Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/323830343a3530383a3a2f33322d3634203d3e203532393939.roa
File:                     323830343a3530383a3a2f33322d3634203d3e203532393939.roa (raw, json)
Hash identifier:          X2BsJbt4N6lM73j3kKBWtEnOqHPp7I7x1370hXHJhVc=
Subject key identifier:   A0:D6:C3:84:0B:DC:93:65:F3:71:DC:CD:1D:ED:22:D3:00:1A:BC:A5
Certificate issuer:       /CN=1AB6D3620CE408DAFAC1AFB6B08613DD2F3C9814
Certificate serial:       5D33DD744EA498A0289E8D6C3AEDC9A272F46F5D
Authority key identifier: 1A:B6:D3:62:0C:E4:08:DA:FA:C1:AF:B6:B0:86:13:DD:2F:3C:98:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1AB6D3620CE408DAFAC1AFB6B08613DD2F3C9814.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/323830343a3530383a3a2f33322d3634203d3e203532393939.roa
Signing time:             Tue 03 Oct 2023 20:59:29 +0000
ROA not before:           Tue 03 Oct 2023 20:54:29 +0000
ROA not after:            Tue 01 Oct 2024 20:59:29 +0000
asID:                     52999
IP address blocks:        2804:508::/32 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:33:dd:74:4e:a4:98:a0:28:9e:8d:6c:3a:ed:c9:a2:72:f4:6f:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AB6D3620CE408DAFAC1AFB6B08613DD2F3C9814
        Validity
            Not Before: Oct  3 20:54:29 2023 GMT
            Not After : Oct  1 20:59:29 2024 GMT
        Subject: CN=A0D6C3840BDC9365F371DCCD1DED22D3001ABCA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:38:0b:55:b2:ea:77:ce:0f:9e:39:ad:e1:35:
                    57:68:2a:df:c7:e8:08:21:42:be:2a:31:30:4e:71:
                    88:d4:71:b5:a5:15:a7:9d:9e:92:24:7e:3d:90:3e:
                    d9:bc:2e:a4:6c:9b:25:8a:73:b9:28:46:61:bb:0c:
                    5a:44:7b:f4:43:b9:b6:79:7d:d9:a4:8c:19:7d:5b:
                    04:e5:c9:e6:f1:cb:87:fd:21:c6:a3:36:52:ce:84:
                    9c:cb:2a:2c:80:e2:f3:de:ea:75:98:89:e7:4d:3f:
                    fc:49:5b:cc:14:15:01:ec:ec:79:43:ad:0c:8f:30:
                    ad:97:c3:d9:e0:48:e6:04:9b:69:6f:41:fe:b6:fe:
                    9e:8b:18:64:0f:86:d0:ee:50:cb:24:8e:4f:66:b7:
                    66:86:af:50:cd:d3:48:bc:af:0b:15:22:c1:83:64:
                    56:49:77:22:31:32:7c:8b:93:07:eb:f4:de:12:27:
                    6d:91:d3:38:a2:ae:b0:fe:f9:d0:76:84:3e:3a:ca:
                    f2:46:4a:3c:42:61:77:7d:06:da:b6:2c:69:ea:5e:
                    f1:da:09:d1:04:87:40:03:bf:82:87:c3:01:55:19:
                    81:7c:27:29:e9:e8:d6:19:46:72:2b:a0:d6:8e:d4:
                    72:66:a7:16:8b:b5:84:ff:0a:a1:e5:0e:a2:d8:73:
                    2e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:D6:C3:84:0B:DC:93:65:F3:71:DC:CD:1D:ED:22:D3:00:1A:BC:A5
            X509v3 Authority Key Identifier:
                keyid:1A:B6:D3:62:0C:E4:08:DA:FA:C1:AF:B6:B0:86:13:DD:2F:3C:98:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/1AB6D3620CE408DAFAC1AFB6B08613DD2F3C9814.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1AB6D3620CE408DAFAC1AFB6B08613DD2F3C9814.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/323830343a3530383a3a2f33322d3634203d3e203532393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:508::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:50:7e:75:2a:42:e2:95:2f:e0:17:3b:20:0c:87:cc:3a:31:
         45:e0:b6:8b:0a:35:bb:fb:54:f0:ea:2d:6b:6a:be:1c:97:d1:
         14:9a:d4:03:8b:47:fd:e3:57:ee:b1:b0:43:bc:fe:d5:19:97:
         d1:92:27:ec:7d:80:37:33:27:f0:d3:89:95:ac:ae:4f:bb:3e:
         3d:05:f7:65:c5:90:58:ff:65:b5:50:83:98:cc:4d:d0:79:2b:
         93:5d:c5:b9:d0:dd:d0:6e:df:97:e7:87:f3:56:33:bc:fa:0a:
         e9:d9:de:c5:a7:4b:8a:50:1b:c6:d8:94:b9:91:a1:14:39:d3:
         7e:a6:4e:44:10:ab:d0:fd:49:32:0b:57:f9:4c:6c:49:3b:0c:
         1e:02:19:16:c9:4b:03:23:44:ea:2d:a5:fa:6f:ae:ff:73:82:
         0e:0b:32:c4:62:de:a3:be:52:0b:e2:a7:54:ba:9a:89:7e:be:
         18:a7:54:69:e7:e5:46:3f:3c:c7:92:a0:a3:b2:73:08:67:85:
         b9:15:d0:e3:46:ee:1a:c9:f0:98:9f:4f:ee:26:52:42:d6:47:
         2f:d6:95:2e:52:e6:4b:ec:4b:ba:e1:81:ad:10:b1:e7:46:ab:
         28:05:50:39:6f:c6:12:4d:f1:62:fc:2a:76:ec:9c:65:71:ce:
         d0:f8:bc:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:02:35 2025 by rpki-client