Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/323830343a333266303a3a2f33332d3333203d3e20323635313036.roa
File:                     323830343a333266303a3a2f33332d3333203d3e20323635313036.roa (raw, json)
Hash identifier:          y3sEus3ggMzTBBixAl3mm06UoEDLw3Sq21SDBUGuE7s=
Subject key identifier:   5F:0D:26:CA:DF:91:CE:CF:C2:36:7B:43:18:C1:83:B9:C2:5C:89:84
Certificate issuer:       /CN=8C7C3CED5BDDCC80C0FCDD46A8287514BB682859
Certificate serial:       355C8B4ED7FF65984D4BC4077EAF49563A7EDDFF
Authority key identifier: 8C:7C:3C:ED:5B:DD:CC:80:C0:FC:DD:46:A8:28:75:14:BB:68:28:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C7C3CED5BDDCC80C0FCDD46A8287514BB682859.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/323830343a333266303a3a2f33332d3333203d3e20323635313036.roa
Signing time:             Tue 30 Apr 2024 13:12:37 +0000
ROA not before:           Tue 30 Apr 2024 13:07:37 +0000
ROA not after:            Tue 29 Apr 2025 13:12:37 +0000
asID:                     265106
IP address blocks:        2804:32f0::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:5c:8b:4e:d7:ff:65:98:4d:4b:c4:07:7e:af:49:56:3a:7e:dd:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C7C3CED5BDDCC80C0FCDD46A8287514BB682859
        Validity
            Not Before: Apr 30 13:07:37 2024 GMT
            Not After : Apr 29 13:12:37 2025 GMT
        Subject: CN=5F0D26CADF91CECFC2367B4318C183B9C25C8984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4e:20:ba:78:e9:73:a9:00:ab:9c:b9:af:e6:
                    f2:0d:b4:79:ff:63:47:21:68:29:68:9c:d0:d0:ad:
                    8b:1d:25:c2:9c:54:99:24:43:a9:08:2a:99:58:e1:
                    04:fb:cb:0a:cf:9e:8f:fe:f7:55:1e:bc:99:b0:15:
                    92:03:90:38:c7:7d:79:2e:be:5a:96:6e:02:07:ef:
                    f6:a1:cf:cf:de:f7:99:e7:e9:f0:dd:c5:ff:d6:9b:
                    7c:7a:2a:31:81:27:8e:ba:81:52:20:d9:a8:3f:f7:
                    ec:d2:55:33:0f:4c:9e:5f:fa:38:a6:68:65:ba:d9:
                    7b:19:31:bf:13:fa:ed:32:bd:75:40:9e:7d:4a:61:
                    11:e0:7e:52:ff:6c:d8:46:1d:1e:f4:37:ac:60:67:
                    13:dd:84:7b:6a:eb:20:ac:99:14:02:fa:96:ff:6a:
                    21:0c:8e:e1:8b:b6:20:67:d4:15:c3:cc:38:91:77:
                    73:f5:9f:d7:66:91:a6:8f:c4:bd:cd:ed:bc:74:95:
                    cf:92:dd:48:ca:45:92:8b:53:0f:87:d9:9e:4a:d9:
                    79:70:2d:be:b7:11:6f:cc:6b:69:9d:5c:85:0d:f2:
                    8d:a1:17:6d:f4:f1:cf:b7:ab:e2:f2:0d:94:2a:a5:
                    a5:58:d9:d7:27:ff:89:7c:19:67:53:b3:e0:79:8e:
                    99:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:0D:26:CA:DF:91:CE:CF:C2:36:7B:43:18:C1:83:B9:C2:5C:89:84
            X509v3 Authority Key Identifier:
                keyid:8C:7C:3C:ED:5B:DD:CC:80:C0:FC:DD:46:A8:28:75:14:BB:68:28:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/8C7C3CED5BDDCC80C0FCDD46A8287514BB682859.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C7C3CED5BDDCC80C0FCDD46A8287514BB682859.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/323830343a333266303a3a2f33332d3333203d3e20323635313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:32f0::/33

    Signature Algorithm: sha256WithRSAEncryption
         34:04:b7:85:e2:06:fd:35:bc:35:f8:3e:98:c7:f2:64:25:66:
         e4:f5:c7:f8:74:b0:70:81:cc:41:f8:8c:32:5e:c9:eb:2e:7f:
         d8:91:28:6c:57:7e:34:1c:66:c1:dd:bb:0b:07:8a:bf:3d:5c:
         a7:a0:1c:0a:6e:d3:6b:37:b2:52:2b:3c:f4:45:88:0a:0d:14:
         4b:24:46:a2:e0:fa:ca:38:a8:8e:77:15:12:85:de:3c:93:0b:
         2b:27:64:a0:de:98:09:c1:02:17:cd:1b:37:a5:fe:ac:da:3e:
         88:22:78:dc:ce:19:1a:be:b9:c2:85:8d:d1:b6:7b:0a:a6:53:
         a8:b7:36:e5:ff:e8:d9:38:df:10:7e:2e:50:17:65:a5:17:9a:
         84:c6:91:bf:fa:95:17:51:eb:9f:8f:8e:e1:3c:93:92:e6:70:
         c5:cf:fe:5b:70:ac:e5:b6:5c:9c:7a:1c:1e:03:5b:5e:2c:9b:
         66:79:f1:09:62:f7:51:28:dd:60:af:ea:d8:a5:d3:d6:94:6e:
         94:7a:c1:08:5e:7f:32:d5:62:f2:8f:c6:45:bc:c5:f0:a2:45:
         8c:a7:0a:ec:d6:cf:2b:53:80:2c:ae:98:91:6e:4e:d8:68:b2:
         e5:7e:cf:9d:21:0e:48:69:c2:45:c5:ad:99:02:b7:01:b8:dd:
         b3:99:53:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:39:31 2025 by rpki-client