Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8tYofYtqSAiCtdqz7MDAigJF6AieTbiUsW2ztDyPtV91/0/323830343a353130633a3a2f33332d3334203d3e203631353934.roa
File:                     323830343a353130633a3a2f33332d3334203d3e203631353934.roa (raw, json)
Hash identifier:          YL2Ionmtr7VJWKzlGxDZEhJL1qmRph+VnAeVkIt/u5s=
Subject key identifier:   C7:94:71:0A:43:3A:C7:2E:AD:15:E6:58:AE:0D:1D:0E:2B:82:FE:F5
Certificate issuer:       /CN=78C6C5A79CFFDD7077E4BB9A89FC100460FAC31C
Certificate serial:       1DCA644ED6BDFB44B38292872F0F34035852AAD3
Authority key identifier: 78:C6:C5:A7:9C:FF:DD:70:77:E4:BB:9A:89:FC:10:04:60:FA:C3:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/78C6C5A79CFFDD7077E4BB9A89FC100460FAC31C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8tYofYtqSAiCtdqz7MDAigJF6AieTbiUsW2ztDyPtV91/0/323830343a353130633a3a2f33332d3334203d3e203631353934.roa
Signing time:             Thu 24 Aug 2023 18:16:14 +0000
ROA not before:           Thu 24 Aug 2023 18:11:14 +0000
ROA not after:            Thu 22 Aug 2024 18:16:14 +0000
asID:                     61594
IP address blocks:        2804:510c::/33 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:ca:64:4e:d6:bd:fb:44:b3:82:92:87:2f:0f:34:03:58:52:aa:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78C6C5A79CFFDD7077E4BB9A89FC100460FAC31C
        Validity
            Not Before: Aug 24 18:11:14 2023 GMT
            Not After : Aug 22 18:16:14 2024 GMT
        Subject: CN=C794710A433AC72EAD15E658AE0D1D0E2B82FEF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b9:dc:89:b0:45:23:68:72:3f:3c:85:da:b0:
                    d8:6f:7c:d8:ca:cc:32:12:2b:6e:fc:2d:79:0a:02:
                    47:75:11:e5:a1:e7:66:e4:68:cd:8f:ce:43:6e:c6:
                    1d:5c:9d:38:f4:19:2d:08:6b:6f:d1:1a:af:d8:6f:
                    19:56:96:33:71:e9:6d:24:98:fd:ab:42:35:1d:64:
                    d5:54:58:7e:a5:ee:e8:00:dd:39:7e:48:13:81:ba:
                    98:e7:55:24:10:4d:91:ba:02:97:9e:13:4d:a6:e1:
                    be:3f:4c:8b:4c:5a:2e:cc:1e:cb:5b:8e:c2:fb:63:
                    39:b7:64:fc:51:02:52:2e:68:85:80:49:72:56:4c:
                    30:6e:d4:b3:a2:88:8c:ad:eb:65:20:10:89:eb:1f:
                    4b:f1:ea:33:f1:e5:7f:95:d8:cc:21:8c:46:f7:b5:
                    00:19:70:cc:cf:ee:f4:d1:84:cf:b1:74:6a:80:03:
                    0c:a3:1b:86:b7:32:27:08:dc:c5:65:21:e2:06:d2:
                    c7:f9:e9:33:5a:61:87:57:fd:f4:36:0e:fb:c0:af:
                    e9:6c:a6:32:e2:c8:8b:8e:01:b6:72:14:f9:14:02:
                    af:29:06:4d:d3:cb:dc:02:5d:c3:f4:58:cd:4f:d3:
                    0b:b3:06:dc:b8:97:bd:f7:ca:8a:c0:fd:06:dd:ac:
                    22:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:94:71:0A:43:3A:C7:2E:AD:15:E6:58:AE:0D:1D:0E:2B:82:FE:F5
            X509v3 Authority Key Identifier:
                keyid:78:C6:C5:A7:9C:FF:DD:70:77:E4:BB:9A:89:FC:10:04:60:FA:C3:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8tYofYtqSAiCtdqz7MDAigJF6AieTbiUsW2ztDyPtV91/0/78C6C5A79CFFDD7077E4BB9A89FC100460FAC31C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/78C6C5A79CFFDD7077E4BB9A89FC100460FAC31C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8tYofYtqSAiCtdqz7MDAigJF6AieTbiUsW2ztDyPtV91/0/323830343a353130633a3a2f33332d3334203d3e203631353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:510c::/33

    Signature Algorithm: sha256WithRSAEncryption
         67:99:db:30:6c:02:41:38:94:00:02:23:62:87:b5:2b:e5:92:
         8a:50:9a:1c:08:7e:77:73:4f:18:b6:b3:54:f9:c0:a0:c3:be:
         64:d2:55:1d:3d:8d:52:f6:5b:79:5d:93:17:6f:77:f3:c2:f5:
         30:b1:3c:c1:96:d6:70:b4:f2:ee:f1:27:56:02:a4:73:5f:07:
         59:70:79:35:95:fd:7f:eb:f1:ad:48:49:35:ae:b7:85:29:16:
         be:e4:62:4a:62:7e:ab:1c:14:51:e1:cf:7d:59:0c:6f:ad:14:
         95:9c:19:df:b8:cd:54:e3:ec:ee:37:34:fb:f6:70:fa:75:1e:
         29:99:c2:a5:41:47:3b:79:26:18:de:d1:fc:6d:5b:0a:60:fd:
         29:28:3f:fd:81:b4:5f:04:e5:cb:03:a1:53:21:57:f2:c8:d9:
         d4:97:84:5b:46:76:c5:82:2f:15:f7:bd:86:17:26:67:07:82:
         22:d0:b0:34:a3:4e:8d:64:e0:bd:82:7c:c1:c8:b6:24:7c:f8:
         84:e8:99:5d:5c:26:30:b7:3b:bb:44:3e:a3:8a:44:5e:c0:b0:
         f8:ae:74:34:58:03:ad:ff:5d:85:74:1f:6e:55:64:b4:29:df:
         9c:8c:39:07:dd:47:41:c1:e5:ef:6b:3c:f2:3e:25:d5:ff:70:
         a3:e5:df:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:55:46 2025 by rpki-client