Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GYgLBHiiKr9vYiRx2GUhnVeY5Nc7VaGycEzqwEQhgF/0/323830343a373233633a3a2f33332d313238203d3e20323730383431.roa
File:                     323830343a373233633a3a2f33332d313238203d3e20323730383431.roa (raw, json)
Hash identifier:          uz9EoQ+bDrWsBXl/9/XCP3BSOTKPEEYKXd+AEQ9LMw4=
Subject key identifier:   99:E4:59:4E:B8:AC:32:12:32:32:90:83:5A:84:F1:66:18:AE:F4:59
Certificate issuer:       /CN=D8F49F3218C4D5667C4F19919B730D15A529FFDA
Certificate serial:       420E097C3B66EF3DCF8F22F95713A8C520B0DA63
Authority key identifier: D8:F4:9F:32:18:C4:D5:66:7C:4F:19:91:9B:73:0D:15:A5:29:FF:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D8F49F3218C4D5667C4F19919B730D15A529FFDA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GYgLBHiiKr9vYiRx2GUhnVeY5Nc7VaGycEzqwEQhgF/0/323830343a373233633a3a2f33332d313238203d3e20323730383431.roa
Signing time:             Wed 12 Jul 2023 20:22:44 +0000
ROA not before:           Wed 12 Jul 2023 20:17:44 +0000
ROA not after:            Wed 10 Jul 2024 20:22:44 +0000
asID:                     270841
IP address blocks:        2804:723c::/33 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:0e:09:7c:3b:66:ef:3d:cf:8f:22:f9:57:13:a8:c5:20:b0:da:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8F49F3218C4D5667C4F19919B730D15A529FFDA
        Validity
            Not Before: Jul 12 20:17:44 2023 GMT
            Not After : Jul 10 20:22:44 2024 GMT
        Subject: CN=99E4594EB8AC3212323290835A84F16618AEF459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:56:57:17:86:8a:3d:e3:33:98:d0:34:f8:93:
                    e3:2a:36:70:7e:71:14:4f:0e:10:c1:0a:9e:52:bc:
                    7b:c1:a6:82:93:5d:e7:b9:df:62:8f:23:45:e4:d2:
                    c4:cd:84:11:f3:fe:c5:fc:1f:19:20:9b:6a:e2:40:
                    3a:aa:9d:a1:8d:aa:1f:0b:07:cd:ae:6c:78:cb:f6:
                    77:c7:ba:32:e3:18:af:29:e1:cb:b6:7b:02:08:88:
                    46:c1:80:fd:55:57:9d:aa:ce:04:6a:f2:a3:0d:69:
                    69:22:d8:d3:e0:d6:02:03:75:7d:a4:c4:a8:fe:1d:
                    ab:a3:cc:17:31:8a:56:ad:e1:11:e0:46:ae:d0:92:
                    97:a0:b1:4d:c1:c5:84:2a:6f:d8:2f:cb:cb:4c:ec:
                    29:70:06:35:cd:42:ed:5d:0a:e2:97:ea:89:71:53:
                    39:ab:1a:31:29:20:9e:ae:a2:48:18:4f:30:cc:b7:
                    ba:96:60:6a:e1:0f:86:0b:9e:bf:9d:7d:2a:c3:19:
                    ad:e2:cd:4f:ee:f7:5f:8b:b0:d2:2c:08:c3:83:1e:
                    9d:44:95:6e:77:19:9e:da:2c:b5:32:ec:6c:6d:91:
                    54:15:50:e7:fa:b8:5c:ad:06:76:d9:1e:3e:93:16:
                    ba:1b:fe:44:68:5c:43:71:ac:a8:4d:92:d4:ee:17:
                    0e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:E4:59:4E:B8:AC:32:12:32:32:90:83:5A:84:F1:66:18:AE:F4:59
            X509v3 Authority Key Identifier:
                keyid:D8:F4:9F:32:18:C4:D5:66:7C:4F:19:91:9B:73:0D:15:A5:29:FF:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GYgLBHiiKr9vYiRx2GUhnVeY5Nc7VaGycEzqwEQhgF/0/D8F49F3218C4D5667C4F19919B730D15A529FFDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D8F49F3218C4D5667C4F19919B730D15A529FFDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GYgLBHiiKr9vYiRx2GUhnVeY5Nc7VaGycEzqwEQhgF/0/323830343a373233633a3a2f33332d313238203d3e20323730383431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:723c::/33

    Signature Algorithm: sha256WithRSAEncryption
         44:0c:0c:f6:b1:be:88:4d:f9:ac:9c:ea:39:04:4e:91:37:94:
         c3:11:cb:80:46:cd:56:cb:ee:63:88:4e:03:eb:fb:da:a6:d6:
         3e:c1:bd:f7:af:3f:68:5a:96:e8:a9:6b:cf:60:a4:d1:51:98:
         c4:88:8e:9c:84:35:67:dc:b0:72:70:48:e1:e4:4b:3f:08:05:
         66:f8:3f:47:25:58:d5:ef:e3:db:50:f3:d4:7a:75:cd:ff:01:
         27:fc:46:84:94:91:45:8c:e5:52:5e:7c:1a:04:cc:ff:eb:39:
         ad:85:5e:29:c9:cd:d9:b7:f9:fa:30:19:ea:c1:03:e3:bc:1b:
         43:0f:c9:5b:e2:7c:80:ce:72:bb:02:a0:50:cf:ea:27:df:84:
         67:9f:dc:e2:d2:8a:c8:79:68:18:61:2a:6b:48:cc:63:4b:70:
         5d:cb:a3:34:e1:f8:a3:9e:ce:5e:1a:fd:fe:57:6d:4d:c1:aa:
         c3:fe:86:a8:6b:0f:37:1a:d5:3e:98:69:07:9d:6e:c1:bd:ae:
         42:97:af:80:06:ce:7f:ef:ca:07:29:09:7b:f4:a1:7d:d2:f9:
         e6:6c:b4:71:1a:b4:17:da:61:29:4c:09:73:cf:38:be:79:21:
         5d:9c:02:5d:7a:1b:12:cc:76:9f:71:80:45:4c:25:3d:63:68:
         93:c6:2e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:20:55 2025 by rpki-client