Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5qw98KyBoGRX9V9ELjPB8j7pvEDbvgz22HqAWjmNTBWw/0/323830343a353337303a633030303a3a2f33342d3334203d3e20323638353834.roa
File:                     323830343a353337303a633030303a3a2f33342d3334203d3e20323638353834.roa (raw, json)
Hash identifier:          YtV8Xt4pDm6YS9nAQUoG17y2quZ/pYXIBRKn8QvJVe4=
Subject key identifier:   4F:77:0A:55:2D:67:99:AB:C6:99:45:33:A4:85:9A:92:F3:BC:19:E4
Certificate issuer:       /CN=4BD795F092B94300EC0509053A12492273477784
Certificate serial:       49355DD14D26C22585D966E3A863A1B7E7F9DDE9
Authority key identifier: 4B:D7:95:F0:92:B9:43:00:EC:05:09:05:3A:12:49:22:73:47:77:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4BD795F092B94300EC0509053A12492273477784.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5qw98KyBoGRX9V9ELjPB8j7pvEDbvgz22HqAWjmNTBWw/0/323830343a353337303a633030303a3a2f33342d3334203d3e20323638353834.roa
Signing time:             Tue 02 Jan 2024 17:16:08 +0000
ROA not before:           Tue 02 Jan 2024 17:11:08 +0000
ROA not after:            Tue 31 Dec 2024 17:16:08 +0000
asID:                     268584
IP address blocks:        2804:5370:c000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:35:5d:d1:4d:26:c2:25:85:d9:66:e3:a8:63:a1:b7:e7:f9:dd:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BD795F092B94300EC0509053A12492273477784
        Validity
            Not Before: Jan  2 17:11:08 2024 GMT
            Not After : Dec 31 17:16:08 2024 GMT
        Subject: CN=4F770A552D6799ABC6994533A4859A92F3BC19E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e5:86:68:ac:7d:57:aa:6a:90:10:f6:b8:35:
                    54:da:56:0b:91:bb:39:8f:67:8c:14:c5:30:ae:f1:
                    82:ae:40:4e:f0:c7:8a:ce:c5:63:1f:01:25:fd:c9:
                    21:04:44:da:59:4d:19:92:ea:50:51:4d:e3:b8:1c:
                    a0:c0:45:4b:a7:bb:fd:36:11:e2:be:9b:ae:51:9a:
                    92:9d:a1:98:b2:e0:c9:fe:d8:91:3c:5c:cd:06:58:
                    57:58:61:d6:c3:c3:74:aa:97:a6:c8:84:d8:05:fe:
                    ba:0f:cf:74:bf:cf:59:02:8e:47:c1:47:8d:56:fb:
                    b0:a5:9b:f1:b5:f5:e2:bc:3d:eb:b4:3c:85:0f:0f:
                    fb:9f:ff:36:c0:c7:b7:c2:13:78:e3:31:c4:c7:2c:
                    e8:11:94:41:08:17:a4:9b:f7:ff:12:3c:5d:22:58:
                    a3:f5:10:0a:ba:1f:f8:ec:f1:33:e1:15:45:01:70:
                    94:cc:e5:10:d8:f9:5f:b5:9c:7e:e5:92:1f:4f:1b:
                    39:b9:ef:84:d9:0b:0a:52:cd:97:43:c7:6a:98:52:
                    b5:b1:8e:08:ea:3d:25:5e:f6:be:e4:07:cf:63:82:
                    dd:6b:bd:a1:c2:09:b5:c5:ab:52:b9:e0:07:de:1c:
                    31:d5:fe:66:d9:ec:91:a6:1e:f8:5c:21:3e:06:e5:
                    bb:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:77:0A:55:2D:67:99:AB:C6:99:45:33:A4:85:9A:92:F3:BC:19:E4
            X509v3 Authority Key Identifier:
                keyid:4B:D7:95:F0:92:B9:43:00:EC:05:09:05:3A:12:49:22:73:47:77:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5qw98KyBoGRX9V9ELjPB8j7pvEDbvgz22HqAWjmNTBWw/0/4BD795F092B94300EC0509053A12492273477784.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4BD795F092B94300EC0509053A12492273477784.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5qw98KyBoGRX9V9ELjPB8j7pvEDbvgz22HqAWjmNTBWw/0/323830343a353337303a633030303a3a2f33342d3334203d3e20323638353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5370:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         88:15:ac:00:54:14:d2:85:dd:be:f7:4a:7f:8c:36:aa:f8:2a:
         e5:7f:3d:17:48:c7:ad:60:20:f2:57:58:c7:94:22:bf:f2:fd:
         46:c1:32:10:a9:7e:9e:39:b6:66:18:23:2e:fb:90:9c:f1:a6:
         dc:c9:15:8b:a0:e7:4f:bc:f7:39:ba:4c:9f:4e:b8:49:e0:ea:
         5d:da:57:84:c0:d1:e1:ce:db:0f:03:d8:9d:b4:9e:dd:e3:6d:
         9c:ef:e9:f9:1a:7e:6c:22:63:0a:dc:38:59:6e:71:f5:97:2d:
         3d:aa:43:37:a8:2f:6d:ef:57:e0:62:27:df:14:82:41:76:dd:
         0e:8a:86:3a:0b:20:68:86:07:8d:9c:63:a2:88:43:0e:ec:1b:
         71:69:89:41:6e:68:ff:2a:20:43:07:a0:dc:02:0c:d7:48:dc:
         c3:ca:d5:bf:44:1c:b5:2e:30:f3:08:78:84:ad:9b:f4:32:63:
         51:7d:e1:36:dd:93:05:94:14:ad:a0:f8:f5:ec:24:c4:1d:b8:
         be:a4:68:d3:a8:3e:4c:b1:6d:3e:05:28:60:f4:9b:60:a1:bc:
         21:b8:81:2e:a9:d5:7a:1a:b4:d0:15:4e:1e:8e:1b:c6:d8:bf:
         92:2c:ff:19:5a:62:41:3c:f4:2e:94:e4:f2:f3:0c:92:cf:13:
         21:2d:45:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 01:15:25 2025 by rpki-client