Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8SyiMGxgm2vHzuKqTHFEioQyFSHASeJjrYisTkzagHG5/0/323830343a333062383a353a3a2f36342d3634203d3e203238313534.roa
File:                     323830343a333062383a353a3a2f36342d3634203d3e203238313534.roa (raw, json)
Hash identifier:          LvE5syfU9yPg5XlWMnbpyj7MQc+OAJJR/e6jUTjbkto=
Subject key identifier:   D2:63:86:7A:E6:7B:AE:E2:22:70:86:D0:7D:0B:3A:00:AF:CC:F6:88
Certificate issuer:       /CN=9BFF34B95C9F93E1E69CB0421FFCF2F2FE1C26AD
Certificate serial:       23A09C8D6F5A173D582B523FB0150E25EB1459AC
Authority key identifier: 9B:FF:34:B9:5C:9F:93:E1:E6:9C:B0:42:1F:FC:F2:F2:FE:1C:26:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9BFF34B95C9F93E1E69CB0421FFCF2F2FE1C26AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8SyiMGxgm2vHzuKqTHFEioQyFSHASeJjrYisTkzagHG5/0/323830343a333062383a353a3a2f36342d3634203d3e203238313534.roa
Signing time:             Fri 06 Oct 2023 17:50:08 +0000
ROA not before:           Fri 06 Oct 2023 17:45:08 +0000
ROA not after:            Fri 04 Oct 2024 17:50:08 +0000
asID:                     28154
IP address blocks:        2804:30b8:5::/64 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:a0:9c:8d:6f:5a:17:3d:58:2b:52:3f:b0:15:0e:25:eb:14:59:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BFF34B95C9F93E1E69CB0421FFCF2F2FE1C26AD
        Validity
            Not Before: Oct  6 17:45:08 2023 GMT
            Not After : Oct  4 17:50:08 2024 GMT
        Subject: CN=D263867AE67BAEE2227086D07D0B3A00AFCCF688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ef:ee:0b:0f:02:0e:a3:d1:e5:0c:37:81:45:
                    1d:15:8a:90:e8:ae:56:94:c1:7a:7e:24:ab:fe:00:
                    82:c9:b7:a7:fd:d4:e1:17:a5:f9:ee:d6:6d:18:1c:
                    b5:39:d0:5d:51:45:be:7f:42:1b:96:98:71:39:80:
                    23:70:9c:c4:4b:17:c1:e8:86:ed:f8:71:81:6f:4a:
                    d7:af:fd:dd:8b:03:ae:43:aa:09:b2:ef:9a:ee:6d:
                    78:3b:3b:ad:d5:c4:b7:df:a3:64:45:34:ed:4e:e4:
                    db:da:7b:62:6d:af:72:90:ef:71:5a:da:c0:7f:15:
                    84:96:ea:d8:7b:0a:72:d5:38:ca:2a:e9:76:18:e1:
                    81:c7:36:b0:ca:52:f0:42:6f:15:8c:8a:fc:c5:b6:
                    b3:30:4b:73:c9:fd:6d:b8:a2:d1:af:5f:43:71:95:
                    6b:36:1f:24:7e:55:77:f2:3c:b4:d4:d4:da:93:11:
                    44:24:b0:e8:cf:26:c3:dc:77:4e:88:61:55:4e:65:
                    53:40:f7:f0:81:8b:c2:4b:df:0a:3e:ae:39:c2:ee:
                    b8:6d:b4:96:48:c1:c9:0a:e3:56:ee:35:5f:d5:d8:
                    73:35:ee:78:b0:4a:74:83:c6:32:14:e4:4a:18:13:
                    f5:02:dd:01:76:37:8b:1e:f9:6e:9a:ca:7d:58:9f:
                    f5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:63:86:7A:E6:7B:AE:E2:22:70:86:D0:7D:0B:3A:00:AF:CC:F6:88
            X509v3 Authority Key Identifier:
                keyid:9B:FF:34:B9:5C:9F:93:E1:E6:9C:B0:42:1F:FC:F2:F2:FE:1C:26:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8SyiMGxgm2vHzuKqTHFEioQyFSHASeJjrYisTkzagHG5/0/9BFF34B95C9F93E1E69CB0421FFCF2F2FE1C26AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9BFF34B95C9F93E1E69CB0421FFCF2F2FE1C26AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8SyiMGxgm2vHzuKqTHFEioQyFSHASeJjrYisTkzagHG5/0/323830343a333062383a353a3a2f36342d3634203d3e203238313534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:30b8:5::/64

    Signature Algorithm: sha256WithRSAEncryption
         8c:75:76:b9:8e:76:b5:22:6e:4d:22:1e:35:8d:80:83:32:2c:
         5a:e9:ed:2a:e7:db:a9:bf:ff:a6:bf:3d:17:3f:c3:8e:6a:8c:
         b3:51:71:3d:6f:0d:4e:2c:a9:80:62:3b:13:02:9a:41:ca:cb:
         45:2b:18:3c:e8:e7:42:7d:41:a5:a8:0e:78:59:56:23:ff:87:
         58:ec:da:7d:77:94:00:f3:7a:1b:48:03:4b:81:22:26:11:39:
         9c:68:79:67:f1:ec:f3:d8:5b:05:8e:ec:cf:ab:31:75:d5:b2:
         fc:8f:ae:90:dc:a5:06:dc:2f:d7:0e:19:fd:db:dd:3e:d1:a9:
         67:49:bb:c8:7c:85:b1:c4:d8:ef:51:88:aa:64:50:f8:56:3a:
         4d:b6:84:3c:b3:f6:23:eb:7b:d1:40:86:27:18:5c:eb:c8:52:
         41:2d:2f:f6:5e:d0:57:76:07:ad:a2:64:18:f5:46:6e:b6:ed:
         e4:8f:b4:88:18:a1:f8:06:d0:31:7a:cc:c7:3a:b6:11:12:b9:
         34:39:73:68:c8:ec:ae:11:2f:17:fe:b4:0d:57:b0:3d:d3:d3:
         c9:ad:a6:ef:31:b5:42:99:e9:8b:70:c9:d3:00:60:b5:5a:ea:
         a3:9d:19:57:b6:78:f5:4f:8e:f9:71:bc:fa:ae:87:26:48:32:
         b4:92:68:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:45:26 2025 by rpki-client