Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/323830343a323338633a3a2f33362d3336203d3e20323634313639.roa
File:                     323830343a323338633a3a2f33362d3336203d3e20323634313639.roa (raw, json)
Hash identifier:          YUMoEes5WkcxQhc9eOchL8lnU5QcZcL5gPeVmpWxF4I=
Subject key identifier:   EF:56:A3:D3:51:47:D4:47:27:D2:32:DA:4E:46:75:E5:A8:75:9C:E6
Certificate issuer:       /CN=5AF446A45A8AEE66A21D74E982C72CD4B7B22CE0
Certificate serial:       29E9AAE8D9BB995119D2D8C9F4F2E92571C4B5CF
Authority key identifier: 5A:F4:46:A4:5A:8A:EE:66:A2:1D:74:E9:82:C7:2C:D4:B7:B2:2C:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AF446A45A8AEE66A21D74E982C72CD4B7B22CE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/323830343a323338633a3a2f33362d3336203d3e20323634313639.roa
Signing time:             Tue 06 Aug 2024 13:30:22 +0000
ROA not before:           Tue 06 Aug 2024 13:25:22 +0000
ROA not after:            Tue 05 Aug 2025 13:30:22 +0000
asID:                     264169
IP address blocks:        2804:238c::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:e9:aa:e8:d9:bb:99:51:19:d2:d8:c9:f4:f2:e9:25:71:c4:b5:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AF446A45A8AEE66A21D74E982C72CD4B7B22CE0
        Validity
            Not Before: Aug  6 13:25:22 2024 GMT
            Not After : Aug  5 13:30:22 2025 GMT
        Subject: CN=EF56A3D35147D44727D232DA4E4675E5A8759CE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:8e:b3:b0:97:9d:83:a9:8e:76:6a:2e:79:d8:
                    7c:82:3b:bb:7b:1f:34:c0:35:18:f1:07:e2:15:ee:
                    1c:94:e1:67:3a:88:24:aa:84:16:86:ce:8b:9c:4a:
                    eb:dc:40:c0:01:15:24:a6:36:f1:a9:1d:95:c3:89:
                    46:cb:4c:5a:8a:de:01:1f:0a:9a:f3:61:bb:98:c4:
                    8e:e5:fc:50:15:8c:42:48:83:94:71:30:db:42:c3:
                    e1:7a:68:71:49:da:47:1f:13:ba:ed:38:b2:37:af:
                    62:41:76:7d:7e:e4:6b:08:21:a9:7b:c6:65:c7:af:
                    b1:e5:1a:0b:48:5f:94:3b:cd:53:4e:6a:00:18:2a:
                    a3:b5:ee:1f:9c:bf:8d:02:72:ad:da:7c:39:22:12:
                    88:bc:db:1a:b3:85:4b:12:7d:b3:34:8d:68:44:c8:
                    fc:f5:ad:d5:64:df:d5:ab:c7:ff:37:f6:ad:59:e8:
                    87:ff:be:61:5a:e6:de:20:6d:6f:19:31:80:f8:b3:
                    c7:40:18:39:fc:f1:fd:75:87:0c:d9:b5:de:3d:18:
                    76:c8:36:74:34:25:75:3e:ab:6a:92:93:9e:4f:fe:
                    cf:d9:4e:25:43:ac:52:c8:bf:86:6b:b6:3a:9d:70:
                    b9:6e:9c:71:55:e1:36:d8:9e:9f:3b:cc:c3:50:30:
                    06:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:56:A3:D3:51:47:D4:47:27:D2:32:DA:4E:46:75:E5:A8:75:9C:E6
            X509v3 Authority Key Identifier:
                keyid:5A:F4:46:A4:5A:8A:EE:66:A2:1D:74:E9:82:C7:2C:D4:B7:B2:2C:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/5AF446A45A8AEE66A21D74E982C72CD4B7B22CE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AF446A45A8AEE66A21D74E982C72CD4B7B22CE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/323830343a323338633a3a2f33362d3336203d3e20323634313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:238c::/36

    Signature Algorithm: sha256WithRSAEncryption
         96:b6:d8:ec:e9:68:ce:ba:f1:64:45:bb:c1:da:ab:2a:21:ab:
         f5:71:05:a6:0a:fe:96:a9:a9:e9:6a:e7:b8:1f:d6:b0:50:c6:
         54:6e:60:ea:98:52:aa:18:e1:01:14:86:28:cc:07:ac:c3:83:
         56:51:2d:b3:8d:26:12:81:14:0e:2e:4b:9a:f0:6f:ef:fc:63:
         f5:fd:a0:59:5f:53:b1:ee:0d:16:67:86:fb:85:8d:49:70:45:
         91:09:15:8e:44:58:9c:d7:82:db:20:aa:7c:da:48:ef:1a:0b:
         5e:27:ce:2c:f9:ed:b3:c6:64:10:e1:a6:5b:21:a5:a3:48:ad:
         38:d4:0d:39:ee:2c:70:03:3f:43:f1:f1:4e:5e:22:db:fb:40:
         06:bb:83:ce:79:62:27:f9:4c:a0:f5:f3:31:c2:44:6f:ab:b2:
         1e:98:55:aa:75:91:97:6a:2c:47:21:1d:a9:16:61:fc:a0:ff:
         8f:35:ee:b2:30:09:92:b3:a4:1c:ea:13:cd:70:9e:64:21:ea:
         43:1e:5c:b0:8f:81:eb:5b:af:3b:80:0f:ab:40:90:7e:a7:f0:
         80:51:55:df:00:9d:5c:4d:d8:ff:9e:0d:f1:ba:b7:be:05:7c:
         2d:de:2b:ba:14:fa:7d:ac:6f:80:c9:f1:0a:8b:7e:73:3a:c5:
         bd:1a:ff:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:22:23 2025 by rpki-client