Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/323830343a3234633a3a2f33322d3438203d3e20323632363035.roa
File:                     323830343a3234633a3a2f33322d3438203d3e20323632363035.roa (raw, json)
Hash identifier:          1AW0S4RFnTx+AmSBklqRtjLA7k9qgi+MtyZ0qjoZws4=
Subject key identifier:   04:D3:48:AD:38:B8:D8:53:70:A0:3B:63:2C:6F:BE:DA:D7:14:D1:4E
Certificate issuer:       /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial:       7D3B3198F28CBCF32BFC5958821B02F47C6CC32D
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/323830343a3234633a3a2f33322d3438203d3e20323632363035.roa
Signing time:             Sat 03 Feb 2024 12:53:19 +0000
ROA not before:           Sat 03 Feb 2024 12:48:19 +0000
ROA not after:            Sat 01 Feb 2025 12:53:19 +0000
asID:                     262605
IP address blocks:        2804:24c::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:3b:31:98:f2:8c:bc:f3:2b:fc:59:58:82:1b:02:f4:7c:6c:c3:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
        Validity
            Not Before: Feb  3 12:48:19 2024 GMT
            Not After : Feb  1 12:53:19 2025 GMT
        Subject: CN=04D348AD38B8D85370A03B632C6FBEDAD714D14E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cc:19:9a:b8:32:97:d8:ab:87:62:e3:3c:ca:
                    fa:5b:7f:3c:1f:8d:3d:4c:7e:99:34:28:ac:9d:04:
                    d2:e0:d7:0e:12:6c:89:cd:4a:d9:e1:d4:20:14:0f:
                    20:20:7a:9f:93:2e:ec:14:09:89:5c:2b:a0:ab:e9:
                    5b:d8:50:1a:cc:18:e2:92:4b:e9:ee:e3:ec:f8:94:
                    a4:f7:ee:ac:04:21:07:60:4f:85:14:24:a1:6a:11:
                    c2:bf:fa:f4:d9:bd:f5:50:6b:ea:1a:92:62:12:10:
                    d5:d0:2d:a2:d7:5d:4e:1e:fe:ee:5a:6e:18:71:42:
                    54:c3:c9:21:89:92:49:92:ef:34:f0:47:75:07:d1:
                    f2:33:cd:7e:f0:3f:95:74:18:56:5b:8f:00:43:16:
                    46:2a:b8:49:a3:6f:1e:b4:e1:1b:48:0f:da:4a:aa:
                    b9:2a:10:b4:13:37:5b:36:4f:63:fd:6b:45:56:72:
                    b4:d8:b9:b8:7e:88:58:76:0b:10:ab:45:a6:78:2f:
                    c0:87:96:16:ce:05:cc:70:9d:fa:00:dd:f8:ee:37:
                    10:8e:8b:04:a4:68:54:e1:7d:3f:dc:5f:21:c2:07:
                    55:c1:60:f3:36:50:98:d5:fb:c6:2d:d3:ef:b1:99:
                    40:35:fa:ee:f0:ba:fb:2a:7b:58:81:63:2f:0d:0e:
                    47:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:D3:48:AD:38:B8:D8:53:70:A0:3B:63:2C:6F:BE:DA:D7:14:D1:4E
            X509v3 Authority Key Identifier:
                keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/323830343a3234633a3a2f33322d3438203d3e20323632363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:24c::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:48:55:a0:f5:a3:fb:ff:08:5d:38:55:cd:ba:02:7c:ed:9d:
         70:ea:49:3e:55:43:79:20:a5:d9:41:20:8a:94:51:68:fb:c2:
         b2:22:95:b6:84:e1:c7:5e:b3:0a:8f:67:02:4f:15:1a:37:3b:
         4d:18:5a:e4:b8:1b:3b:75:f0:a0:65:c1:95:e7:1d:27:0d:01:
         f7:0d:3d:20:6b:01:a3:f4:58:ec:ec:30:37:3b:59:b0:64:cc:
         08:6f:37:fb:b5:c2:c5:16:8e:b6:8e:1d:4f:87:5f:50:20:57:
         3e:10:2c:63:49:f8:24:32:8e:73:51:06:e8:97:13:2a:c3:80:
         39:dc:67:da:6d:b5:2c:7e:69:0c:da:cf:c1:77:3d:bf:ba:81:
         01:8c:22:c5:c2:88:96:b3:ee:ca:46:62:7c:c6:d0:8f:f3:06:
         86:59:6b:ec:ee:8a:0a:b4:17:4f:d4:f2:83:fa:6a:4e:fa:b1:
         cb:9b:5f:b2:41:c9:40:51:b9:62:f1:88:ef:e0:3a:c0:16:85:
         a7:59:11:7d:e8:07:51:6f:f5:45:11:7d:6f:6c:fd:60:f5:c2:
         5b:30:29:52:77:e2:6c:d3:43:b3:fd:ec:e0:7f:8a:27:db:69:
         fb:c6:ba:b6:c3:cd:e4:4d:4f:4e:2a:51:6b:01:e5:0e:fa:6b:
         dd:cc:1f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:19:42 2025 by rpki-client