Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/323830343a326566303a383030303a3a2f33332d3333203d3e20323634383632.roa
File:                     323830343a326566303a383030303a3a2f33332d3333203d3e20323634383632.roa (raw, json)
Hash identifier:          3uzX+kbsy0jx3O1g0j/+ECJKey9dQISjhNV+uMFQFBA=
Subject key identifier:   C9:01:CE:12:BB:08:AE:0C:DB:C2:7A:30:30:EC:2A:F7:14:B6:D5:15
Certificate issuer:       /CN=34510C8CD19CD2BA841BFCD90C3813E80D522A3F
Certificate serial:       6CEE310CFDEC6F8AF28FB356AE2334D198B6D887
Authority key identifier: 34:51:0C:8C:D1:9C:D2:BA:84:1B:FC:D9:0C:38:13:E8:0D:52:2A:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/34510C8CD19CD2BA841BFCD90C3813E80D522A3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/323830343a326566303a383030303a3a2f33332d3333203d3e20323634383632.roa
Signing time:             Sat 19 Aug 2023 16:00:00 +0000
ROA not before:           Sat 19 Aug 2023 15:55:00 +0000
ROA not after:            Sat 17 Aug 2024 16:00:00 +0000
asID:                     264862
IP address blocks:        2804:2ef0:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:ee:31:0c:fd:ec:6f:8a:f2:8f:b3:56:ae:23:34:d1:98:b6:d8:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34510C8CD19CD2BA841BFCD90C3813E80D522A3F
        Validity
            Not Before: Aug 19 15:55:00 2023 GMT
            Not After : Aug 17 16:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:b5:d7:56:a3:62:41:8f:6f:f1:6f:76:5e:31:
                    6f:43:e9:2d:2a:fe:ef:26:fe:33:41:14:c0:04:17:
                    11:df:9a:94:41:8f:60:cc:d1:30:4d:d2:2f:b8:61:
                    1f:52:b3:7b:3c:82:c5:f1:86:0c:61:85:6c:a9:f7:
                    e1:5c:d1:f7:c1:44:ab:72:68:0c:9c:5b:42:48:50:
                    96:9e:67:ad:5f:3e:63:c0:3b:8d:6b:4e:1b:39:ce:
                    69:43:a3:0a:10:26:2d:7e:fe:ad:f8:a6:58:43:31:
                    7d:30:9e:86:bb:48:32:a3:86:1a:f1:4c:44:cf:5e:
                    80:d3:75:f1:64:de:21:12:c9:5f:0e:45:05:4b:d3:
                    4e:bd:f1:35:db:12:32:d6:c9:e0:d4:e3:87:0e:e2:
                    a3:c9:9d:c3:54:b5:13:de:53:50:04:27:b9:ce:c0:
                    88:45:65:e9:2f:a8:34:b4:d0:72:0c:b5:89:72:56:
                    21:dc:8e:7c:d6:c9:5c:08:9d:a6:77:b9:b3:8d:d3:
                    a0:77:0b:62:d6:50:d0:51:2f:00:7b:b1:6b:d0:7d:
                    1c:06:28:57:36:53:78:d1:3b:e5:44:51:94:84:03:
                    ca:7c:99:d1:5a:79:4e:5b:88:b6:29:f9:85:5d:b5:
                    35:fb:d0:e3:75:da:a3:fc:eb:a5:32:a4:e4:ba:be:
                    3e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:01:CE:12:BB:08:AE:0C:DB:C2:7A:30:30:EC:2A:F7:14:B6:D5:15
            X509v3 Authority Key Identifier:
                keyid:34:51:0C:8C:D1:9C:D2:BA:84:1B:FC:D9:0C:38:13:E8:0D:52:2A:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/34510C8CD19CD2BA841BFCD90C3813E80D522A3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/34510C8CD19CD2BA841BFCD90C3813E80D522A3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/323830343a326566303a383030303a3a2f33332d3333203d3e20323634383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2ef0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         4f:19:f0:f4:03:9d:2e:5b:75:d2:25:16:dc:78:88:bd:3a:8c:
         59:36:40:1f:9f:99:ec:79:26:3c:60:93:1d:a0:4b:cd:37:10:
         82:ce:58:68:1c:39:c6:0f:ac:10:bf:ce:e9:be:cb:e2:80:51:
         81:7c:46:6e:67:d0:4a:97:e0:35:c5:d0:7a:af:56:f5:75:8b:
         21:e2:c2:0f:93:26:51:10:b0:1b:69:a1:f6:85:6f:aa:a9:37:
         b9:47:e9:26:7e:67:c8:73:d3:dc:90:cf:7a:92:89:07:f7:aa:
         b7:0e:98:46:83:6c:13:b8:37:b6:67:1d:3d:1d:f5:3c:5a:c6:
         bc:24:b0:47:b6:2a:7c:3d:09:c6:af:a9:5b:11:68:89:09:2a:
         86:c1:16:86:d3:d4:d8:96:09:f3:f7:96:3f:b7:e9:62:bd:fb:
         d8:d0:43:dc:2f:ee:bd:1e:3e:64:28:db:d3:21:09:92:14:77:
         a3:2b:35:0e:1f:db:f1:25:84:d7:2f:91:c1:14:2e:18:17:ae:
         fe:8e:d5:70:8a:23:5c:21:d7:7a:6b:c5:8d:0d:3f:ba:6e:d3:
         9b:07:37:c8:0c:b7:15:88:ea:a3:23:66:94:01:6f:f3:bb:e4:
         c9:7b:aa:03:b5:42:1c:0f:c5:26:75:05:a4:f0:69:d5:3b:fd:
         5c:c5:36:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:37:27 2025 by rpki-client