Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a653030303a3a2f33372d3337203d3e20323637303237.roa
File:                     323830343a343730383a653030303a3a2f33372d3337203d3e20323637303237.roa (raw, json)
Hash identifier:          69C+SZMlSC/HkWykLXSkrWCEWWYwQZ9Sq62qgRS9Qcg=
Subject key identifier:   76:E2:25:69:E0:6E:B1:C2:C5:BE:89:C1:7A:73:5C:E1:CB:A4:CB:52
Certificate issuer:       /CN=CC81BC052F2451BAC16FA42254D1686E0F97BE7B
Certificate serial:       4CE78ADD8D98B2F23D6951ABF34568753CC0B463
Authority key identifier: CC:81:BC:05:2F:24:51:BA:C1:6F:A4:22:54:D1:68:6E:0F:97:BE:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC81BC052F2451BAC16FA42254D1686E0F97BE7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a653030303a3a2f33372d3337203d3e20323637303237.roa
Signing time:             Fri 08 Nov 2024 14:24:09 +0000
ROA not before:           Fri 08 Nov 2024 14:19:09 +0000
ROA not after:            Fri 07 Nov 2025 14:24:09 +0000
asID:                     267027
IP address blocks:        2804:4708:e000::/37 maxlen: 37
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:e7:8a:dd:8d:98:b2:f2:3d:69:51:ab:f3:45:68:75:3c:c0:b4:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC81BC052F2451BAC16FA42254D1686E0F97BE7B
        Validity
            Not Before: Nov  8 14:19:09 2024 GMT
            Not After : Nov  7 14:24:09 2025 GMT
        Subject: CN=76E22569E06EB1C2C5BE89C17A735CE1CBA4CB52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:af:16:b5:bb:d9:fd:de:5a:8c:86:ea:c6:bb:
                    5c:0f:54:d6:7b:ef:5f:68:4b:06:f3:60:fd:6f:24:
                    98:d9:50:45:0a:7f:f2:c2:80:2e:08:80:2d:65:75:
                    1d:96:bf:ba:59:86:e1:12:72:d6:f9:9c:87:b0:6f:
                    c3:d5:3d:d2:e7:55:a3:5c:11:53:a4:54:42:69:d2:
                    af:17:2e:b3:05:d3:bd:c2:c3:ff:18:bf:60:c8:40:
                    c9:c7:f9:fe:d7:5e:3b:b8:b4:d2:ba:07:de:77:6f:
                    7b:d8:2e:09:c1:9c:8f:56:c3:bd:b9:99:f5:98:6b:
                    07:f6:c8:47:a1:fd:03:cd:86:8e:7a:fe:75:79:af:
                    22:0d:e1:66:9f:95:52:83:53:db:a4:a0:70:16:eb:
                    6c:eb:c8:61:7e:86:66:2b:89:e0:28:62:61:76:99:
                    88:d0:de:2b:6f:ce:f1:08:97:21:6f:90:d0:ce:3d:
                    1f:7f:ae:66:53:65:97:be:66:8e:01:66:a5:0c:08:
                    6b:4d:b3:da:b5:d7:d9:dc:be:97:52:07:7c:9c:6c:
                    cf:37:3d:8b:8d:3d:b3:e4:77:d6:8d:24:9a:0d:01:
                    10:7b:e5:43:a1:0b:be:9f:74:b8:b7:24:3a:b5:0d:
                    f5:02:19:bc:b8:9e:53:5b:70:ef:33:0c:81:2c:36:
                    ad:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:E2:25:69:E0:6E:B1:C2:C5:BE:89:C1:7A:73:5C:E1:CB:A4:CB:52
            X509v3 Authority Key Identifier:
                keyid:CC:81:BC:05:2F:24:51:BA:C1:6F:A4:22:54:D1:68:6E:0F:97:BE:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/CC81BC052F2451BAC16FA42254D1686E0F97BE7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC81BC052F2451BAC16FA42254D1686E0F97BE7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a653030303a3a2f33372d3337203d3e20323637303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4708:e000::/37

    Signature Algorithm: sha256WithRSAEncryption
         62:4c:2c:e9:09:85:cf:ac:0f:18:92:8b:b0:8b:d2:52:52:85:
         9a:b4:56:1b:82:b5:fc:88:49:74:f6:cd:64:20:4f:d3:78:27:
         5c:09:63:7a:cc:9f:b6:00:93:6a:63:0f:fd:21:0f:bf:35:44:
         12:5b:dc:b1:f3:8d:29:d4:ec:e8:a1:b5:b3:06:0b:74:e0:e7:
         04:3a:d8:ce:5c:83:4a:3d:ed:3c:0d:7b:39:21:58:5e:02:e7:
         f3:46:aa:0a:64:58:c6:b6:bf:ba:a3:49:2a:27:34:5b:b2:42:
         c4:9a:e8:d3:6e:92:73:61:0c:3c:c8:d4:d0:08:5f:99:a5:a3:
         83:ef:47:99:eb:4c:79:de:dc:fb:3d:dc:c0:6e:a2:b6:cc:b0:
         22:4f:79:03:53:0e:a7:53:a3:85:82:0a:67:75:8e:ce:54:54:
         15:71:e5:e9:a2:52:dc:b3:d1:93:73:cc:b2:df:94:6a:53:03:
         a2:29:16:1b:e2:a0:cf:12:db:1d:c3:f8:15:00:08:bb:ac:28:
         3c:35:b1:9f:79:65:40:fc:ad:11:38:92:79:26:5c:14:2e:23:
         87:de:f0:68:48:ff:11:2a:92:d0:f6:b2:a4:5e:19:a1:51:26:
         26:c9:75:a6:ff:19:d3:2f:00:f0:2f:5d:93:d0:f9:f7:80:7d:
         79:0a:ef:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:48:41 2025 by rpki-client