Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/0/323830343a313634633a63623a3a2f34382d3438203d3e20323633323830.roa
File:                     323830343a313634633a63623a3a2f34382d3438203d3e20323633323830.roa (raw, json)
Hash identifier:          ZKYJukcyoWZfCAIcjP+GicLhWLJb5I0Q0LNZhkT31r0=
Subject key identifier:   85:57:AD:35:97:2C:57:93:B9:81:13:BD:C6:63:5E:8F:96:C6:31:7C
Certificate issuer:       /CN=BDF79EFB23D70999B2F88388D7AC7018CCF52374
Certificate serial:       4F2106E53A586FBF7ACA09068ABA96FF6E8FAC8E
Authority key identifier: BD:F7:9E:FB:23:D7:09:99:B2:F8:83:88:D7:AC:70:18:CC:F5:23:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDF79EFB23D70999B2F88388D7AC7018CCF52374.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/0/323830343a313634633a63623a3a2f34382d3438203d3e20323633323830.roa
Signing time:             Thu 19 Oct 2023 13:28:37 +0000
ROA not before:           Thu 19 Oct 2023 13:23:37 +0000
ROA not after:            Thu 17 Oct 2024 13:28:37 +0000
asID:                     263280
IP address blocks:        2804:164c:cb::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:21:06:e5:3a:58:6f:bf:7a:ca:09:06:8a:ba:96:ff:6e:8f:ac:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDF79EFB23D70999B2F88388D7AC7018CCF52374
        Validity
            Not Before: Oct 19 13:23:37 2023 GMT
            Not After : Oct 17 13:28:37 2024 GMT
        Subject: CN=8557AD35972C5793B98113BDC6635E8F96C6317C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4d:ee:0a:e7:23:bb:fe:7a:2d:95:f5:a7:b2:
                    2b:f7:2d:49:55:c8:30:f3:83:6a:7a:07:51:29:c4:
                    24:d6:42:14:01:87:23:e8:f9:8c:27:60:a4:16:84:
                    b4:fa:dc:41:05:6c:6a:e4:b8:2a:15:70:0d:34:50:
                    15:c8:ef:44:c5:16:53:88:3e:c8:ec:a8:3d:c6:3d:
                    cf:c9:00:c0:71:c4:84:28:c4:22:c4:a6:db:2f:9f:
                    07:79:cd:d0:41:f7:01:af:43:dc:08:80:49:2c:d8:
                    18:c3:ee:dc:78:f7:f7:94:9d:b7:74:bd:15:c0:e6:
                    61:9a:83:e2:b0:7c:81:06:69:d0:4f:49:49:01:fe:
                    c9:0a:40:8f:63:2b:83:34:1b:6b:61:a7:fc:39:a7:
                    17:47:c1:a0:52:5d:12:93:3f:50:1c:68:95:b0:51:
                    66:ac:43:b0:43:1f:bf:7c:51:b9:9c:95:07:77:fe:
                    a7:18:57:4a:62:ed:1d:d7:5d:9c:8f:33:df:5b:39:
                    30:7f:5d:4a:b3:3b:21:bf:f5:99:d0:b3:7b:5d:9f:
                    f4:92:af:a6:94:17:04:02:4b:38:ff:31:8d:f5:77:
                    25:13:ef:2a:6a:bb:4b:4d:26:18:f5:17:dd:7b:47:
                    1f:ab:cb:f4:04:59:27:fa:f8:dc:46:33:ee:0d:b6:
                    2a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:57:AD:35:97:2C:57:93:B9:81:13:BD:C6:63:5E:8F:96:C6:31:7C
            X509v3 Authority Key Identifier:
                keyid:BD:F7:9E:FB:23:D7:09:99:B2:F8:83:88:D7:AC:70:18:CC:F5:23:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/0/BDF79EFB23D70999B2F88388D7AC7018CCF52374.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDF79EFB23D70999B2F88388D7AC7018CCF52374.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/0/323830343a313634633a63623a3a2f34382d3438203d3e20323633323830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:164c:cb::/48

    Signature Algorithm: sha256WithRSAEncryption
         9c:06:11:4e:1e:1a:82:3e:8a:35:43:9c:5e:da:e5:0b:64:70:
         38:8b:b8:e7:b7:e0:be:35:b5:3a:fe:dd:41:a5:19:52:f6:e9:
         32:9a:48:43:a1:43:34:b2:8a:8e:31:3f:41:16:81:81:ba:21:
         b1:44:56:8c:3f:f7:89:24:18:ee:6c:c5:00:77:1f:c7:81:2c:
         92:75:44:5b:fc:69:5a:79:0b:7a:a1:3e:40:3d:32:80:3d:c1:
         51:65:2e:8b:66:83:47:56:bb:b4:27:59:e3:76:ff:aa:8e:a6:
         58:0e:8b:5d:8b:6f:a9:5c:3d:7a:6b:24:4c:bd:fd:17:b6:03:
         eb:62:20:d9:88:89:50:c9:3d:97:fe:88:8f:ab:00:e4:ce:7e:
         a7:42:32:b6:09:8f:c1:ee:b3:f0:41:bd:bc:22:58:a9:b8:77:
         3b:45:b2:b7:86:60:d4:31:f6:e0:d0:a0:0e:03:b4:25:e8:3e:
         c3:84:9b:fd:44:74:fd:18:3d:3d:ab:3a:d1:0d:04:6a:58:9e:
         5f:b0:b4:7f:9c:e3:f0:82:22:61:6c:de:1c:0e:be:f0:7e:93:
         b9:b0:92:74:3a:af:3c:0a:ab:3c:9a:c2:ba:39:21:21:25:47:
         aa:b8:01:32:91:c6:5e:67:3b:a4:8e:77:bb:f5:38:13:62:6e:
         73:6c:9b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:13:44 2025 by rpki-client