Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5kXRrsUjZS4Leci74cK38ip4XnivqUKcfwR62jtALmMb/0/323830343a366633633a3a2f33322d3438203d3e20323730363437.roa
File:                     323830343a366633633a3a2f33322d3438203d3e20323730363437.roa (raw, json)
Hash identifier:          JkR2L89xRulLBXnwHzTDsSMyyinJZcRxTuFYNnkQOQ8=
Subject key identifier:   F6:2D:9F:66:5F:45:94:E1:EB:77:5D:ED:74:16:85:3E:77:F7:E9:B0
Certificate issuer:       /CN=84E480713FF6A179A1FF216DF6F07471C515E8E3
Certificate serial:       76FDF9B8555EA1BC9448DA7F53476A9219638504
Authority key identifier: 84:E4:80:71:3F:F6:A1:79:A1:FF:21:6D:F6:F0:74:71:C5:15:E8:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/84E480713FF6A179A1FF216DF6F07471C515E8E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5kXRrsUjZS4Leci74cK38ip4XnivqUKcfwR62jtALmMb/0/323830343a366633633a3a2f33322d3438203d3e20323730363437.roa
Signing time:             Tue 01 Aug 2023 20:12:20 +0000
ROA not before:           Tue 01 Aug 2023 20:07:20 +0000
ROA not after:            Tue 30 Jul 2024 20:12:20 +0000
asID:                     270647
IP address blocks:        2804:6f3c::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:fd:f9:b8:55:5e:a1:bc:94:48:da:7f:53:47:6a:92:19:63:85:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84E480713FF6A179A1FF216DF6F07471C515E8E3
        Validity
            Not Before: Aug  1 20:07:20 2023 GMT
            Not After : Jul 30 20:12:20 2024 GMT
        Subject: CN=F62D9F665F4594E1EB775DED7416853E77F7E9B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:68:13:99:ea:87:43:6b:83:20:c6:66:17:e7:
                    ed:02:2e:07:de:1e:b1:fd:49:d0:a0:cc:45:2a:bb:
                    b6:a4:7b:43:aa:7f:5b:18:b2:a6:4d:c0:80:13:c0:
                    ea:83:b6:25:2c:ef:17:63:a5:67:2e:b6:2c:ce:43:
                    46:d0:96:81:eb:12:a0:3d:82:44:6f:1b:4f:23:69:
                    a1:46:92:6f:b3:72:04:b3:06:51:65:7a:ff:2d:54:
                    7d:7d:a7:95:e2:5e:06:05:05:af:6d:a0:c5:8b:2c:
                    7a:3d:d6:74:2e:d2:70:45:e6:f7:e1:d2:a0:73:43:
                    8a:e3:0d:10:42:16:ee:c4:57:1b:b7:dc:cc:c5:63:
                    1c:6b:cb:43:10:eb:f0:e5:9d:2a:39:3b:78:7f:0f:
                    72:48:fb:20:79:e1:d5:c8:d1:7d:ab:37:27:00:95:
                    5d:72:2f:e3:37:72:81:4e:40:f7:97:11:ef:90:2f:
                    e9:cb:99:49:48:f8:22:d1:fb:66:11:b7:40:7a:df:
                    5f:6a:f6:d1:85:11:3d:f6:e9:51:bc:63:c2:70:9a:
                    8c:49:4e:34:a7:a0:fe:66:88:dd:6a:e7:ac:f2:49:
                    e3:3b:58:af:0d:6d:d2:c4:0e:d9:91:28:ca:9b:da:
                    a8:eb:34:dd:e8:36:ff:a1:e9:00:f4:54:50:96:05:
                    c4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:2D:9F:66:5F:45:94:E1:EB:77:5D:ED:74:16:85:3E:77:F7:E9:B0
            X509v3 Authority Key Identifier:
                keyid:84:E4:80:71:3F:F6:A1:79:A1:FF:21:6D:F6:F0:74:71:C5:15:E8:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5kXRrsUjZS4Leci74cK38ip4XnivqUKcfwR62jtALmMb/0/84E480713FF6A179A1FF216DF6F07471C515E8E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/84E480713FF6A179A1FF216DF6F07471C515E8E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5kXRrsUjZS4Leci74cK38ip4XnivqUKcfwR62jtALmMb/0/323830343a366633633a3a2f33322d3438203d3e20323730363437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6f3c::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:d9:57:2d:40:71:ab:b2:5a:03:df:9f:46:44:07:29:c9:32:
         26:3e:53:55:1a:d6:29:e8:1e:ef:11:2b:29:62:0c:45:2e:7e:
         19:76:13:7e:c7:9c:79:ef:9f:67:88:30:74:e9:4d:13:ab:20:
         92:81:af:c3:b2:39:2e:f1:65:eb:f4:a8:57:86:f2:f4:50:41:
         39:82:4e:fa:dd:ae:9d:bc:72:1b:3b:67:ca:01:44:36:bb:71:
         4d:ef:dd:b9:80:e1:98:2e:a8:95:f0:02:37:bb:51:d7:36:d5:
         a2:84:e1:9d:d9:75:db:09:18:1a:c9:82:26:6d:89:56:37:ce:
         a9:95:c8:5b:dd:91:53:cf:ee:65:b2:55:32:07:82:c2:be:2b:
         6e:81:b7:c2:67:05:7d:38:30:73:75:48:26:75:56:fd:17:72:
         e9:d8:a7:91:44:1b:60:de:6e:90:25:f8:6d:e9:bd:11:dd:cc:
         67:61:ea:d7:a4:ae:f7:64:52:bc:bf:ea:53:7d:11:26:eb:b1:
         01:89:29:16:c8:fe:96:5b:48:af:ff:3c:46:c3:69:a4:3d:11:
         80:07:47:62:d9:7e:c6:6f:f7:c5:92:ff:e3:20:75:88:39:51:
         ec:4f:f8:b5:13:b7:cc:70:cc:24:36:ec:62:29:c7:2f:c7:2c:
         96:87:2c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:04:52 2025 by rpki-client