Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/323830343a65383a3a2f33322d3438203d3e20323632363539.roa
File:                     323830343a65383a3a2f33322d3438203d3e20323632363539.roa (raw, json)
Hash identifier:          PP8uNaehIVn6SNnsvlybQCj4gsQuHBesASs6nHCdmwQ=
Subject key identifier:   9D:14:6A:CE:64:CB:7D:74:1E:20:29:51:75:75:87:32:7A:74:06:67
Certificate issuer:       /CN=2F394F99007CD172C0832F8415F6842A1475173D
Certificate serial:       73875A821FF42B6CC12D9CD2DDA3E770BFC87C2E
Authority key identifier: 2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/323830343a65383a3a2f33322d3438203d3e20323632363539.roa
Signing time:             Thu 31 Oct 2024 17:14:13 +0000
ROA not before:           Thu 31 Oct 2024 17:09:13 +0000
ROA not after:            Thu 30 Oct 2025 17:14:13 +0000
asID:                     262659
IP address blocks:        2804:e8::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:87:5a:82:1f:f4:2b:6c:c1:2d:9c:d2:dd:a3:e7:70:bf:c8:7c:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F394F99007CD172C0832F8415F6842A1475173D
        Validity
            Not Before: Oct 31 17:09:13 2024 GMT
            Not After : Oct 30 17:14:13 2025 GMT
        Subject: CN=9D146ACE64CB7D741E202951757587327A740667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:fa:ab:b7:f3:ce:d9:49:ec:b8:55:22:31:f3:
                    50:8d:1a:51:f5:38:5b:09:f6:b3:80:44:17:86:c4:
                    64:7d:bb:10:d4:0d:cc:1f:02:16:e6:bc:2f:5e:c3:
                    05:bc:8c:00:69:43:c4:ef:99:46:89:0f:0f:27:09:
                    66:53:78:c9:79:29:80:de:11:3b:be:df:43:88:e4:
                    7e:56:8a:41:dd:37:d9:d6:fe:2d:9f:1e:c9:93:13:
                    28:6f:c4:ce:8a:b4:41:2c:32:35:22:66:61:f2:fb:
                    fa:7a:b2:56:79:72:4d:94:e7:51:d9:9a:4a:16:aa:
                    0d:81:9a:a4:52:8e:b3:3e:c1:5c:97:bc:4a:f5:83:
                    06:82:fb:aa:7f:9c:30:87:8c:b0:7c:49:6a:aa:50:
                    ed:11:71:b4:a6:c6:6c:89:e3:76:2a:03:c0:90:3c:
                    67:38:c8:21:3e:9d:95:5d:ec:89:8e:81:37:22:9d:
                    d3:0d:61:00:a3:23:3e:c4:4d:96:56:1f:c9:9b:c2:
                    80:e8:0c:f4:ab:75:fa:13:14:43:43:92:72:29:cc:
                    8c:ed:dd:25:13:52:1a:53:25:55:ce:53:23:86:72:
                    b2:ab:c3:f2:2e:af:59:a7:d9:ff:a5:08:ec:ba:a6:
                    c8:4c:db:a8:7f:02:b6:ec:c0:8f:da:57:f2:20:c6:
                    0d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:14:6A:CE:64:CB:7D:74:1E:20:29:51:75:75:87:32:7A:74:06:67
            X509v3 Authority Key Identifier:
                keyid:2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/2F394F99007CD172C0832F8415F6842A1475173D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/323830343a65383a3a2f33322d3438203d3e20323632363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:24:6b:d1:74:d0:c3:ab:ac:f9:8e:5d:de:03:b6:75:74:5b:
         6b:8f:81:9a:6f:70:a5:28:be:41:3c:6e:9a:f9:74:9e:e4:fe:
         64:86:82:be:bb:1a:33:65:85:88:85:02:85:da:40:41:6d:2c:
         1d:c8:d6:af:04:6d:3a:f2:eb:b8:a8:d7:43:b4:bf:6b:2c:e5:
         05:67:0b:d5:c4:97:bd:47:74:05:c5:f1:50:ab:09:05:94:b6:
         f1:f5:68:6f:f5:ad:7a:d4:38:d7:89:ad:ad:3b:e5:bb:26:93:
         6e:dd:4f:b1:a5:6c:2e:77:30:98:53:20:14:65:b9:67:71:58:
         61:0b:1f:34:24:18:bd:26:8a:57:0e:f7:a9:31:04:af:d3:28:
         24:2b:3e:94:f1:f2:d8:6a:e8:4c:2b:d1:56:6a:63:19:bc:c5:
         01:62:06:7a:08:b3:df:6c:90:59:d1:b0:f5:c2:f0:5a:d5:2d:
         7a:21:c0:4d:00:b0:66:61:a1:1e:66:dc:f0:d3:66:91:29:41:
         6b:a9:35:7a:2d:07:85:65:2f:e7:fc:0d:bb:9b:14:38:e9:2a:
         00:f1:e2:58:39:b4:b2:29:75:1c:c6:61:b7:0b:65:ac:88:f3:
         6d:a1:cc:57:2f:a0:40:ff:18:84:40:42:ea:d5:03:a0:cd:77:
         a7:24:d3:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:55:16 2025 by rpki-client