Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5vH1WE5jxJxtx2wdHZ7WqZibqz64rAKeS9BnUVZPTUXk/0/323830343a346230343a3a2f33322d313238203d3e20323637323738.roa
File:                     323830343a346230343a3a2f33322d313238203d3e20323637323738.roa (raw, json)
Hash identifier:          4MN0dcbWGNq8ojjezjb6J8taka6WDZyMhiStGijE/so=
Subject key identifier:   16:77:6D:83:CA:1A:D2:43:6D:E4:70:F5:CC:AC:59:9D:D1:2E:2F:7F
Certificate issuer:       /CN=C74D4B5426800DA8B95D0FF9F784C7F8F7E600CD
Certificate serial:       6E92FCEEF94DE59F23FFC396EB7664B91B652D23
Authority key identifier: C7:4D:4B:54:26:80:0D:A8:B9:5D:0F:F9:F7:84:C7:F8:F7:E6:00:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C74D4B5426800DA8B95D0FF9F784C7F8F7E600CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5vH1WE5jxJxtx2wdHZ7WqZibqz64rAKeS9BnUVZPTUXk/0/323830343a346230343a3a2f33322d313238203d3e20323637323738.roa
Signing time:             Wed 12 Jul 2023 12:18:34 +0000
ROA not before:           Wed 12 Jul 2023 12:13:34 +0000
ROA not after:            Wed 10 Jul 2024 12:18:34 +0000
asID:                     267278
IP address blocks:        2804:4b04::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:92:fc:ee:f9:4d:e5:9f:23:ff:c3:96:eb:76:64:b9:1b:65:2d:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C74D4B5426800DA8B95D0FF9F784C7F8F7E600CD
        Validity
            Not Before: Jul 12 12:13:34 2023 GMT
            Not After : Jul 10 12:18:34 2024 GMT
        Subject: CN=16776D83CA1AD2436DE470F5CCAC599DD12E2F7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:12:55:1d:91:99:35:c2:e4:1f:38:01:52:c4:
                    d1:de:8d:55:c5:36:92:e6:ee:f8:14:80:30:11:26:
                    2b:04:37:ab:fc:19:58:93:54:0b:1d:03:98:9e:e8:
                    da:d2:a6:bf:94:b4:16:6c:bd:60:36:59:ce:cb:bd:
                    54:76:30:99:f0:b7:72:81:9f:cb:89:fa:5c:ab:70:
                    5e:a9:92:d7:a8:49:74:3f:2a:d1:30:df:a0:53:74:
                    93:b8:cf:3f:be:03:d9:8e:11:e1:18:a8:94:74:01:
                    51:a5:5f:6b:29:38:1d:d2:9f:7d:40:10:09:7d:58:
                    92:dd:89:7a:90:c2:a2:37:db:6f:32:77:8e:bc:28:
                    87:75:06:94:96:35:d5:be:20:8f:d1:98:41:94:df:
                    cf:87:14:20:30:ef:7d:46:9c:6d:c4:6a:a2:bb:6a:
                    9e:db:6a:2d:19:32:44:93:73:20:00:c3:f0:d6:1f:
                    06:ba:03:b9:5d:45:d9:5a:d4:6e:81:fa:c8:eb:56:
                    ee:9c:85:93:70:7c:f0:7d:e5:2e:08:b8:8b:95:e6:
                    e4:1f:1c:d1:ec:12:82:66:67:3f:18:14:b5:06:7f:
                    1a:b0:4a:c5:dd:6b:1f:3f:46:38:f8:88:92:70:2b:
                    91:e2:6a:c2:a1:1d:89:ce:c7:b7:66:7a:18:9a:51:
                    46:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:77:6D:83:CA:1A:D2:43:6D:E4:70:F5:CC:AC:59:9D:D1:2E:2F:7F
            X509v3 Authority Key Identifier:
                keyid:C7:4D:4B:54:26:80:0D:A8:B9:5D:0F:F9:F7:84:C7:F8:F7:E6:00:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5vH1WE5jxJxtx2wdHZ7WqZibqz64rAKeS9BnUVZPTUXk/0/C74D4B5426800DA8B95D0FF9F784C7F8F7E600CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C74D4B5426800DA8B95D0FF9F784C7F8F7E600CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5vH1WE5jxJxtx2wdHZ7WqZibqz64rAKeS9BnUVZPTUXk/0/323830343a346230343a3a2f33322d313238203d3e20323637323738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b04::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:c8:45:32:ab:cb:4e:b3:87:ff:b3:43:0e:a3:2f:a6:96:39:
         49:5e:bd:35:c9:b2:59:d0:7c:b4:a3:fd:c0:6f:39:3a:82:91:
         a3:9e:a4:9b:c8:4d:41:73:64:b7:ef:4b:09:1a:88:92:04:84:
         5f:c4:51:13:02:8b:ad:f2:96:a6:fc:09:f0:3a:a3:49:78:ae:
         76:03:e9:f2:b8:21:18:a5:38:15:df:2b:ea:f6:9f:38:cd:5a:
         28:d2:25:24:70:2b:34:4e:81:73:c1:a8:c6:8f:8d:ed:45:16:
         fe:d9:be:5a:95:6b:82:89:b4:ad:dd:10:5b:70:75:76:fa:64:
         ff:f7:e0:f8:19:93:68:43:4d:5c:ed:65:36:fc:f8:e9:2f:ee:
         07:50:6a:28:dd:ce:02:75:d0:93:05:0a:78:e8:ce:68:ec:f2:
         15:aa:59:e9:92:4b:a5:e7:c7:42:e7:ce:c3:72:3f:30:bd:d3:
         ab:2a:7d:8c:b6:89:99:2a:9c:ef:12:8f:bf:6d:75:ac:ea:6f:
         ef:42:2a:93:44:d0:39:e2:4c:e0:6c:c5:c7:76:f8:f9:09:52:
         d1:3d:d4:57:92:5f:d3:f0:f6:bf:80:f1:ea:40:1a:51:fe:80:
         2e:6e:68:20:d8:f1:8a:df:2c:1b:5b:06:d8:87:48:f2:e9:62:
         55:64:19:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:59 2025 by rpki-client