Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5nit3NDPKHjH71qNyagTV7xmGc7eJWdFECD7Y7WLy715/0/323830343a373432383a3a2f33332d3333203d3e20323730393632.roa
File:                     323830343a373432383a3a2f33332d3333203d3e20323730393632.roa (raw, json)
Hash identifier:          OnJrvDW2eMaOtFeUll/PDP0t1epNmREk70301Qumop8=
Subject key identifier:   C9:FF:27:EE:F4:71:5D:07:E1:77:44:FA:C0:5A:AC:F6:D0:B5:17:DA
Certificate issuer:       /CN=08F7AFF5CABDE7CDFB140352C2CF6D11CA1C2000
Certificate serial:       20E219249363920CA3C09271BE082F2C3EF3066F
Authority key identifier: 08:F7:AF:F5:CA:BD:E7:CD:FB:14:03:52:C2:CF:6D:11:CA:1C:20:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08F7AFF5CABDE7CDFB140352C2CF6D11CA1C2000.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5nit3NDPKHjH71qNyagTV7xmGc7eJWdFECD7Y7WLy715/0/323830343a373432383a3a2f33332d3333203d3e20323730393632.roa
Signing time:             Tue 04 Jun 2024 18:38:13 +0000
ROA not before:           Tue 04 Jun 2024 18:33:13 +0000
ROA not after:            Tue 03 Jun 2025 18:38:13 +0000
asID:                     270962
IP address blocks:        2804:7428::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:e2:19:24:93:63:92:0c:a3:c0:92:71:be:08:2f:2c:3e:f3:06:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08F7AFF5CABDE7CDFB140352C2CF6D11CA1C2000
        Validity
            Not Before: Jun  4 18:33:13 2024 GMT
            Not After : Jun  3 18:38:13 2025 GMT
        Subject: CN=C9FF27EEF4715D07E17744FAC05AACF6D0B517DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:56:e4:0c:17:ab:3d:9d:ab:40:19:d5:6a:f1:
                    a0:18:12:6d:57:66:a6:a4:8b:ef:12:08:52:e8:5c:
                    82:ec:46:49:18:98:98:04:1b:01:4b:60:da:99:5a:
                    ae:89:78:b0:22:af:b5:ec:fc:f9:73:c8:d3:87:e1:
                    f9:e5:9b:a3:8c:16:1d:23:ac:e9:1e:e1:08:fe:af:
                    01:76:1a:40:d5:d5:33:fc:91:e8:56:30:c8:2f:2d:
                    9f:a7:ed:b1:6d:5c:35:b2:48:63:4d:49:21:fa:f7:
                    9e:ba:e2:05:16:ec:30:56:3a:cf:0b:ab:55:00:2e:
                    a8:84:82:bf:7a:00:03:cf:42:5d:72:f2:e8:91:2f:
                    15:98:9d:94:7d:3c:9b:dc:6a:ed:c1:e7:50:db:15:
                    2d:dd:0d:41:4a:a1:b1:d6:04:b2:f2:65:63:39:65:
                    aa:3b:2d:f8:7f:44:73:94:7c:a2:8d:24:64:99:82:
                    73:b5:0c:b2:47:67:9b:22:c0:4c:07:98:b0:d5:6e:
                    24:80:09:f0:6a:af:d9:9f:75:05:07:59:23:25:40:
                    e0:85:5e:dd:3c:dc:02:be:25:47:de:e1:21:81:64:
                    1a:2d:07:2e:0d:38:cf:6b:54:24:6b:4a:dd:5f:c9:
                    2a:ce:43:b6:20:1f:97:a6:74:e6:44:70:0e:e5:36:
                    56:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:FF:27:EE:F4:71:5D:07:E1:77:44:FA:C0:5A:AC:F6:D0:B5:17:DA
            X509v3 Authority Key Identifier:
                keyid:08:F7:AF:F5:CA:BD:E7:CD:FB:14:03:52:C2:CF:6D:11:CA:1C:20:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5nit3NDPKHjH71qNyagTV7xmGc7eJWdFECD7Y7WLy715/0/08F7AFF5CABDE7CDFB140352C2CF6D11CA1C2000.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08F7AFF5CABDE7CDFB140352C2CF6D11CA1C2000.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5nit3NDPKHjH71qNyagTV7xmGc7eJWdFECD7Y7WLy715/0/323830343a373432383a3a2f33332d3333203d3e20323730393632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7428::/33

    Signature Algorithm: sha256WithRSAEncryption
         58:0b:52:bd:fe:5d:b7:80:6c:aa:3f:4a:9f:29:9f:31:d7:9e:
         75:db:f8:cb:d3:f8:3b:41:62:2c:df:2d:c7:28:11:33:a3:d3:
         c1:9b:5f:ae:57:c5:35:ca:b8:6e:89:0f:f6:70:86:ea:cd:01:
         dd:32:f1:95:a9:16:76:d6:7f:1a:95:66:53:5e:10:ca:89:d4:
         7c:2c:14:12:0f:0c:e0:47:f3:64:29:8e:47:ca:a6:78:95:c8:
         7e:7e:5a:d9:62:ac:ce:c7:17:d7:0b:5e:a2:a8:11:f8:da:81:
         6b:ef:43:6f:93:98:52:da:52:4c:a7:4d:51:3c:1b:db:7a:c6:
         3d:4b:12:0e:53:b6:10:16:87:27:c9:ea:55:23:66:ff:87:85:
         9e:05:11:af:56:e1:42:14:28:16:c0:0c:c0:5a:48:e6:76:ee:
         c5:06:d0:dd:8b:5d:c3:88:6e:3d:5a:43:4a:85:65:3c:e3:98:
         1d:33:cd:c2:b9:11:6b:99:67:1d:b8:0c:23:32:6b:9f:3e:78:
         9a:e7:f8:fa:e7:40:f3:8a:73:87:26:37:ef:89:88:3c:49:8c:
         cc:4b:51:c3:37:2b:41:3c:57:f7:a9:17:d4:3a:bb:33:00:0f:
         d2:06:b3:d8:d4:fc:67:da:f9:5d:43:b0:ec:90:09:cf:ca:e5:
         6d:0d:94:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:33:51 2025 by rpki-client