Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8vD2Xwp9yq5PdFEAWk2UWCwWDTkRW7VpTGY3rRSwzHmU/0/323830343a346462343a3a2f33332d3333203d3e20323638323134.roa
File:                     323830343a346462343a3a2f33332d3333203d3e20323638323134.roa (raw, json)
Hash identifier:          6I8zmd9tD1h67dYQp9I3JPaEZ5sNF3+j+9Qe7f0Wd3c=
Subject key identifier:   7C:E7:6D:13:C6:C3:F6:65:CF:F5:70:D5:F6:73:16:5B:17:C7:8A:26
Certificate issuer:       /CN=2237EA6D37487EBDA3CFA4E0F1F5957C987FEA2F
Certificate serial:       6BB7BB302B4880E45E75DC181D23201F191DDBF1
Authority key identifier: 22:37:EA:6D:37:48:7E:BD:A3:CF:A4:E0:F1:F5:95:7C:98:7F:EA:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2237EA6D37487EBDA3CFA4E0F1F5957C987FEA2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vD2Xwp9yq5PdFEAWk2UWCwWDTkRW7VpTGY3rRSwzHmU/0/323830343a346462343a3a2f33332d3333203d3e20323638323134.roa
Signing time:             Wed 22 May 2024 20:29:19 +0000
ROA not before:           Wed 22 May 2024 20:24:19 +0000
ROA not after:            Wed 21 May 2025 20:29:19 +0000
asID:                     268214
IP address blocks:        2804:4db4::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:b7:bb:30:2b:48:80:e4:5e:75:dc:18:1d:23:20:1f:19:1d:db:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2237EA6D37487EBDA3CFA4E0F1F5957C987FEA2F
        Validity
            Not Before: May 22 20:24:19 2024 GMT
            Not After : May 21 20:29:19 2025 GMT
        Subject: CN=7CE76D13C6C3F665CFF570D5F673165B17C78A26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:50:37:de:01:49:c6:2c:cc:6d:25:ae:21:76:
                    c9:7a:c5:36:a3:79:15:59:7c:8c:df:a0:5b:97:14:
                    25:0e:d3:2d:34:bf:72:4c:a4:b0:f6:8b:99:74:72:
                    3b:17:a0:06:ee:cc:e9:fd:a8:ec:78:29:69:73:ce:
                    49:8d:f4:eb:64:9c:5e:d1:3b:cc:28:73:63:ea:cd:
                    f5:e2:26:8c:66:11:3f:a1:83:08:60:87:49:d3:61:
                    04:38:38:bc:af:18:1e:1f:1e:40:41:da:ec:66:57:
                    1c:7f:e0:1b:27:f6:19:a4:a3:74:45:f1:98:80:d5:
                    ef:92:76:7c:6f:c3:25:8b:24:25:98:b0:8f:ae:35:
                    e1:d7:c2:71:19:63:59:a8:aa:10:ad:48:ee:3e:97:
                    81:31:0c:a7:1b:a4:3c:b7:fe:97:1d:e0:67:a6:d6:
                    04:d3:ec:e8:da:62:c3:65:83:ba:f9:61:89:e8:ea:
                    55:d9:98:f7:ff:e9:e4:a7:de:32:1f:e4:18:2d:fc:
                    98:f7:94:a5:5a:71:e0:24:da:19:f9:2f:0c:04:4d:
                    6a:ac:be:ae:ef:e8:24:af:aa:1d:01:34:a0:ec:c6:
                    f2:60:12:54:0e:81:58:e5:aa:30:c3:c2:0e:7d:d8:
                    89:56:f0:13:54:54:03:a7:48:d5:af:26:8f:af:28:
                    14:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:E7:6D:13:C6:C3:F6:65:CF:F5:70:D5:F6:73:16:5B:17:C7:8A:26
            X509v3 Authority Key Identifier:
                keyid:22:37:EA:6D:37:48:7E:BD:A3:CF:A4:E0:F1:F5:95:7C:98:7F:EA:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vD2Xwp9yq5PdFEAWk2UWCwWDTkRW7VpTGY3rRSwzHmU/0/2237EA6D37487EBDA3CFA4E0F1F5957C987FEA2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2237EA6D37487EBDA3CFA4E0F1F5957C987FEA2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vD2Xwp9yq5PdFEAWk2UWCwWDTkRW7VpTGY3rRSwzHmU/0/323830343a346462343a3a2f33332d3333203d3e20323638323134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4db4::/33

    Signature Algorithm: sha256WithRSAEncryption
         9e:21:c9:9a:e2:1e:0c:f6:1f:cd:45:b7:08:c1:8e:70:13:c1:
         af:53:a1:2f:3e:5a:fa:f6:ef:d6:48:d1:65:69:87:3f:e0:c2:
         6d:35:c9:b0:d1:d7:b4:b9:27:df:65:13:ee:e7:7b:ce:be:8d:
         8c:be:f8:64:4d:86:71:ec:a0:cd:55:12:0b:af:a2:42:eb:e4:
         ae:c6:7d:6c:29:62:00:dd:e6:f4:55:f0:5f:a6:be:a1:33:f2:
         fd:94:db:d8:11:e3:a7:ed:94:4f:7a:01:77:97:40:cf:17:70:
         ae:da:6a:5f:f5:65:36:29:0b:a0:43:33:26:d1:51:8a:f0:86:
         21:93:14:12:9d:31:04:c1:6b:35:49:74:23:90:9b:d3:9e:4d:
         19:af:11:af:ff:46:a3:34:3c:1c:d4:46:dd:82:cb:0b:84:3c:
         50:55:7b:52:36:02:38:e3:22:70:d4:95:d0:0c:05:18:7c:81:
         c7:a1:f2:7f:b1:15:04:0c:55:9e:a3:69:69:71:15:44:14:43:
         59:9f:33:f0:c1:68:6a:b6:cf:21:1a:f1:f8:30:be:76:65:3e:
         09:d6:af:03:ac:a8:b2:4b:aa:d4:db:37:b7:ee:b6:2b:a5:33:
         29:e5:4a:b3:e6:26:8b:d3:09:83:4b:60:cf:40:45:a5:f4:9c:
         de:77:86:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:14:43 2025 by rpki-client