Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/0/323830343a336566383a383030303a3a2f33342d3334203d3e20323636363332.roa
File:                     323830343a336566383a383030303a3a2f33342d3334203d3e20323636363332.roa (raw, json)
Hash identifier:          pgXGwQKs7EFQIOG3rVF1AJSmWb6ZKa++wD6ifH3SCZ0=
Subject key identifier:   69:1B:D7:73:E7:03:8B:12:55:2F:3D:67:4D:A5:31:71:88:E1:5A:FF
Certificate issuer:       /CN=74ED85142F26302A125E71A3E55B2063509E7AA3
Certificate serial:       4CC2860ADAA07E5425C3C44DE50F50427E0A155F
Authority key identifier: 74:ED:85:14:2F:26:30:2A:12:5E:71:A3:E5:5B:20:63:50:9E:7A:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74ED85142F26302A125E71A3E55B2063509E7AA3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/0/323830343a336566383a383030303a3a2f33342d3334203d3e20323636363332.roa
Signing time:             Tue 16 May 2023 12:23:07 +0000
ROA not before:           Tue 16 May 2023 12:18:07 +0000
ROA not after:            Tue 14 May 2024 12:23:07 +0000
asID:                     266632
IP address blocks:        2804:3ef8:8000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:c2:86:0a:da:a0:7e:54:25:c3:c4:4d:e5:0f:50:42:7e:0a:15:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74ED85142F26302A125E71A3E55B2063509E7AA3
        Validity
            Not Before: May 16 12:18:07 2023 GMT
            Not After : May 14 12:23:07 2024 GMT
        Subject: CN=691BD773E7038B12552F3D674DA5317188E15AFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8b:bb:65:ca:00:11:06:e3:b1:44:c3:37:35:
                    e2:79:17:11:e8:af:c9:86:7d:f7:33:2f:5c:3b:d7:
                    96:39:76:ad:90:61:bf:89:54:a3:a6:6a:44:f5:0f:
                    ff:6b:f7:58:d7:20:b5:c1:d0:56:7c:ae:0f:3a:ba:
                    92:1f:b3:28:e4:df:62:ff:c0:c8:28:f1:b0:85:36:
                    f3:d5:c5:ce:b7:4c:f8:23:1c:2d:44:7a:60:b4:0c:
                    86:06:6d:1c:65:56:8b:30:39:49:ca:26:65:c5:da:
                    69:8c:8f:8e:72:62:e8:d1:f6:f5:e2:69:d8:a7:48:
                    09:da:de:d4:22:eb:bd:8c:83:ff:69:ae:c7:e9:76:
                    b7:61:d9:61:92:c2:46:82:65:86:56:5a:73:40:50:
                    75:36:ec:64:84:8f:b5:0b:30:f5:6f:8f:91:65:3d:
                    87:79:40:f2:fc:8d:b6:03:71:fe:8a:89:12:e0:b1:
                    95:17:a4:2f:d7:9c:e7:41:15:83:ca:9c:56:32:de:
                    e5:cd:ac:df:c6:5c:61:ab:b0:a7:16:f0:93:d3:bb:
                    80:c8:1c:b0:fc:17:c7:4e:f3:da:0f:d4:a9:96:6e:
                    83:15:d1:fc:d9:f7:a2:d1:dc:37:f3:1e:ad:d0:ae:
                    ba:1f:e9:29:79:6a:7e:64:09:8c:df:11:c5:0a:9c:
                    1c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:1B:D7:73:E7:03:8B:12:55:2F:3D:67:4D:A5:31:71:88:E1:5A:FF
            X509v3 Authority Key Identifier:
                keyid:74:ED:85:14:2F:26:30:2A:12:5E:71:A3:E5:5B:20:63:50:9E:7A:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/0/74ED85142F26302A125E71A3E55B2063509E7AA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74ED85142F26302A125E71A3E55B2063509E7AA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/0/323830343a336566383a383030303a3a2f33342d3334203d3e20323636363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ef8:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         c7:7c:a4:e8:c0:f8:61:36:79:16:64:ad:2a:e1:76:95:09:13:
         12:e4:e0:88:7e:48:7c:23:e0:13:30:23:9b:84:f9:62:2a:24:
         9d:27:f0:6f:60:63:87:19:1b:df:42:dc:cf:5d:0b:fd:de:86:
         14:bb:59:42:e9:5f:d6:e7:41:43:ae:5d:bc:e0:80:19:0f:31:
         d6:d7:b1:7e:fc:10:3d:22:55:95:ee:6c:25:b8:b6:d6:22:e6:
         f6:70:c5:5f:bd:79:0f:da:0f:52:ff:32:e2:75:49:b6:98:be:
         28:8b:d5:44:b7:3a:f6:c4:c7:5b:2c:ab:96:ca:8b:68:14:ff:
         32:80:f7:b4:8f:8a:aa:4a:6c:24:dc:e9:15:37:53:4b:6e:1f:
         1b:f3:04:35:ef:d9:38:c5:6a:80:2c:92:96:5a:a3:52:c0:dc:
         51:ed:57:ac:ff:7c:02:66:01:06:3b:9c:13:42:3f:8b:bd:36:
         e1:e9:4d:7d:c7:22:69:0b:99:82:0d:73:ab:e7:e2:bb:e1:c2:
         e3:32:bd:43:28:38:1b:f8:57:e4:52:df:fc:a0:df:aa:f8:26:
         eb:da:5c:d1:87:09:3b:2f:08:ef:93:f6:33:26:25:4c:15:a0:
         64:53:bf:90:7b:4d:1e:33:54:77:da:00:f9:b4:94:56:41:3b:
         9e:4e:34:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:48:50 2025 by rpki-client