Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/323830343a323139303a383030303a3a2f33332d3333203d3e20323634353632.roa
File:                     323830343a323139303a383030303a3a2f33332d3333203d3e20323634353632.roa (raw, json)
Hash identifier:          dGRx8r2OyIAPKRtzq4X6dX7uzaoC74frc6meXwcCTm4=
Subject key identifier:   03:A6:B7:02:12:72:E3:2B:5C:3C:C6:77:B1:E5:BD:03:0F:56:F6:C1
Certificate issuer:       /CN=B1FD414C315A51B2503A7D1B9FE2EADA575BB03E
Certificate serial:       653BF60E8C8B36198E8725BA14BEB1E9C1B3B9EC
Authority key identifier: B1:FD:41:4C:31:5A:51:B2:50:3A:7D:1B:9F:E2:EA:DA:57:5B:B0:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1FD414C315A51B2503A7D1B9FE2EADA575BB03E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/323830343a323139303a383030303a3a2f33332d3333203d3e20323634353632.roa
Signing time:             Fri 05 May 2023 19:15:31 +0000
ROA not before:           Fri 05 May 2023 19:10:31 +0000
ROA not after:            Fri 03 May 2024 19:15:31 +0000
asID:                     264562
IP address blocks:        2804:2190:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:3b:f6:0e:8c:8b:36:19:8e:87:25:ba:14:be:b1:e9:c1:b3:b9:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1FD414C315A51B2503A7D1B9FE2EADA575BB03E
        Validity
            Not Before: May  5 19:10:31 2023 GMT
            Not After : May  3 19:15:31 2024 GMT
        Subject: CN=03A6B7021272E32B5C3CC677B1E5BD030F56F6C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:33:25:b2:77:ef:48:db:76:b2:4b:09:e2:30:
                    1f:95:67:3a:4e:01:f6:ce:e3:5f:3c:7e:51:13:f9:
                    6a:8c:fb:44:d6:1c:f6:3a:df:bc:8e:ff:06:2a:78:
                    63:98:9f:19:51:00:e0:24:3d:25:5b:d2:04:b2:2a:
                    22:b1:50:45:ef:1e:52:93:09:79:6a:56:9a:99:c1:
                    46:fc:76:32:ca:86:c1:0d:91:91:58:52:1a:eb:14:
                    bc:f2:89:f2:bb:7b:14:67:17:89:ee:88:5f:76:28:
                    60:4d:1c:55:ab:83:ca:a3:db:e5:ee:a7:ad:10:3d:
                    7e:44:62:92:5d:53:7b:6c:fc:54:34:ce:56:74:a6:
                    72:7f:a1:12:d4:10:d9:20:a3:fc:8d:91:03:41:47:
                    ad:67:62:a6:73:a7:49:2d:c8:10:8b:fb:2a:bf:c0:
                    6e:ff:f8:d7:79:69:1b:2b:63:85:ce:49:ea:e0:eb:
                    cb:d5:88:5f:4f:dd:fc:35:fd:85:ea:22:e9:18:5c:
                    a1:8a:cc:38:48:a3:3f:c0:2b:39:18:3b:16:64:33:
                    61:c6:1d:63:8f:7b:86:07:d3:2a:17:6d:39:92:cd:
                    dc:97:24:23:f4:0f:45:56:2b:26:bf:94:4e:9e:a1:
                    f2:01:09:40:be:1e:ed:b7:b0:88:a5:50:6c:35:1c:
                    79:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:A6:B7:02:12:72:E3:2B:5C:3C:C6:77:B1:E5:BD:03:0F:56:F6:C1
            X509v3 Authority Key Identifier:
                keyid:B1:FD:41:4C:31:5A:51:B2:50:3A:7D:1B:9F:E2:EA:DA:57:5B:B0:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/B1FD414C315A51B2503A7D1B9FE2EADA575BB03E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1FD414C315A51B2503A7D1B9FE2EADA575BB03E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/323830343a323139303a383030303a3a2f33332d3333203d3e20323634353632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2190:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         2b:3e:b6:35:9c:89:e5:e7:90:b1:d9:7b:05:e5:34:9b:2b:6f:
         d3:90:d5:27:f7:6e:c4:5a:f0:bd:0d:4f:39:7d:27:66:1b:e4:
         05:e9:cc:3b:40:5b:43:c8:1b:60:53:7e:ed:9c:32:22:80:52:
         5a:a6:c7:00:83:32:74:1b:3f:b2:84:b9:37:0d:ab:ad:31:04:
         37:d4:d8:ab:a9:f9:0e:c2:ce:fd:6f:9e:ea:42:27:4c:26:c9:
         f1:87:28:fc:2a:bf:60:3c:36:bb:b4:df:e3:fe:8c:a8:ea:82:
         05:6e:8a:8a:68:7e:4c:44:14:20:7f:f1:48:ef:e8:ad:fb:6b:
         3d:b3:f4:38:df:9d:a5:8a:3f:04:58:3c:32:ca:6a:37:e8:20:
         9f:c7:7b:ea:bb:97:fb:9d:03:98:a9:bd:e7:94:a1:e2:70:9c:
         bb:93:cc:61:a1:b6:d2:af:9a:e5:0d:99:b7:0c:34:18:2c:b3:
         15:97:2d:aa:b8:c9:b3:2b:07:9b:27:e7:8e:a6:ec:64:8e:08:
         56:52:f5:2f:46:7a:6f:b6:0d:d8:46:6c:13:ed:9c:09:37:63:
         c1:af:6d:f9:e5:5a:c5:db:aa:ce:f6:84:0f:65:7c:10:d8:8b:
         4e:03:f2:c3:95:43:cc:9a:24:43:5e:31:3e:1c:b9:9a:28:23:
         4c:b8:b6:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:34:57 2025 by rpki-client