Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/1/323830343a353865303a3a2f33322d3334203d3e20323638313535.roa
File:                     323830343a353865303a3a2f33322d3334203d3e20323638313535.roa (raw, json)
Hash identifier:          Q39AfjNX4aMzt8KL49GJa/MASfbKPSxLl5QZ7pHNOQ8=
Subject key identifier:   4F:94:4A:84:8C:77:DC:3E:44:D3:18:33:CE:0B:B7:3C:58:E4:65:DB
Certificate issuer:       /CN=09B85FA7726BDDF717827F3B06CC5A3113D7D202
Certificate serial:       53BE9A4E8C2161F00879583D447EF1419EC6F792
Authority key identifier: 09:B8:5F:A7:72:6B:DD:F7:17:82:7F:3B:06:CC:5A:31:13:D7:D2:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B85FA7726BDDF717827F3B06CC5A3113D7D202.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/1/323830343a353865303a3a2f33322d3334203d3e20323638313535.roa
Signing time:             Fri 26 Apr 2024 17:13:04 +0000
ROA not before:           Fri 26 Apr 2024 17:08:04 +0000
ROA not after:            Fri 25 Apr 2025 17:13:04 +0000
asID:                     268155
IP address blocks:        2804:58e0::/32 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:be:9a:4e:8c:21:61:f0:08:79:58:3d:44:7e:f1:41:9e:c6:f7:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09B85FA7726BDDF717827F3B06CC5A3113D7D202
        Validity
            Not Before: Apr 26 17:08:04 2024 GMT
            Not After : Apr 25 17:13:04 2025 GMT
        Subject: CN=4F944A848C77DC3E44D31833CE0BB73C58E465DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:73:83:33:01:14:1d:4c:e5:b7:56:b0:01:57:
                    2a:5f:10:6c:8b:c5:6c:e9:d0:f6:5b:ce:e3:c2:ec:
                    d1:c2:17:07:44:98:06:37:35:8e:f4:cf:91:64:71:
                    24:ae:52:df:04:89:ad:3a:0c:9c:73:66:1a:13:0c:
                    d5:c6:88:a6:d1:0b:aa:0c:70:c3:c2:25:08:5d:d0:
                    bd:55:8d:f6:fc:1c:43:9d:8c:9f:38:87:9c:ba:dd:
                    fc:be:02:3f:13:a0:14:06:20:fc:cb:6c:e6:49:c2:
                    fe:a6:3a:e1:04:fd:79:c0:4a:14:d2:36:db:74:d0:
                    f3:27:0c:9c:15:d2:86:58:dc:5d:aa:4b:73:a6:5a:
                    c7:c4:29:4b:c0:4b:84:4d:af:7d:bc:ed:2f:03:25:
                    56:5c:24:63:1e:4c:d5:9f:23:f5:48:6c:eb:49:f7:
                    9f:5c:cd:97:9f:72:ba:af:e8:5c:ce:bf:44:ef:b1:
                    dd:d8:00:78:c7:9c:ec:60:4c:da:33:50:2c:a4:02:
                    83:10:4e:53:48:54:6f:97:b2:ec:3e:a7:67:b6:7f:
                    17:10:ad:0d:2e:c0:f6:b2:b3:8a:cd:b9:2d:21:16:
                    07:1b:81:62:2c:ae:ff:4a:38:64:dd:df:43:de:45:
                    ed:8a:85:d5:d7:91:a2:77:b5:f4:4b:f1:46:ed:28:
                    42:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:94:4A:84:8C:77:DC:3E:44:D3:18:33:CE:0B:B7:3C:58:E4:65:DB
            X509v3 Authority Key Identifier:
                keyid:09:B8:5F:A7:72:6B:DD:F7:17:82:7F:3B:06:CC:5A:31:13:D7:D2:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/1/09B85FA7726BDDF717827F3B06CC5A3113D7D202.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B85FA7726BDDF717827F3B06CC5A3113D7D202.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/1/323830343a353865303a3a2f33322d3334203d3e20323638313535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:58e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:d8:7c:ca:7c:75:6c:e4:09:00:e0:a3:b3:46:54:be:2a:6c:
         aa:ad:e5:ea:f4:4b:ea:55:06:7a:6c:a0:24:b4:f0:92:0f:23:
         90:57:73:42:76:12:c1:7b:bb:bf:25:c0:5e:21:c2:e8:b5:52:
         26:b1:34:4b:eb:31:f0:79:c5:e9:aa:e7:06:28:bb:35:89:30:
         3c:ed:ba:ab:ee:e9:25:a6:4d:86:71:b9:14:44:61:3e:3b:39:
         39:26:55:24:87:1f:9c:f5:ce:06:2b:ba:41:95:3e:f1:9d:de:
         54:97:36:99:c6:98:4d:f9:90:57:86:0f:cb:32:70:b8:aa:85:
         a8:40:c8:6b:6d:fb:cc:df:54:db:71:8c:b9:2a:cf:27:c4:ea:
         09:bc:82:35:6e:b3:52:90:ec:13:db:47:6f:a6:3b:2f:c4:8a:
         63:7d:2d:ca:e5:d7:56:3c:f7:28:a2:85:a2:26:72:0d:47:7e:
         9e:00:cf:76:f5:aa:6e:28:75:f5:49:4d:60:80:35:51:d0:9a:
         aa:65:78:99:09:ea:57:9d:11:74:94:38:44:84:c6:c3:71:fc:
         aa:f3:50:75:65:49:89:2b:85:d6:a7:35:42:95:ef:ea:10:43:
         6b:f3:f3:9c:2f:5d:bf:10:66:ba:56:56:34:a5:58:bb:3e:3d:
         26:d4:f5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:35:09 2025 by rpki-client