Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/0/323830343a313338303a383030303a3a2f33332d3333203d3e20323633353336.roa
File:                     323830343a313338303a383030303a3a2f33332d3333203d3e20323633353336.roa (raw, json)
Hash identifier:          az7fuZ3+/jCAvvgt0wVew+OB7DJda+f1cpdFSQ9tmNs=
Subject key identifier:   29:17:11:95:99:38:37:6A:37:04:0A:28:9C:7E:29:30:A1:32:B0:BD
Certificate issuer:       /CN=B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B
Certificate serial:       3638AEE8F0C933099D0463F9590EDB2ECF1A1B5E
Authority key identifier: B1:C3:65:AF:79:AD:7B:D7:D9:4A:3A:36:D4:83:84:F8:DF:C6:DE:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/0/323830343a313338303a383030303a3a2f33332d3333203d3e20323633353336.roa
Signing time:             Tue 04 Jul 2023 19:09:51 +0000
ROA not before:           Tue 04 Jul 2023 19:04:51 +0000
ROA not after:            Tue 02 Jul 2024 19:09:51 +0000
asID:                     263536
IP address blocks:        2804:1380:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:38:ae:e8:f0:c9:33:09:9d:04:63:f9:59:0e:db:2e:cf:1a:1b:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B
        Validity
            Not Before: Jul  4 19:04:51 2023 GMT
            Not After : Jul  2 19:09:51 2024 GMT
        Subject: CN=291711959938376A37040A289C7E2930A132B0BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a0:a5:41:3d:cc:38:fe:c5:9d:9c:0e:51:41:
                    0d:a3:8a:97:4e:f1:33:48:65:f5:02:c1:8c:4d:62:
                    51:3d:fc:17:86:0e:95:0b:96:30:a4:18:fa:d8:20:
                    8a:6d:6c:26:8d:25:c4:b4:c4:ba:69:c0:63:cb:44:
                    dc:49:56:6b:6e:59:8b:f2:6f:23:b2:41:98:c9:cf:
                    b5:d6:8a:ee:28:1e:9b:f2:12:40:12:03:d5:6a:83:
                    f6:f2:b7:a1:f0:6e:4a:cc:be:6e:df:3c:1c:e4:a1:
                    d1:e3:bd:05:de:08:75:72:dc:1c:a4:54:50:7e:d1:
                    06:01:25:55:9f:a5:71:75:35:77:04:31:f8:62:ae:
                    19:80:ac:ef:e2:21:4d:f9:50:05:19:17:7e:70:5d:
                    5a:81:37:54:6c:a7:62:e6:41:e9:71:1a:78:8b:f5:
                    2e:83:51:2e:46:d7:04:96:34:1e:ec:e9:87:cc:8b:
                    7a:17:c8:1b:ea:8b:a8:e0:1d:8f:bb:0a:84:5b:22:
                    34:73:d9:69:c6:a6:15:43:f0:d8:e2:c7:dd:ae:71:
                    76:b5:d2:96:84:95:56:78:c4:0b:a3:fc:16:a5:13:
                    39:da:66:b8:31:62:0d:da:64:dd:72:91:a3:e7:d2:
                    0a:ef:08:94:fa:52:1b:28:c4:52:1c:37:0d:9d:af:
                    06:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:17:11:95:99:38:37:6A:37:04:0A:28:9C:7E:29:30:A1:32:B0:BD
            X509v3 Authority Key Identifier:
                keyid:B1:C3:65:AF:79:AD:7B:D7:D9:4A:3A:36:D4:83:84:F8:DF:C6:DE:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/0/B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/0/323830343a313338303a383030303a3a2f33332d3333203d3e20323633353336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1380:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         1a:b7:40:20:24:f7:aa:6a:f5:49:f8:63:cb:73:58:e7:bf:d4:
         e1:f3:81:d5:90:bb:8b:7a:dd:12:99:66:56:6c:1f:6b:7d:fa:
         52:4c:c4:62:d1:0d:73:71:f1:19:8f:c7:e5:97:34:f5:08:28:
         2c:3b:0c:a8:09:23:d5:c5:dc:c9:93:9c:d6:cb:ae:63:1e:40:
         64:fa:75:dc:bf:02:77:a7:67:78:d3:ee:5b:69:02:56:a0:14:
         67:ee:c3:64:0c:d5:75:dc:a5:d5:2b:da:4c:48:8c:7a:e1:55:
         28:82:34:71:20:22:a8:17:8e:22:cc:21:88:fc:e8:87:ca:c2:
         0d:5e:a3:cf:a8:ad:5d:26:78:2c:6a:35:cb:0a:b3:7d:c5:0f:
         9a:6a:98:28:a0:24:25:8f:36:b0:62:ab:27:fd:d7:2e:e4:af:
         52:ce:b0:b4:ed:56:bd:35:1f:24:04:16:35:9d:cc:5a:3c:31:
         08:71:33:8c:6f:07:97:fb:25:c9:af:2e:d7:8a:8f:60:d7:1f:
         31:d0:95:b0:33:d7:94:17:ef:f6:21:22:ca:68:8b:59:19:96:
         c3:9f:67:1a:31:5e:a8:fe:a5:7d:3a:9b:67:20:74:dc:05:0b:
         15:08:7f:d1:74:c0:eb:80:b9:1e:a9:a1:32:22:e0:65:ea:b3:
         e6:37:cb:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 21:11:10 2025 by rpki-client