Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/93QEg13XEKDaooV633Fgr1k9dYbz4pxVbLKbMxWbkdJe/0/323830343a383434303a633030303a3a2f33342d3334203d3e20323732323439.roa
File:                     323830343a383434303a633030303a3a2f33342d3334203d3e20323732323439.roa (raw, json)
Hash identifier:          gi1I6J8OGsgS01r6XqkIQQpd/il9qkagcmQSc3cTb/s=
Subject key identifier:   3A:C4:AB:67:09:85:76:A3:C5:DB:D1:D4:4B:20:C9:C0:4E:4C:D6:6A
Certificate issuer:       /CN=70D787DC339ED4E5F48AC2A915C5F1AECE4C47F9
Certificate serial:       7B32014B00F33EDC820415E5D2A854AC2AFC4835
Authority key identifier: 70:D7:87:DC:33:9E:D4:E5:F4:8A:C2:A9:15:C5:F1:AE:CE:4C:47:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70D787DC339ED4E5F48AC2A915C5F1AECE4C47F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/93QEg13XEKDaooV633Fgr1k9dYbz4pxVbLKbMxWbkdJe/0/323830343a383434303a633030303a3a2f33342d3334203d3e20323732323439.roa
Signing time:             Fri 16 Dec 2022 22:43:00 +0000
ROA not before:           Fri 16 Dec 2022 22:38:00 +0000
ROA not after:            Fri 15 Dec 2023 22:43:00 +0000
asID:                     272249
IP address blocks:        2804:8440:c000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:32:01:4b:00:f3:3e:dc:82:04:15:e5:d2:a8:54:ac:2a:fc:48:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70D787DC339ED4E5F48AC2A915C5F1AECE4C47F9
        Validity
            Not Before: Dec 16 22:38:00 2022 GMT
            Not After : Dec 15 22:43:00 2023 GMT
        Subject: CN=3AC4AB67098576A3C5DBD1D44B20C9C04E4CD66A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c8:5a:44:02:2c:bd:ee:80:35:61:b1:e5:28:
                    e7:b6:f6:83:e1:42:9d:f1:24:c4:ac:0f:25:b8:e8:
                    69:5d:6f:c4:ac:e4:00:cd:92:73:da:58:0f:e6:b1:
                    74:68:f1:98:7a:07:5e:15:a2:a8:87:08:47:77:a0:
                    f9:0e:88:06:7e:c5:7c:e6:04:36:5a:64:3f:f2:74:
                    ee:3c:18:f4:d2:ad:4d:e3:1c:b6:15:29:25:4b:d4:
                    0c:10:ad:db:39:c5:2d:e4:e9:a7:85:17:a6:0a:cc:
                    82:32:4e:5e:f7:d4:38:2e:cf:6c:cc:36:ad:6a:4e:
                    c3:ec:0e:26:26:8d:26:43:93:93:0c:96:76:49:94:
                    eb:8e:e7:7d:d2:6a:9a:c4:36:4c:70:4b:ae:a4:ef:
                    f5:b8:9a:97:24:dc:6c:00:ab:98:95:09:fa:8e:a2:
                    56:00:c2:f0:04:81:de:6d:71:fb:55:67:9c:7e:82:
                    cb:59:29:b1:f1:9b:d3:f0:77:46:89:32:df:f7:f5:
                    9e:3f:ee:3f:7c:b6:ec:79:1e:e5:ef:8b:9c:3a:22:
                    69:cb:02:48:45:b7:16:a3:a2:af:3a:ac:8d:41:2a:
                    dd:7b:97:a1:c3:38:95:81:ea:d2:1a:c6:0b:bc:82:
                    a9:a6:b6:bf:e7:30:b1:f3:79:75:d6:93:b0:72:68:
                    72:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:C4:AB:67:09:85:76:A3:C5:DB:D1:D4:4B:20:C9:C0:4E:4C:D6:6A
            X509v3 Authority Key Identifier:
                keyid:70:D7:87:DC:33:9E:D4:E5:F4:8A:C2:A9:15:C5:F1:AE:CE:4C:47:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/93QEg13XEKDaooV633Fgr1k9dYbz4pxVbLKbMxWbkdJe/0/70D787DC339ED4E5F48AC2A915C5F1AECE4C47F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70D787DC339ED4E5F48AC2A915C5F1AECE4C47F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/93QEg13XEKDaooV633Fgr1k9dYbz4pxVbLKbMxWbkdJe/0/323830343a383434303a633030303a3a2f33342d3334203d3e20323732323439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8440:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         80:50:f0:c1:41:b2:cd:e2:68:13:ea:d6:48:60:2d:ce:be:10:
         57:0d:9b:b0:95:38:93:eb:cf:fd:c0:46:e5:e5:86:12:24:fa:
         4d:13:08:4a:6d:bb:b5:7a:03:b4:b6:b5:e5:7c:bd:21:57:83:
         1d:1f:6a:e2:f5:7e:04:37:02:2d:e4:83:b0:e4:98:6e:92:e6:
         2d:4b:6b:5f:66:7e:37:53:cb:be:f7:ff:d4:d6:48:92:7b:8f:
         9e:c1:a2:5f:36:fb:00:7f:da:02:94:21:76:fa:56:ec:35:ec:
         af:3f:24:f5:9a:18:72:82:70:83:a9:65:a7:92:93:c2:7b:37:
         02:ec:99:dd:12:6b:4e:94:c8:1f:e2:65:c1:f1:28:b1:5d:6b:
         d0:13:15:26:92:51:9c:bf:1a:0d:8a:c0:6c:44:82:68:3a:26:
         11:72:9e:e0:c5:ee:43:39:62:fb:0e:a4:1b:77:73:a7:a8:ce:
         97:d2:fd:f6:ed:23:6a:f4:31:c4:d8:aa:2f:7d:15:bc:5a:1a:
         4a:a5:87:34:e6:ee:7c:b2:cb:3f:4b:c9:59:94:6d:83:c7:7f:
         ec:cf:a7:8e:7e:47:3d:d7:a7:f6:6c:02:46:c1:52:11:6b:af:
         78:93:46:7d:90:25:e3:20:89:85:5f:e9:42:6d:92:c3:8e:99:
         bb:82:c4:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 06:08:05 2025 by rpki-client