Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/0/323830343a353966383a3a2f33322d3438203d3e20323638373337.roa
File:                     323830343a353966383a3a2f33322d3438203d3e20323638373337.roa (raw, json)
Hash identifier:          yYxilCv1dQbMWtBlvMvCgqIxW7N4pkBmmpJQIomnB5I=
Subject key identifier:   04:F3:22:4E:4B:6F:22:81:09:4C:C3:B9:42:EA:B7:E2:28:D5:9D:2B
Certificate issuer:       /CN=B4094B069A8AB2552CDBCB34DC2E4D3D7FEE38CF
Certificate serial:       1DC6F522E633E10738AC92986E90C7F5486D8470
Authority key identifier: B4:09:4B:06:9A:8A:B2:55:2C:DB:CB:34:DC:2E:4D:3D:7F:EE:38:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4094B069A8AB2552CDBCB34DC2E4D3D7FEE38CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/0/323830343a353966383a3a2f33322d3438203d3e20323638373337.roa
Signing time:             Mon 09 Dec 2024 18:33:31 +0000
ROA not before:           Mon 09 Dec 2024 18:28:31 +0000
ROA not after:            Mon 08 Dec 2025 18:33:31 +0000
asID:                     268737
IP address blocks:        2804:59f8::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:c6:f5:22:e6:33:e1:07:38:ac:92:98:6e:90:c7:f5:48:6d:84:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4094B069A8AB2552CDBCB34DC2E4D3D7FEE38CF
        Validity
            Not Before: Dec  9 18:28:31 2024 GMT
            Not After : Dec  8 18:33:31 2025 GMT
        Subject: CN=04F3224E4B6F2281094CC3B942EAB7E228D59D2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:50:f3:a0:0c:22:d3:2f:47:2d:f0:b3:b8:43:
                    ee:ea:d3:21:59:13:38:a7:d3:44:f3:43:37:f0:78:
                    15:11:6f:1b:b3:ae:1f:15:c9:f2:2c:d1:cd:06:90:
                    1f:0f:e2:78:01:5f:34:69:6b:5b:9a:6a:ca:84:93:
                    60:26:b4:5f:3f:9d:8b:ad:8c:2a:1f:ea:d0:09:e8:
                    fc:e4:71:02:0c:2d:dc:08:09:11:a6:f6:b1:58:4a:
                    8a:5a:f3:6f:35:2f:e5:e6:1a:cf:47:75:d6:ff:a4:
                    4c:d9:5b:bc:73:83:89:95:65:b2:49:1a:03:0b:7a:
                    52:23:a8:fe:ff:08:48:56:c1:b0:10:94:16:4d:12:
                    59:12:4a:ad:eb:96:e0:20:1a:aa:a6:10:d6:9f:59:
                    da:40:62:73:a0:3b:71:88:f3:7c:ca:5b:b5:a4:51:
                    cb:23:a0:0a:75:c8:dd:28:91:b2:65:23:d3:00:fe:
                    66:31:86:70:23:59:c7:45:d7:f1:2f:b3:41:13:10:
                    14:54:1a:86:9a:07:c3:47:41:1d:eb:e5:ba:ae:ac:
                    f6:9c:f2:b4:36:48:93:f3:79:58:42:ed:3a:69:fc:
                    8e:7b:31:ad:fd:ff:3a:e6:f7:d8:77:ee:52:c8:a0:
                    a4:35:7a:fa:b3:c4:da:7f:58:7c:46:ac:15:1f:52:
                    c1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:F3:22:4E:4B:6F:22:81:09:4C:C3:B9:42:EA:B7:E2:28:D5:9D:2B
            X509v3 Authority Key Identifier:
                keyid:B4:09:4B:06:9A:8A:B2:55:2C:DB:CB:34:DC:2E:4D:3D:7F:EE:38:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/0/B4094B069A8AB2552CDBCB34DC2E4D3D7FEE38CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4094B069A8AB2552CDBCB34DC2E4D3D7FEE38CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/0/323830343a353966383a3a2f33322d3438203d3e20323638373337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:59f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         a4:df:fb:79:be:1e:8b:72:d4:4c:53:c8:8f:3b:ec:c2:b8:7c:
         0e:8e:8e:44:da:67:66:a4:52:1d:e5:af:81:a9:e4:f4:4b:81:
         16:3e:3a:f4:0f:72:c5:b7:0b:3d:41:4a:16:d5:aa:98:1d:b8:
         13:33:72:fd:59:54:2a:31:fc:50:af:a9:30:12:dd:a9:6b:0b:
         03:94:91:63:e7:24:03:64:ec:dc:94:b6:72:8a:a0:f3:4a:9b:
         4d:6f:2c:60:33:0d:37:af:fc:73:12:65:cf:5d:ca:b2:d7:5d:
         56:7f:80:3e:aa:3a:9e:d9:e8:c5:2c:63:70:54:2c:2c:2c:9a:
         bc:e2:15:4e:e2:a0:3c:eb:f2:a2:4a:73:e3:8b:d3:0e:ca:9d:
         e5:2b:7d:4f:92:38:cb:ed:f2:62:ec:86:f8:35:e8:c4:53:99:
         16:23:3b:5b:5b:cc:dc:3c:b4:a4:78:c3:c8:02:29:ad:ad:07:
         6f:d1:32:06:c1:d9:27:79:96:2f:6c:d3:ab:38:99:c4:74:7e:
         31:ea:b3:dd:29:85:a2:bc:62:d6:52:88:33:76:ea:5c:1c:30:
         82:c7:32:cd:31:a5:ac:40:88:98:b0:e6:cf:5c:b3:54:a4:ff:
         18:1c:81:98:70:f4:64:94:35:33:ae:9c:ee:d6:d0:bb:34:aa:
         5d:45:87:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:17 2025 by rpki-client