Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8SyiMGxgm2vHzuKqTHFEioQyFSHASeJjrYisTkzagHG5/0/323830343a333062383a343a3a2f36342d3634203d3e203238313534.roa
File:                     323830343a333062383a343a3a2f36342d3634203d3e203238313534.roa (raw, json)
Hash identifier:          t0JyNn1Iu3luQFgtQ/RPOeAg17/bYNvs6afg613sJyA=
Subject key identifier:   67:F0:C0:D8:C3:35:98:5A:60:8F:7E:B0:74:DF:FC:36:16:18:28:55
Certificate issuer:       /CN=9BFF34B95C9F93E1E69CB0421FFCF2F2FE1C26AD
Certificate serial:       203D692EE84A75BFDDA70FA5566440343DE45FC9
Authority key identifier: 9B:FF:34:B9:5C:9F:93:E1:E6:9C:B0:42:1F:FC:F2:F2:FE:1C:26:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9BFF34B95C9F93E1E69CB0421FFCF2F2FE1C26AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8SyiMGxgm2vHzuKqTHFEioQyFSHASeJjrYisTkzagHG5/0/323830343a333062383a343a3a2f36342d3634203d3e203238313534.roa
Signing time:             Fri 06 Oct 2023 17:50:08 +0000
ROA not before:           Fri 06 Oct 2023 17:45:08 +0000
ROA not after:            Fri 04 Oct 2024 17:50:08 +0000
asID:                     28154
IP address blocks:        2804:30b8:4::/64 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:3d:69:2e:e8:4a:75:bf:dd:a7:0f:a5:56:64:40:34:3d:e4:5f:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BFF34B95C9F93E1E69CB0421FFCF2F2FE1C26AD
        Validity
            Not Before: Oct  6 17:45:08 2023 GMT
            Not After : Oct  4 17:50:08 2024 GMT
        Subject: CN=67F0C0D8C335985A608F7EB074DFFC3616182855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:91:5e:a1:db:d1:f9:d6:41:8e:5a:96:41:7f:
                    fd:72:8c:73:6e:85:73:c6:88:9b:65:37:ab:10:ff:
                    72:8a:df:c8:09:c4:74:0e:57:65:45:cc:ba:0e:bc:
                    36:e1:03:97:4d:6c:73:13:98:74:b9:90:bc:05:c1:
                    9d:69:ec:99:f8:32:91:7d:6e:7e:c7:de:06:05:2a:
                    78:2a:21:43:1b:97:a3:ff:ec:0d:62:bb:66:8c:a9:
                    c1:0b:76:b6:76:f8:fc:af:33:04:25:dc:f7:d7:ca:
                    26:0c:40:ab:58:69:fc:4c:77:4b:e0:6b:14:51:7d:
                    7f:52:6f:19:c2:25:de:ec:99:b2:18:6a:48:21:10:
                    ee:01:13:79:63:ce:fb:fc:fd:14:2b:b8:69:49:8b:
                    9a:df:cb:3f:94:6e:63:b0:c2:a3:5b:51:08:5d:e6:
                    21:d8:38:25:67:31:46:ae:4d:0c:c9:94:69:ba:2e:
                    6e:b9:07:10:28:9d:c8:7f:0b:32:c6:af:e0:34:aa:
                    bb:20:63:c0:63:ee:e0:97:7d:80:73:02:81:4b:14:
                    dc:0e:50:03:c8:b0:8d:20:82:13:23:49:ab:28:b0:
                    59:e1:07:d5:93:e8:3b:34:2f:97:92:b2:a5:8f:0f:
                    78:1c:f7:9f:b8:63:d1:fc:af:64:2e:cb:89:ab:9b:
                    df:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F0:C0:D8:C3:35:98:5A:60:8F:7E:B0:74:DF:FC:36:16:18:28:55
            X509v3 Authority Key Identifier:
                keyid:9B:FF:34:B9:5C:9F:93:E1:E6:9C:B0:42:1F:FC:F2:F2:FE:1C:26:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8SyiMGxgm2vHzuKqTHFEioQyFSHASeJjrYisTkzagHG5/0/9BFF34B95C9F93E1E69CB0421FFCF2F2FE1C26AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9BFF34B95C9F93E1E69CB0421FFCF2F2FE1C26AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8SyiMGxgm2vHzuKqTHFEioQyFSHASeJjrYisTkzagHG5/0/323830343a333062383a343a3a2f36342d3634203d3e203238313534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:30b8:4::/64

    Signature Algorithm: sha256WithRSAEncryption
         3a:48:a8:b0:b3:5b:27:bf:4a:20:6a:62:6a:20:c5:f3:7c:7f:
         3e:04:db:0d:29:ff:01:a0:4d:81:a7:e1:88:f8:9f:3a:07:fe:
         a3:b9:60:90:50:ef:5e:f7:4d:92:22:f9:a2:c1:e9:a4:15:8b:
         95:31:68:2f:74:61:36:59:88:f8:bb:5a:89:23:02:19:e8:d7:
         b2:3e:eb:10:9a:fc:3e:17:65:21:b8:af:1f:3d:6d:e0:36:bc:
         39:39:b0:6a:43:0a:14:d8:cd:26:c9:c0:ea:81:ca:ce:9e:05:
         a8:83:dc:7f:49:31:68:44:35:4a:63:39:b7:29:e5:a6:87:b5:
         36:cd:2d:08:f6:03:16:44:40:19:e5:b3:35:8e:5f:e3:21:92:
         9c:f0:42:8a:98:67:76:76:5e:91:bf:f0:0a:d1:c1:be:95:0b:
         c8:cd:ee:7b:e9:a5:ef:45:4c:ca:f2:80:8f:c6:a6:d4:d9:36:
         d6:b8:59:6c:26:f1:d9:2c:48:83:e4:86:20:6c:0f:89:75:04:
         b4:69:57:c5:33:17:e4:60:80:f5:63:36:da:7f:0f:91:6c:f8:
         22:d6:ab:2b:01:64:18:ce:35:a4:49:17:fa:a9:6d:d9:e4:5e:
         60:23:a1:3b:5e:42:d1:08:9f:f4:4a:62:77:a0:1c:f8:46:ad:
         b1:4f:d4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:17 2025 by rpki-client