Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bASGRMN5d3fkWZdpwFsdR6sukprzCMJyJN17kjJFguZ/0/323830343a353933633a3a2f33322d3334203d3e20323638313737.roa
File:                     323830343a353933633a3a2f33322d3334203d3e20323638313737.roa (raw, json)
Hash identifier:          +VVJF7s8/i9BWR4GBss5IzpMr/sOyCEwgnLxObKEXuw=
Subject key identifier:   6B:5F:94:EA:E7:90:B3:D1:B4:3E:7B:1C:2C:65:3E:73:B1:F2:D3:3C
Certificate issuer:       /CN=14F32A13ACEF5A58C84C147548B1C3475FB1E893
Certificate serial:       625C8C092E1CFA3AFC817EA5E6C0C93903F438B5
Authority key identifier: 14:F3:2A:13:AC:EF:5A:58:C8:4C:14:75:48:B1:C3:47:5F:B1:E8:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/14F32A13ACEF5A58C84C147548B1C3475FB1E893.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bASGRMN5d3fkWZdpwFsdR6sukprzCMJyJN17kjJFguZ/0/323830343a353933633a3a2f33322d3334203d3e20323638313737.roa
Signing time:             Tue 11 Apr 2023 12:34:25 +0000
ROA not before:           Tue 11 Apr 2023 12:29:25 +0000
ROA not after:            Tue 09 Apr 2024 12:34:25 +0000
asID:                     268177
IP address blocks:        2804:593c::/32 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:5c:8c:09:2e:1c:fa:3a:fc:81:7e:a5:e6:c0:c9:39:03:f4:38:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14F32A13ACEF5A58C84C147548B1C3475FB1E893
        Validity
            Not Before: Apr 11 12:29:25 2023 GMT
            Not After : Apr  9 12:34:25 2024 GMT
        Subject: CN=6B5F94EAE790B3D1B43E7B1C2C653E73B1F2D33C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:fc:6b:c3:17:0c:76:47:1a:de:29:d8:3b:d8:
                    58:73:28:e4:34:ac:19:4c:84:27:00:ef:ac:9d:71:
                    f2:29:77:6a:82:1b:ba:79:85:a7:c4:48:4d:d0:04:
                    2b:64:61:c3:e5:9e:8f:27:d3:35:d8:ed:d7:a3:87:
                    fe:fa:64:15:19:d3:d2:f4:42:b3:c8:73:2b:81:25:
                    19:46:c8:6f:de:e0:f0:11:f1:39:13:fd:bc:3f:23:
                    aa:9e:20:6c:ef:dd:f5:25:d7:d3:46:70:8f:46:18:
                    48:ea:ea:5e:ea:51:2c:12:78:42:3b:04:29:a7:50:
                    cd:9d:d7:f8:0a:92:c7:50:31:64:9d:ed:b4:4f:b0:
                    69:20:30:e7:53:5f:22:d0:9a:5a:93:82:d3:a9:14:
                    2e:79:af:4f:68:92:9e:c8:66:f3:bc:85:53:14:ba:
                    fb:6c:b5:7c:51:c3:a6:35:cf:b4:2e:30:19:d9:e1:
                    29:b5:de:b3:3e:d7:b6:f3:81:6a:ad:99:61:ee:90:
                    ee:9d:6e:53:27:5b:00:28:a6:0f:70:eb:48:f4:28:
                    17:ce:c7:c8:74:b9:d7:49:f4:8b:a1:54:08:de:cb:
                    7a:1b:6f:82:12:52:92:83:be:e6:b2:e6:a3:95:c1:
                    c6:bc:65:a7:5e:55:cd:c6:59:70:4d:d3:c6:03:e0:
                    a4:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:5F:94:EA:E7:90:B3:D1:B4:3E:7B:1C:2C:65:3E:73:B1:F2:D3:3C
            X509v3 Authority Key Identifier:
                keyid:14:F3:2A:13:AC:EF:5A:58:C8:4C:14:75:48:B1:C3:47:5F:B1:E8:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bASGRMN5d3fkWZdpwFsdR6sukprzCMJyJN17kjJFguZ/0/14F32A13ACEF5A58C84C147548B1C3475FB1E893.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/14F32A13ACEF5A58C84C147548B1C3475FB1E893.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bASGRMN5d3fkWZdpwFsdR6sukprzCMJyJN17kjJFguZ/0/323830343a353933633a3a2f33322d3334203d3e20323638313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:593c::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:e0:ec:1e:d2:48:c9:c3:d1:70:17:a1:37:83:af:4c:ae:fd:
         9c:22:6a:22:6b:14:c8:16:21:f3:3c:27:72:13:65:fe:54:f5:
         77:06:2c:a5:c7:36:b5:4b:49:76:25:7b:80:c6:a0:14:e5:6e:
         bb:b6:3f:75:dc:f4:17:8d:a0:f8:32:ba:44:eb:e7:4d:50:a8:
         b3:d6:2e:6a:27:67:32:cf:85:0c:4e:33:3c:12:5c:2a:13:ae:
         d8:6f:34:ed:0d:c3:c5:bd:8a:d6:a0:c0:ae:77:d3:74:62:33:
         5f:2a:80:61:3f:a2:6e:c4:d4:3f:16:13:9b:e7:c6:93:05:be:
         1f:51:7c:8b:41:57:e0:cc:74:c9:f8:dc:c5:fb:87:4d:4e:1b:
         b6:f6:19:8d:d8:34:47:ca:a9:8c:b1:55:44:4f:dc:4c:91:10:
         0e:b5:5c:78:55:e0:0a:5e:18:2d:0a:d9:66:0f:f7:41:7c:85:
         6f:37:8f:03:43:e3:c9:d3:20:74:f1:51:23:7b:40:71:c2:6e:
         22:98:7b:35:1d:47:7d:92:00:2a:71:22:da:01:ae:20:3a:ee:
         d5:ed:4e:31:9a:25:4c:3e:12:5d:0d:89:02:de:a2:76:85:19:
         21:db:46:6e:20:e8:63:2e:76:b6:1b:59:3d:10:11:4a:bc:13:
         f4:18:b8:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:31:44 2025 by rpki-client