Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7WizM153Ba9ku8ck1G4rAWbJ61nXUU1yq3w1VgPwyXPA/0/323830343a323062383a3a2f33322d3430203d3e20323634353130.roa
File:                     323830343a323062383a3a2f33322d3430203d3e20323634353130.roa (raw, json)
Hash identifier:          b5Z+tvc7nEMHVZyllHfv/kWTp8b22xdY7stiq9uJUO8=
Subject key identifier:   CB:08:2C:9A:23:52:7B:3F:CF:B7:19:9E:F7:C2:94:93:2D:E0:12:A7
Certificate issuer:       /CN=EE925980C15067FE239ED99E39DEC9F0306C1362
Certificate serial:       44B23ACB74811C19717572FB77FC5854B3CCEFE5
Authority key identifier: EE:92:59:80:C1:50:67:FE:23:9E:D9:9E:39:DE:C9:F0:30:6C:13:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE925980C15067FE239ED99E39DEC9F0306C1362.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7WizM153Ba9ku8ck1G4rAWbJ61nXUU1yq3w1VgPwyXPA/0/323830343a323062383a3a2f33322d3430203d3e20323634353130.roa
Signing time:             Thu 27 Oct 2022 20:18:04 +0000
ROA not before:           Thu 27 Oct 2022 20:13:04 +0000
ROA not after:            Thu 26 Oct 2023 20:18:04 +0000
asID:                     264510
IP address blocks:        2804:20b8::/32 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:b2:3a:cb:74:81:1c:19:71:75:72:fb:77:fc:58:54:b3:cc:ef:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE925980C15067FE239ED99E39DEC9F0306C1362
        Validity
            Not Before: Oct 27 20:13:04 2022 GMT
            Not After : Oct 26 20:18:04 2023 GMT
        Subject: CN=CB082C9A23527B3FCFB7199EF7C294932DE012A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:35:6f:ab:40:e7:f9:9b:85:dd:7c:7e:0a:91:
                    33:92:7b:da:d9:e7:c4:bf:ae:9b:63:a3:f1:83:de:
                    d4:35:33:0d:ca:28:ba:e0:9a:46:3b:63:97:5f:26:
                    0f:93:7a:2e:ac:5a:c1:a0:b3:c8:95:53:10:6c:d4:
                    49:c2:07:5a:ed:56:93:7e:cf:02:0b:89:68:9f:ba:
                    cd:c4:2b:06:db:b0:37:01:77:bb:e2:88:c6:cc:be:
                    cc:fc:42:03:91:79:09:dc:ae:1c:ca:ca:e2:c6:f5:
                    e0:57:36:d2:a7:65:3d:5f:eb:e8:38:ed:1e:21:f9:
                    e2:5b:dc:d2:36:f5:ea:00:98:b3:97:3e:71:ab:27:
                    65:77:5d:62:00:a2:35:34:18:c5:0d:7c:3b:e2:b6:
                    c3:a8:7c:88:4a:d1:1e:3e:b2:4b:8d:48:20:42:28:
                    0a:97:1d:6f:8c:43:a8:d3:77:61:a5:d0:88:19:b6:
                    8c:d1:e5:0f:d8:dd:97:a4:33:df:a8:32:da:f1:91:
                    ef:ea:cd:40:d8:8b:db:66:c5:eb:07:1c:95:08:0a:
                    56:b1:ab:8e:a1:fb:09:84:35:9b:47:ae:9b:64:cf:
                    0b:27:52:2e:04:82:73:d1:a4:b9:ca:7b:51:b9:5f:
                    b8:f7:44:24:13:6d:c1:e4:22:3e:30:6c:82:2e:9a:
                    34:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:08:2C:9A:23:52:7B:3F:CF:B7:19:9E:F7:C2:94:93:2D:E0:12:A7
            X509v3 Authority Key Identifier:
                keyid:EE:92:59:80:C1:50:67:FE:23:9E:D9:9E:39:DE:C9:F0:30:6C:13:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7WizM153Ba9ku8ck1G4rAWbJ61nXUU1yq3w1VgPwyXPA/0/EE925980C15067FE239ED99E39DEC9F0306C1362.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE925980C15067FE239ED99E39DEC9F0306C1362.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7WizM153Ba9ku8ck1G4rAWbJ61nXUU1yq3w1VgPwyXPA/0/323830343a323062383a3a2f33322d3430203d3e20323634353130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:20b8::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:49:ec:b6:07:a4:d4:de:0d:d7:ed:2e:95:d6:eb:95:43:7a:
         0e:1b:29:55:03:da:14:65:69:66:92:d7:46:31:eb:65:68:f3:
         b5:ba:60:55:5b:47:2a:0c:d0:d2:2a:39:3a:a1:69:a4:bd:36:
         b0:9f:5f:04:d0:7e:10:21:0d:d1:14:5c:33:42:25:24:f3:0e:
         ee:35:c8:08:b5:bf:d9:37:29:fa:dc:ad:25:5f:d3:71:fe:79:
         7a:57:16:bd:22:75:8e:0f:cf:d1:54:42:05:5f:43:d1:59:4a:
         fc:d6:9f:7a:de:f9:3d:2c:31:a6:a7:f0:38:ee:5a:bf:7b:e4:
         45:d9:08:2e:01:d3:4c:f7:f5:56:e1:b4:5b:a6:d2:d5:bc:b0:
         c4:7a:c5:46:1b:d9:c0:e4:ca:fe:a8:5b:9a:41:03:02:af:9b:
         c8:9d:1f:82:e1:a1:4e:18:87:35:1f:46:34:65:3c:7f:0d:19:
         bf:f5:cd:1c:69:01:cd:23:01:5f:b9:fa:8d:81:54:33:12:53:
         fb:9b:5b:f0:d7:b8:2f:13:2e:71:17:75:d3:0c:0e:da:cb:43:
         c0:7c:13:bc:a5:8d:b5:3a:1c:65:06:11:20:75:dd:11:4f:76:
         a6:01:9f:cc:08:ac:94:e4:3d:9a:14:16:00:16:ce:cc:3a:e9:
         88:ab:c7:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:37:40 2025 by rpki-client