Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/89YA5URBwzcfU7YpR6MXYz7UEWdJFmcqQFJJaMW5BSUg/0/323830343a373066303a323031303a3a2f34352d3435203d3e20323730373537.roa
File:                     323830343a373066303a323031303a3a2f34352d3435203d3e20323730373537.roa (raw, json)
Hash identifier:          +BLvzM5K4/pL7Q0ChWK/O/jjJACcT52XpTlsVl/F6Nk=
Subject key identifier:   C3:83:8F:18:87:75:2A:6C:83:87:06:D6:4E:C5:D7:CB:D0:69:8D:72
Certificate issuer:       /CN=978C058CACCF9405ABB1475ABC54573C186268F7
Certificate serial:       356BD19D59CE3C240CD19631AB68EDAACF683B1D
Authority key identifier: 97:8C:05:8C:AC:CF:94:05:AB:B1:47:5A:BC:54:57:3C:18:62:68:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/978C058CACCF9405ABB1475ABC54573C186268F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/89YA5URBwzcfU7YpR6MXYz7UEWdJFmcqQFJJaMW5BSUg/0/323830343a373066303a323031303a3a2f34352d3435203d3e20323730373537.roa
Signing time:             Sat 04 Mar 2023 17:16:01 +0000
ROA not before:           Sat 04 Mar 2023 17:11:01 +0000
ROA not after:            Sat 02 Mar 2024 17:16:01 +0000
asID:                     270757
IP address blocks:        2804:70f0:2010::/45 maxlen: 45
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:6b:d1:9d:59:ce:3c:24:0c:d1:96:31:ab:68:ed:aa:cf:68:3b:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=978C058CACCF9405ABB1475ABC54573C186268F7
        Validity
            Not Before: Mar  4 17:11:01 2023 GMT
            Not After : Mar  2 17:16:01 2024 GMT
        Subject: CN=C3838F1887752A6C838706D64EC5D7CBD0698D72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:87:82:6d:d4:03:ac:91:09:84:5b:21:9d:b9:
                    54:bd:ce:5a:b1:a4:8c:31:4e:1b:47:d5:eb:cf:6a:
                    db:cc:53:b6:31:e6:84:6b:29:1a:24:26:86:ad:80:
                    e8:69:83:82:85:f2:d8:79:5c:82:3a:10:a4:89:36:
                    67:ca:1b:ca:dc:20:e5:8f:ff:93:59:c9:96:21:41:
                    d3:1a:85:07:98:0d:bf:74:6b:8f:7c:b5:4a:7d:51:
                    14:a6:81:22:1f:fa:0e:29:14:28:a4:25:a2:19:3a:
                    a3:1e:92:f6:7f:a6:7d:76:37:b9:ac:2d:30:06:83:
                    03:93:88:d9:46:c1:23:dd:e5:3c:fc:01:a6:ae:c7:
                    3e:19:10:7c:a1:ef:d2:2e:93:c3:8a:64:8a:fe:f0:
                    e3:7d:b7:63:6b:24:5a:8d:bc:ea:9b:f8:7f:f8:f3:
                    b5:2d:64:05:aa:14:5d:0f:39:6c:e9:dd:be:3b:4d:
                    7d:0d:12:c2:83:5e:fe:4b:f8:3b:95:e9:09:a6:5b:
                    e3:41:20:8e:6d:31:44:b2:7b:17:37:8e:72:06:80:
                    22:32:60:4c:81:85:61:a4:27:c8:95:5b:59:7f:29:
                    83:b2:a9:18:0b:0b:4d:7a:38:00:3a:2a:4f:9b:99:
                    10:71:ea:61:8b:57:b0:df:63:63:e4:14:54:b4:bb:
                    a6:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:83:8F:18:87:75:2A:6C:83:87:06:D6:4E:C5:D7:CB:D0:69:8D:72
            X509v3 Authority Key Identifier:
                keyid:97:8C:05:8C:AC:CF:94:05:AB:B1:47:5A:BC:54:57:3C:18:62:68:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/89YA5URBwzcfU7YpR6MXYz7UEWdJFmcqQFJJaMW5BSUg/0/978C058CACCF9405ABB1475ABC54573C186268F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/978C058CACCF9405ABB1475ABC54573C186268F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/89YA5URBwzcfU7YpR6MXYz7UEWdJFmcqQFJJaMW5BSUg/0/323830343a373066303a323031303a3a2f34352d3435203d3e20323730373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:70f0:2010::/45

    Signature Algorithm: sha256WithRSAEncryption
         27:0b:2c:6d:76:ae:9b:d3:c9:87:4f:b6:59:b4:a9:59:48:8a:
         b0:9c:82:d6:bc:a9:9a:ab:23:10:1a:53:5c:eb:8e:8e:4c:95:
         b8:61:9b:d1:54:51:44:a9:9e:48:ce:52:52:6f:e7:05:73:48:
         b2:80:8a:b4:bf:c2:07:8b:d0:b3:da:1d:a4:d9:57:78:98:e5:
         66:84:5a:9e:fd:55:ac:ab:5d:8d:c7:ed:08:0a:df:c6:f3:16:
         68:c4:8f:b9:89:a8:36:1a:ac:dd:d9:a2:96:ed:44:f4:27:e1:
         a6:1c:52:56:77:0c:e6:72:07:87:60:55:34:ad:f4:c0:3c:fe:
         66:33:05:98:70:a0:13:67:ed:7d:58:e4:dd:08:cf:64:a5:49:
         5a:6a:e3:21:49:e9:7e:93:4d:59:eb:95:80:47:48:a0:99:15:
         be:50:80:13:57:68:82:52:ec:ef:10:82:2a:75:7e:46:e0:0c:
         ea:5f:93:5f:0d:71:a9:66:a4:e4:ec:a4:88:40:a2:c1:ce:b2:
         39:62:8d:3d:c5:b4:f2:b2:14:64:03:15:40:dc:8b:df:f2:d2:
         17:6c:81:36:3b:8f:bb:6f:9d:d2:22:14:61:b3:95:08:52:cc:
         b7:09:05:bb:e7:7c:70:42:69:12:37:5a:1c:a0:4b:db:99:2c:
         81:17:4b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:28:21 2025 by rpki-client