Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5U1AcRxqpmVZjRg3vgSUw6eiWJJaNt16evESvKD9ebSQ/0/323830343a376133633a3a2f33332d3333203d3e20323731333537.roa
File:                     323830343a376133633a3a2f33332d3333203d3e20323731333537.roa (raw, json)
Hash identifier:          5xTespa153cVsttIMRk2PdIw5RiL++qRp0vCDGyhcq4=
Subject key identifier:   02:72:FD:A1:E6:6A:37:6C:3C:48:DE:24:30:C0:33:7B:9D:2E:B0:A8
Certificate issuer:       /CN=557B9AFE2B83ACC4BFFA149030067D9DFC5AE31A
Certificate serial:       60D06A71B915024C7DA09F38C4F3D91EF734DA4F
Authority key identifier: 55:7B:9A:FE:2B:83:AC:C4:BF:FA:14:90:30:06:7D:9D:FC:5A:E3:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/557B9AFE2B83ACC4BFFA149030067D9DFC5AE31A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5U1AcRxqpmVZjRg3vgSUw6eiWJJaNt16evESvKD9ebSQ/0/323830343a376133633a3a2f33332d3333203d3e20323731333537.roa
Signing time:             Tue 24 Oct 2023 14:35:29 +0000
ROA not before:           Tue 24 Oct 2023 14:30:29 +0000
ROA not after:            Tue 22 Oct 2024 14:35:29 +0000
asID:                     271357
IP address blocks:        2804:7a3c::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:d0:6a:71:b9:15:02:4c:7d:a0:9f:38:c4:f3:d9:1e:f7:34:da:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=557B9AFE2B83ACC4BFFA149030067D9DFC5AE31A
        Validity
            Not Before: Oct 24 14:30:29 2023 GMT
            Not After : Oct 22 14:35:29 2024 GMT
        Subject: CN=0272FDA1E66A376C3C48DE2430C0337B9D2EB0A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d8:24:f0:d0:2b:2e:b0:58:46:a2:f6:59:a7:
                    f7:f5:84:cf:66:85:95:8d:2f:dd:d4:ce:4f:75:10:
                    7a:35:01:d7:79:6d:a3:a2:16:ed:90:cb:8b:e0:88:
                    51:22:d5:c4:4f:6e:29:75:00:a9:a3:71:b0:c5:b3:
                    ef:61:56:bd:41:f9:5b:c6:46:3e:0f:1c:5b:4a:3d:
                    0a:e7:ca:f2:1a:26:b9:f6:5f:d4:0b:89:bb:ee:23:
                    79:58:23:40:49:f3:8f:50:e2:16:0c:dd:e6:74:be:
                    ed:06:9b:3f:1f:2e:25:fd:85:3b:4b:af:a6:d7:44:
                    d9:93:7c:e8:dc:5f:18:fd:86:a2:e6:2f:c4:2a:e0:
                    91:20:82:c8:13:53:01:e5:f7:3e:1b:73:25:68:a6:
                    11:34:22:c2:0a:34:a4:6c:8c:9c:fd:69:59:80:44:
                    c0:f4:59:84:2a:e1:87:3d:5d:bd:b4:30:b9:68:14:
                    d7:04:64:f5:8d:72:09:f3:4e:f3:e5:46:a4:34:74:
                    cc:79:e8:c4:18:96:57:21:93:7f:ef:59:f8:ef:eb:
                    44:87:4f:5b:85:fd:75:4d:2b:a2:f4:b9:47:30:2e:
                    b5:db:18:60:44:b9:af:b7:79:06:22:01:05:db:ad:
                    da:d6:51:52:cd:29:d7:13:f9:28:b5:ab:d4:06:e4:
                    16:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:72:FD:A1:E6:6A:37:6C:3C:48:DE:24:30:C0:33:7B:9D:2E:B0:A8
            X509v3 Authority Key Identifier:
                keyid:55:7B:9A:FE:2B:83:AC:C4:BF:FA:14:90:30:06:7D:9D:FC:5A:E3:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5U1AcRxqpmVZjRg3vgSUw6eiWJJaNt16evESvKD9ebSQ/0/557B9AFE2B83ACC4BFFA149030067D9DFC5AE31A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/557B9AFE2B83ACC4BFFA149030067D9DFC5AE31A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5U1AcRxqpmVZjRg3vgSUw6eiWJJaNt16evESvKD9ebSQ/0/323830343a376133633a3a2f33332d3333203d3e20323731333537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a3c::/33

    Signature Algorithm: sha256WithRSAEncryption
         29:45:99:6b:3a:21:5c:18:46:34:a6:56:8b:9e:53:32:9d:36:
         e8:1f:9e:ad:21:c6:56:7a:11:3e:9d:32:3b:27:18:93:6e:fa:
         d0:dc:b7:33:5d:6f:20:24:16:72:04:02:03:a9:a8:f1:c9:89:
         d6:ab:01:55:d9:fe:e2:40:dc:0f:a2:6d:92:fc:97:d2:b0:85:
         be:2c:ec:d3:20:bb:5d:1c:55:fe:b2:b0:f2:d2:5c:42:26:04:
         ab:89:1d:d3:d6:3b:34:76:f3:6d:8a:99:20:ac:42:1d:96:76:
         6a:2e:e8:a6:2a:00:e9:de:1f:20:9a:56:13:52:93:e5:a7:35:
         82:ca:ad:28:d4:1c:97:26:e7:97:a2:cf:59:95:ff:20:cc:b0:
         86:f9:d6:74:42:63:94:f0:80:49:ed:da:2c:88:b6:5f:cc:d9:
         8e:88:36:32:43:b8:ea:aa:11:7e:54:28:86:33:79:96:92:cd:
         db:c5:4c:5c:29:93:1f:2f:94:74:03:b7:83:dc:b6:70:11:41:
         ea:0c:0f:f3:93:50:b6:a9:d7:d0:44:60:0c:7a:af:62:49:ee:
         50:ef:3c:8e:b6:49:22:53:25:17:bd:71:14:45:d8:0b:13:f3:
         85:ca:34:4f:a5:4f:06:e1:b4:b3:b9:d9:b4:e3:8b:b6:b3:a1:
         6e:11:c9:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:01:41 2025 by rpki-client