key identifier:   52:C5:A8:AA:45:EA:48:ED:98:F6:DA:67:C2:69:E6:C9:BD:89:8E:B9
Certificate issuer:       /CN=85148194E7412878BCCDE25660F9052CF17D2FB1
Certificate serial:       0C8860108EC0E22D2FFBBFEBDFCEC443B74AE461
Authority key identifier: 85:14:81:94:E7:41:28:78:BC:CD:E2:56:60:F9:05:2C:F1:7D:2F:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85148194E7412878BCCDE25660F9052CF17D2FB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4qZD2BREH61e8emMGG65i8456XSxuHW4ddojjmJvYHVJ/0/323830343a363732343a3a2f33322d3332203d3e20323639363036.roa
Signing time:             Tue 22 Feb 2022 18:52:27 +0000
ROA not before:           Tue 22 Feb 2022 18:47:27 +0000
ROA not after:            Tue 21 Feb 2023 18:52:27 +0000
asID:                     269606
IP address blocks:        2804:6724::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:88:60:10:8e:c0:e2:2d:2f:fb:bf:eb:df:ce:c4:43:b7:4a:e4:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85148194E7412878BCCDE25660F9052CF17D2FB1
        Validity
            Not Before: Feb 22 18:47:27 2022 GMT
            Not After : Feb 21 18:52:27 2023 GMT
        Subject: CN=52C5A8AA45EA48ED98F6DA67C269E6C9BD898EB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:65:80:84:82:5e:19:06:10:72:ec:44:8c:de:
                    11:10:6d:e0:85:59:da:9a:c9:24:f7:02:c2:68:c9:
                    bf:05:44:c8:97:03:d6:1e:fe:19:d8:85:f8:a1:af:
                    da:cb:49:3e:82:3b:dc:a5:a7:5d:57:bd:6b:bd:d7:
                    c9:fb:04:f3:ce:46:53:ab:3c:be:f3:81:30:8f:75:
                    e4:12:9f:29:84:b9:75:bf:c4:ab:a9:2f:7c:57:b3:
                    db:da:01:1d:aa:e9:57:3b:b9:d1:19:dd:dc:30:c9:
                    20:df:24:29:1d:a8:7b:0e:12:bf:69:29:51:8d:fe:
                    a6:ec:28:0f:6e:18:f2:0f:55:a2:7c:25:a1:5d:a9:
                    e1:96:c1:53:00:29:e6:83:e1:82:75:27:32:f9:2a:
                    5a:88:a7:1c:96:a4:b2:7e:2a:1b:11:60:d8:bd:0e:
                    e4:f3:90:0c:96:46:04:64:b9:69:58:a8:b9:e8:09:
                    20:53:92:37:3d:1d:92:17:65:ca:ed:a3:d7:a6:27:
                    31:f2:14:d5:72:4e:2e:c5:8d:b7:2b:b2:5f:20:43:
                    c4:f7:ad:11:92:08:fb:b5:3c:ca:fc:8d:b4:c6:ee:
                    56:07:44:0d:a8:29:12:ce:3c:b3:6a:88:62:f7:1f:
                    1b:05:14:0b:e3:d3:a5:07:96:19:85:5e:77:51:cc:
                    0a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:C5:A8:AA:45:EA:48:ED:98:F6:DA:67:C2:69:E6:C9:BD:89:8E:B9
            X509v3 Authority Key Identifier:
                keyid:85:14:81:94:E7:41:28:78:BC:CD:E2:56:60:F9:05:2C:F1:7D:2F:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4qZD2BREH61e8emMGG65i8456XSxuHW4ddojjmJvYHVJ/0/85148194E7412878BCCDE25660F9052CF17D2FB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85148194E7412878BCCDE25660F9052CF17D2FB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4qZD2BREH61e8emMGG65i8456XSxuHW4ddojjmJvYHVJ/0/323830343a363732343a3a2f33322d3332203d3e20323639363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6724::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:a1:87:5a:67:ee:fb:af:81:28:8e:f7:70:dc:b6:93:bf:b3:
         77:fb:e0:11:79:3b:6d:12:d4:0d:b5:d2:02:63:a6:b5:01:12:
         d3:20:6a:b5:4c:63:02:c0:3b:5f:cc:3f:40:26:33:d2:b0:d6:
         b2:0b:f8:be:a6:d1:ac:69:af:ed:63:33:e9:17:ad:0c:43:cc:
         bb:cd:f0:ed:ef:c3:78:8a:6d:17:0b:e5:ff:dc:90:76:e4:e0:
         d5:2f:2f:63:29:8a:01:46:00:4a:0b:ee:c6:55:7d:d1:c4:4d:
         dc:f1:9d:27:d9:79:93:95:5f:e2:81:e4:59:ea:b5:83:74:35:
         fb:7e:9b:cb:35:ff:8e:34:aa:c5:1f:87:3a:a5:fc:c6:36:9b:
         b5:c6:3b:c6:6a:cd:79:b2:ba:5c:35:c3:00:37:d1:e3:e1:45:
         08:3b:aa:20:95:62:b3:e5:13:53:f5:1b:f8:ad:c1:a3:c5:14:
         f8:a5:b0:99:93:87:2c:08:af:b0:3d:60:f4:b4:55:ed:93:1e:
         a2:a7:fd:b2:5e:ff:8f:09:3e:45:da:31:d7:bb:08:b8:6e:e8:
         6c:43:13:b7:7f:21:3a:2d:1a:fa:4b:38:2d:e1:f4:a0:08:9a:
         38:9b:64:99:8e:e2:5e:57:ed:ec:d4:86:2a:5e:b1:ec:d1:e1:
         1d:e9:8c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:27 2025 by rpki-client