Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/323830343a373934343a3a2f33322d313238203d3e20323731323935.roa
File:                     323830343a373934343a3a2f33322d313238203d3e20323731323935.roa (raw, json)
Hash identifier:          WebKkNC7i41M815W3Tw9D3XV0OIY4BIVIV3agAmcVlQ=
Subject key identifier:   7E:F4:4E:58:D4:BD:9A:92:14:F9:AA:F0:A5:B9:4B:F8:41:39:1A:FD
Certificate issuer:       /CN=4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF
Certificate serial:       1C5A028D7E5BA4150D6040EB56BA069E195E0E6B
Authority key identifier: 4C:DD:B0:C2:29:BC:D8:3E:F9:BF:28:32:1F:0A:D9:66:E0:19:B5:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/323830343a373934343a3a2f33322d313238203d3e20323731323935.roa
Signing time:             Mon 27 Mar 2023 17:41:33 +0000
ROA not before:           Mon 27 Mar 2023 17:36:33 +0000
ROA not after:            Mon 25 Mar 2024 17:41:33 +0000
asID:                     271295
IP address blocks:        2804:7944::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:5a:02:8d:7e:5b:a4:15:0d:60:40:eb:56:ba:06:9e:19:5e:0e:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF
        Validity
            Not Before: Mar 27 17:36:33 2023 GMT
            Not After : Mar 25 17:41:33 2024 GMT
        Subject: CN=7EF44E58D4BD9A9214F9AAF0A5B94BF841391AFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d1:ac:c1:ae:fa:0a:6e:fe:96:42:eb:a4:22:
                    ad:72:84:20:38:5b:4e:62:5d:35:98:cb:23:69:df:
                    21:48:18:2b:c3:57:ab:a5:7f:38:a8:5b:29:cc:65:
                    6a:b4:45:28:2c:6b:23:89:b8:d6:7f:8b:9e:8c:91:
                    b7:5e:fa:81:29:37:83:48:3a:62:12:ad:d0:8f:ee:
                    99:a6:f1:04:42:bd:2c:22:e4:80:60:b7:33:45:d4:
                    34:5e:9b:9b:17:dc:32:69:c2:e1:3b:d5:ee:69:cf:
                    50:2f:63:c3:cf:4d:ee:dc:bc:3a:64:fa:44:58:28:
                    32:1f:11:bf:d9:a2:22:73:90:c1:e5:3a:17:fd:5f:
                    f0:88:80:42:e0:b2:36:6b:7c:8f:5d:30:ff:2e:20:
                    7e:3a:5e:52:87:54:3d:7f:10:22:b4:7b:64:f3:87:
                    43:fb:0f:ed:e9:fb:ae:28:72:81:70:d7:7a:91:8c:
                    13:58:19:8c:82:5b:74:63:57:da:fa:9b:06:14:7c:
                    77:cd:a9:eb:11:aa:64:e5:c9:e2:4a:c1:f2:9a:f1:
                    bb:02:da:6e:11:60:d7:c4:f2:48:4f:32:fb:bc:27:
                    e9:a9:a3:7c:68:d6:03:29:13:79:e6:e7:dc:0c:83:
                    ce:da:3d:7f:84:d3:ac:90:0a:ce:b4:f9:e8:73:c3:
                    c8:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:F4:4E:58:D4:BD:9A:92:14:F9:AA:F0:A5:B9:4B:F8:41:39:1A:FD
            X509v3 Authority Key Identifier:
                keyid:4C:DD:B0:C2:29:BC:D8:3E:F9:BF:28:32:1F:0A:D9:66:E0:19:B5:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/323830343a373934343a3a2f33322d313238203d3e20323731323935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7944::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:e8:99:cb:ad:0f:c7:7f:82:70:81:28:ed:44:70:12:72:b9:
         03:1c:8f:7e:a3:10:17:6e:64:26:66:54:8f:dd:7c:9c:9a:39:
         bb:74:84:e3:88:a5:88:6b:1c:a2:8a:24:5c:a1:c1:10:e8:32:
         49:b0:db:15:fa:76:60:d1:87:d6:9e:ad:9b:7f:f7:a6:31:63:
         01:5f:15:58:ea:f8:ab:a0:c5:bb:5c:22:4e:72:49:d3:70:d5:
         4f:d5:78:f1:5d:6d:3d:ae:13:9e:4e:f9:4e:35:24:1c:b8:8d:
         d5:60:11:e6:4e:ff:28:8a:fe:59:a7:9b:10:a0:51:bc:8b:fe:
         1b:03:64:a3:d6:25:42:ac:95:8e:c2:cc:a3:50:ad:06:31:b8:
         74:01:f6:a9:e2:3a:d6:cf:df:cf:bb:c1:69:db:25:07:ef:4d:
         9a:30:a4:02:d8:5c:77:10:22:9c:99:9b:13:c1:aa:47:a2:2b:
         6a:4a:2e:a1:a1:1c:f0:7f:ca:2a:15:49:29:ce:e0:c1:d5:5e:
         ac:14:7c:b0:7e:bb:a7:2f:b6:28:00:ff:b9:e5:01:27:90:70:
         8f:94:b8:d2:7e:b5:3f:4c:43:a1:31:47:9e:c2:30:02:ef:70:
         a6:ce:77:89:a4:06:9c:95:41:06:78:d6:f7:57:ec:c2:5e:72:
         4f:f2:84:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:25:34 2025 by rpki-client