Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/0/323830343a353836343a383030303a3a2f33332d3333203d3e20323638313236.roa
File:                     323830343a353836343a383030303a3a2f33332d3333203d3e20323638313236.roa (raw, json)
Hash identifier:          kW44zJs5FEdjN/icIuRl0anUJR9QfwSb3TV5JVeTkss=
Subject key identifier:   B6:38:53:40:35:56:0C:88:0C:87:36:10:92:80:D6:E7:1E:82:0C:E5
Certificate issuer:       /CN=088019DAB11676C4E95DB6D45B7C4B1E6AA1CB64
Certificate serial:       77AF03AF1ADB543A7AF647682798A5822DA568A9
Authority key identifier: 08:80:19:DA:B1:16:76:C4:E9:5D:B6:D4:5B:7C:4B:1E:6A:A1:CB:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/088019DAB11676C4E95DB6D45B7C4B1E6AA1CB64.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/0/323830343a353836343a383030303a3a2f33332d3333203d3e20323638313236.roa
Signing time:             Sat 08 Apr 2023 15:11:38 +0000
ROA not before:           Sat 08 Apr 2023 15:06:38 +0000
ROA not after:            Sat 06 Apr 2024 15:11:38 +0000
asID:                     268126
IP address blocks:        2804:5864:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:af:03:af:1a:db:54:3a:7a:f6:47:68:27:98:a5:82:2d:a5:68:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088019DAB11676C4E95DB6D45B7C4B1E6AA1CB64
        Validity
            Not Before: Apr  8 15:06:38 2023 GMT
            Not After : Apr  6 15:11:38 2024 GMT
        Subject: CN=B638534035560C880C8736109280D6E71E820CE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ab:f5:a9:f8:19:16:a2:29:1e:b4:30:13:d6:
                    9b:ea:af:f1:fb:73:f0:77:f5:68:d6:aa:b0:aa:a7:
                    01:fe:b6:69:b9:0f:c6:b3:d7:14:9c:f9:aa:a9:6c:
                    9e:3c:04:fb:0e:de:00:0b:31:9a:be:b3:ec:2c:f4:
                    00:67:27:1b:39:5b:e0:39:c3:75:2f:90:be:49:68:
                    a0:26:55:0b:23:1a:b3:66:7d:39:5b:18:86:27:70:
                    19:d5:e8:47:b4:cc:a4:ba:17:d9:b1:38:cb:95:5c:
                    6b:1e:36:2b:86:40:55:ec:bb:19:0c:28:f6:bb:00:
                    17:65:10:7c:f1:8d:56:4e:a3:5c:95:14:5a:e5:b7:
                    61:92:8c:07:ad:82:36:20:dd:f1:3f:3b:ec:60:85:
                    13:91:a0:65:9f:bc:d0:23:02:5f:10:72:80:52:6d:
                    40:d8:b4:fd:26:89:30:e1:9c:ca:7d:1c:94:c3:f3:
                    b7:b4:3d:bc:3d:b4:04:9f:5e:35:d4:91:92:02:88:
                    31:f5:b2:05:88:bc:30:99:a9:aa:94:de:2d:cf:78:
                    0a:5c:0b:e2:f2:98:dc:46:29:bd:f7:ac:f7:a9:aa:
                    0f:12:76:87:79:31:48:f7:17:d0:17:0b:36:bc:19:
                    a2:2a:f8:4d:28:bd:80:40:63:99:d8:a5:c2:be:22:
                    4d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:38:53:40:35:56:0C:88:0C:87:36:10:92:80:D6:E7:1E:82:0C:E5
            X509v3 Authority Key Identifier:
                keyid:08:80:19:DA:B1:16:76:C4:E9:5D:B6:D4:5B:7C:4B:1E:6A:A1:CB:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/0/088019DAB11676C4E95DB6D45B7C4B1E6AA1CB64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/088019DAB11676C4E95DB6D45B7C4B1E6AA1CB64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/0/323830343a353836343a383030303a3a2f33332d3333203d3e20323638313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5864:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         89:21:dd:d0:35:12:3a:c8:42:70:cd:4c:64:e2:74:d5:8a:e6:
         3a:69:76:b4:d4:5a:96:4d:e8:fb:6d:ce:34:83:b3:44:a2:52:
         80:4c:53:da:e6:a0:c4:2f:18:40:e1:5d:12:ea:df:8d:20:33:
         d8:10:2a:96:2e:20:c0:f5:8d:18:b2:39:47:b8:b2:2b:e6:e8:
         ab:1f:14:23:5e:41:9f:22:8b:72:b2:66:46:9c:17:e1:66:a4:
         d9:2e:27:b6:ff:33:46:49:c7:13:d4:dc:29:7b:11:78:04:17:
         fe:19:83:93:db:35:a6:f2:da:aa:ac:9d:95:a3:58:dd:11:aa:
         ea:78:3e:97:21:d1:fd:61:fe:68:33:50:4b:b7:27:f7:e6:01:
         cd:b7:18:4b:e9:c9:0d:64:b5:27:b1:3c:cf:e0:89:49:a5:de:
         d4:5e:94:fb:8a:57:09:c5:dc:20:34:30:e7:a6:6f:e9:ba:d6:
         c1:87:fc:54:cd:6d:0c:31:b2:e2:e7:23:44:4f:fd:c6:7c:29:
         1e:3f:48:96:1e:0b:77:c8:5c:2d:ca:d3:d0:7e:b2:f6:d9:b3:
         7a:dc:2e:85:4d:4e:b7:43:70:ec:7a:3e:3e:6f:6d:17:44:a5:
         21:2e:1a:6c:b3:ca:79:fe:94:9e:39:87:72:e9:24:14:64:7c:
         ee:30:0e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 05:15:06 2025 by rpki-client