Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/323830343a3763303a343030303a3a2f33362d3336203d3e20323632333136.roa
File:                     323830343a3763303a343030303a3a2f33362d3336203d3e20323632333136.roa (raw, json)
Hash identifier:          wvMy6AmRKlQfhrsMP+3gqCxRx8tyEvYrhp5qc6tokUE=
Subject key identifier:   22:95:BA:1B:A1:37:45:1B:B4:8C:85:76:33:22:BF:E6:E5:BE:55:7F
Certificate issuer:       /CN=CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808
Certificate serial:       375C40F45EB27F7C8402B072A629B3CF2C139B39
Authority key identifier: CD:6A:13:2F:B8:F9:C1:B9:8A:9C:DC:F1:51:EA:82:35:0A:1E:08:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/323830343a3763303a343030303a3a2f33362d3336203d3e20323632333136.roa
Signing time:             Mon 21 Aug 2023 13:26:40 +0000
ROA not before:           Mon 21 Aug 2023 13:21:40 +0000
ROA not after:            Mon 19 Aug 2024 13:26:40 +0000
asID:                     262316
IP address blocks:        2804:7c0:4000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:5c:40:f4:5e:b2:7f:7c:84:02:b0:72:a6:29:b3:cf:2c:13:9b:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808
        Validity
            Not Before: Aug 21 13:21:40 2023 GMT
            Not After : Aug 19 13:26:40 2024 GMT
        Subject: CN=2295BA1BA137451BB48C85763322BFE6E5BE557F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f7:63:27:48:34:41:0c:96:23:50:ad:b8:25:
                    68:7f:c2:20:08:af:46:fd:dd:8e:d3:4e:56:f7:63:
                    a8:e5:72:0c:50:b2:be:56:f7:f4:db:80:a5:16:08:
                    89:a9:2f:34:7a:f8:79:ef:c1:73:19:a8:c8:ef:cc:
                    99:56:b7:3a:34:6c:8d:19:2f:c3:46:4d:77:26:32:
                    46:4b:96:14:53:35:34:62:05:27:a4:cb:47:b3:ec:
                    e0:fe:7b:d6:75:d7:a0:9a:d9:1b:18:55:15:ea:3d:
                    5e:69:56:09:b1:47:42:80:99:ae:62:b5:f9:59:db:
                    95:4b:4c:38:2d:4f:fd:6a:74:df:6d:74:a7:e4:1a:
                    d9:f5:76:ec:c1:f6:57:5d:e7:29:a8:c9:a9:9d:6d:
                    f0:b2:b9:39:a1:02:96:17:cd:a3:93:e6:02:27:76:
                    af:e0:a2:c6:ea:72:eb:6a:1c:f0:5c:a1:32:84:95:
                    f6:7e:84:f7:a2:1b:fa:f3:32:60:76:4f:75:9c:e1:
                    d3:c5:75:dd:92:13:27:f2:0b:f6:24:ff:7f:11:0f:
                    d1:1c:ab:d6:95:0b:38:24:f7:fb:a7:67:2e:90:dc:
                    56:a4:99:63:bf:17:c0:54:10:20:58:e2:00:bc:ab:
                    f2:73:27:78:e1:31:74:de:d6:ca:99:eb:b1:d4:75:
                    d7:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:95:BA:1B:A1:37:45:1B:B4:8C:85:76:33:22:BF:E6:E5:BE:55:7F
            X509v3 Authority Key Identifier:
                keyid:CD:6A:13:2F:B8:F9:C1:B9:8A:9C:DC:F1:51:EA:82:35:0A:1E:08:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/323830343a3763303a343030303a3a2f33362d3336203d3e20323632333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c0:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         2e:ac:21:e8:a3:6c:28:3a:1e:06:3b:22:a9:d8:87:ce:38:9c:
         54:08:0d:fc:ba:81:41:89:bb:56:cd:12:1f:55:e5:58:c0:23:
         34:b6:dd:ec:4d:16:c5:13:dc:28:da:72:9f:6b:c3:27:6d:a4:
         ef:e0:e0:2f:39:34:64:99:1b:da:2b:20:08:b3:63:13:47:ff:
         4e:83:86:62:30:e2:25:52:dc:93:66:65:a6:d4:56:97:bb:52:
         fa:d1:df:29:8b:0d:2a:b2:a0:27:43:dc:b3:43:4f:13:f6:8f:
         f0:9b:83:17:11:5d:41:6c:e0:57:13:be:b7:46:c2:dd:36:cd:
         5b:af:45:76:46:87:b8:c5:5c:3c:9d:e8:06:f6:f1:4b:ca:35:
         19:d2:ec:39:62:9e:84:93:13:92:42:cb:25:63:f5:3a:7d:ed:
         29:02:57:29:1e:fd:4f:c0:e3:7f:34:01:0d:48:c8:70:cf:17:
         fe:68:dc:2a:ac:80:b5:3a:ce:ff:0a:2a:d4:74:5d:21:89:fa:
         1e:04:78:6f:d5:44:e3:85:8d:3f:14:c5:2c:31:01:28:b4:d8:
         70:45:4a:a9:8b:29:32:dd:5f:74:a5:9b:75:6c:61:94:8c:8b:
         32:4e:ec:e3:2a:dd:95:29:5e:4a:57:7f:40:7c:23:4d:8f:46:
         20:ee:fb:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:34:02 2025 by rpki-client