Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/92RcaRZuJsUfeCFJnxACF6eDiRfyz66sbAhS1QjfB3Mi/0/323830343a363032343a3a2f33322d313238203d3e20323639313438.roa
File:                     323830343a363032343a3a2f33322d313238203d3e20323639313438.roa (raw, json)
Hash identifier:          tynTu/xXELixZEcwVQWrJsRLcFlZatSVKgBzPrRTWxU=
Subject key identifier:   88:C5:B4:EE:45:DA:8D:95:EB:C9:A1:8F:9C:F9:2A:2F:E3:B5:C7:10
Certificate issuer:       /CN=9ECB245937F45A17B93466F3DA57B45CBC889DFA
Certificate serial:       2A04F320EA05B03BD5DB9777A4C7C965F5C807F3
Authority key identifier: 9E:CB:24:59:37:F4:5A:17:B9:34:66:F3:DA:57:B4:5C:BC:88:9D:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9ECB245937F45A17B93466F3DA57B45CBC889DFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/92RcaRZuJsUfeCFJnxACF6eDiRfyz66sbAhS1QjfB3Mi/0/323830343a363032343a3a2f33322d313238203d3e20323639313438.roa
Signing time:             Mon 06 Feb 2023 14:30:22 +0000
ROA not before:           Mon 06 Feb 2023 14:25:22 +0000
ROA not after:            Mon 05 Feb 2024 14:30:22 +0000
asID:                     269148
IP address blocks:        2804:6024::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:04:f3:20:ea:05:b0:3b:d5:db:97:77:a4:c7:c9:65:f5:c8:07:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ECB245937F45A17B93466F3DA57B45CBC889DFA
        Validity
            Not Before: Feb  6 14:25:22 2023 GMT
            Not After : Feb  5 14:30:22 2024 GMT
        Subject: CN=88C5B4EE45DA8D95EBC9A18F9CF92A2FE3B5C710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:02:cd:d0:1c:0c:82:44:5a:b3:70:10:1e:2f:
                    fa:ae:53:39:0a:3e:63:0b:30:66:40:cf:c0:7f:a0:
                    71:a6:16:fb:28:6d:69:a0:ee:c9:0b:d9:c7:91:9d:
                    b8:a5:40:97:ad:0e:9d:2a:37:fd:0e:94:fa:be:e2:
                    b0:50:3f:73:e3:ec:a8:07:ae:93:95:7e:ae:59:46:
                    3a:e9:c8:6a:52:e4:33:5b:c6:7a:77:86:6e:a7:e4:
                    fc:30:d1:15:35:60:ff:3f:f9:aa:5f:0f:ef:b3:d5:
                    c0:6f:4b:ed:b6:00:78:95:79:b2:a7:f1:12:2f:3a:
                    22:53:43:a8:91:3f:18:75:a1:45:8c:b7:f1:cf:88:
                    bb:d7:9a:ed:81:c6:f4:92:0d:10:e6:20:33:4e:c0:
                    4f:9f:23:07:6e:55:da:b6:93:3c:50:ab:15:5c:6a:
                    0a:46:63:39:c9:19:69:ae:fd:30:2d:b7:90:e0:77:
                    92:2f:36:26:c4:c5:a7:51:fe:1e:13:75:ce:fb:b1:
                    9e:4e:dd:b7:ed:5d:14:54:65:f9:f1:c8:86:db:b0:
                    1a:4b:b2:b7:86:22:57:27:e2:bf:1a:e5:49:23:52:
                    c3:c8:26:98:73:ea:7a:40:24:69:3a:d5:1a:40:56:
                    0a:61:e0:f9:9d:fd:3b:3a:b5:05:34:1f:c3:1d:44:
                    ee:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:C5:B4:EE:45:DA:8D:95:EB:C9:A1:8F:9C:F9:2A:2F:E3:B5:C7:10
            X509v3 Authority Key Identifier:
                keyid:9E:CB:24:59:37:F4:5A:17:B9:34:66:F3:DA:57:B4:5C:BC:88:9D:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/92RcaRZuJsUfeCFJnxACF6eDiRfyz66sbAhS1QjfB3Mi/0/9ECB245937F45A17B93466F3DA57B45CBC889DFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9ECB245937F45A17B93466F3DA57B45CBC889DFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/92RcaRZuJsUfeCFJnxACF6eDiRfyz66sbAhS1QjfB3Mi/0/323830343a363032343a3a2f33322d313238203d3e20323639313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6024::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:15:b9:df:52:0a:aa:01:83:e1:2f:5d:13:70:10:f0:39:6f:
         58:73:dc:73:02:5c:6b:2d:0a:25:7b:5f:58:af:a0:01:e1:b7:
         96:f3:6f:6b:9b:d5:66:38:a1:62:3c:8f:2c:ff:f1:b6:54:88:
         7d:48:a3:d0:fb:e3:9d:df:ba:4f:45:3c:09:f9:f9:6a:5d:9d:
         03:9c:ce:14:51:80:62:48:25:2f:c5:9d:f2:2d:6d:ac:81:29:
         cc:0b:ff:6c:14:d7:94:12:26:85:7c:4a:64:2d:54:e6:c5:fe:
         c5:33:9f:40:7e:a5:cd:84:52:c4:1e:48:33:e9:a0:2a:6a:2c:
         aa:4d:a8:98:1d:92:0f:1a:03:84:93:d1:93:f2:41:82:eb:c1:
         c2:07:54:04:83:80:eb:6e:38:39:a7:b2:ac:ca:be:fc:0d:45:
         a9:3a:8d:a0:a0:de:0f:ec:e7:db:84:8e:25:ff:f0:15:60:9f:
         34:4e:57:00:dc:42:9a:6e:9a:f7:22:ff:a5:e1:90:23:9a:0c:
         0f:dc:bf:33:08:01:24:66:a3:e7:c2:fa:d6:d6:38:c3:53:13:
         52:08:44:3f:63:eb:0e:df:9f:9c:22:30:dd:5a:a0:f9:a0:cd:
         74:1e:8c:4b:99:d5:23:9c:62:ca:46:7f:ef:e6:d5:f7:32:29:
         41:7d:46:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 14:24:18 2025 by rpki-client