Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9NQAbH6qBU4xDXTPDJrAMMf1n3YV8C7CEiKdesWtc9eB/0/323830343a376232303a3a2f33322d3438203d3e20323731343132.roa
File:                     323830343a376232303a3a2f33322d3438203d3e20323731343132.roa (raw, json)
Hash identifier:          4pXgLB5Am7zylPfCaEFgqeBv157zEXkrxQNF+oCFCIw=
Subject key identifier:   FD:11:5F:3D:FF:F9:87:EC:6D:5E:EA:74:D5:1C:67:31:62:AA:03:5A
Certificate issuer:       /CN=471A7ADD455C68D25753DE159530C83B00C46E39
Certificate serial:       44A3E46204154D17A54ABA9B44C9001353F750DE
Authority key identifier: 47:1A:7A:DD:45:5C:68:D2:57:53:DE:15:95:30:C8:3B:00:C4:6E:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/471A7ADD455C68D25753DE159530C83B00C46E39.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9NQAbH6qBU4xDXTPDJrAMMf1n3YV8C7CEiKdesWtc9eB/0/323830343a376232303a3a2f33322d3438203d3e20323731343132.roa
Signing time:             Sat 23 Jul 2022 12:00:00 +0000
ROA not before:           Sat 23 Jul 2022 11:55:00 +0000
ROA not after:            Sun 23 Jul 2023 12:00:00 +0000
asID:                     271412
IP address blocks:        2804:7b20::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:a3:e4:62:04:15:4d:17:a5:4a:ba:9b:44:c9:00:13:53:f7:50:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=471A7ADD455C68D25753DE159530C83B00C46E39
        Validity
            Not Before: Jul 23 11:55:00 2022 GMT
            Not After : Jul 23 12:00:00 2023 GMT
        Subject: CN=3082010A0282010100E6EA3A5589B3475D2AA0870C306310DA55AC01BC8599901DADF0AEFEFF71261E58500E0F6B8F10DC9B2265C2808F490F6E7FCE176FA6F04F8A3EC5D354CE3DCF9B7BEC99309CC430B56CF3531B8F669D6ED925218AD2F1018E55F5CF1396D076AD603A5996AF16E0CC95516F547695224A4FB546A97C605D7C53EEBC2F75A3EA51464194A1F819F2677A358031C611DE8C97791BCDD7290A293DB351AD28E2C109C68E263171234194D170F494E1076526E2285EA50E7E8E5AC168F7C241F7BCADE1A66D9C6CCA895B07E4533755954C9652CFBD2551BFF6CEC52138052E50E7541274BE4D672F65441B55868DC94D1DE7F81549FA15C7BCA80996E6D3144F250203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ea:3a:55:89:b3:47:5d:2a:a0:87:0c:30:63:
                    10:da:55:ac:01:bc:85:99:90:1d:ad:f0:ae:fe:ff:
                    71:26:1e:58:50:0e:0f:6b:8f:10:dc:9b:22:65:c2:
                    80:8f:49:0f:6e:7f:ce:17:6f:a6:f0:4f:8a:3e:c5:
                    d3:54:ce:3d:cf:9b:7b:ec:99:30:9c:c4:30:b5:6c:
                    f3:53:1b:8f:66:9d:6e:d9:25:21:8a:d2:f1:01:8e:
                    55:f5:cf:13:96:d0:76:ad:60:3a:59:96:af:16:e0:
                    cc:95:51:6f:54:76:95:22:4a:4f:b5:46:a9:7c:60:
                    5d:7c:53:ee:bc:2f:75:a3:ea:51:46:41:94:a1:f8:
                    19:f2:67:7a:35:80:31:c6:11:de:8c:97:79:1b:cd:
                    d7:29:0a:29:3d:b3:51:ad:28:e2:c1:09:c6:8e:26:
                    31:71:23:41:94:d1:70:f4:94:e1:07:65:26:e2:28:
                    5e:a5:0e:7e:8e:5a:c1:68:f7:c2:41:f7:bc:ad:e1:
                    a6:6d:9c:6c:ca:89:5b:07:e4:53:37:55:95:4c:96:
                    52:cf:bd:25:51:bf:f6:ce:c5:21:38:05:2e:50:e7:
                    54:12:74:be:4d:67:2f:65:44:1b:55:86:8d:c9:4d:
                    1d:e7:f8:15:49:fa:15:c7:bc:a8:09:96:e6:d3:14:
                    4f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:11:5F:3D:FF:F9:87:EC:6D:5E:EA:74:D5:1C:67:31:62:AA:03:5A
            X509v3 Authority Key Identifier:
                keyid:47:1A:7A:DD:45:5C:68:D2:57:53:DE:15:95:30:C8:3B:00:C4:6E:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9NQAbH6qBU4xDXTPDJrAMMf1n3YV8C7CEiKdesWtc9eB/0/471A7ADD455C68D25753DE159530C83B00C46E39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/471A7ADD455C68D25753DE159530C83B00C46E39.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9NQAbH6qBU4xDXTPDJrAMMf1n3YV8C7CEiKdesWtc9eB/0/323830343a376232303a3a2f33322d3438203d3e20323731343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7b20::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:78:e9:96:49:e2:01:88:f4:b3:4d:b2:3e:cb:3d:35:cd:34:
         92:59:a0:88:05:c8:3e:08:8d:22:aa:3a:e4:d1:80:20:4f:e3:
         45:2b:b6:12:8c:b1:4f:13:06:47:6a:ec:c0:52:d5:27:59:9e:
         e8:93:cc:ad:2d:ab:90:1c:5c:e9:b9:a5:a7:b3:5c:5f:61:83:
         f9:ef:ec:0b:fe:75:eb:7d:6f:ee:b7:ec:6e:a0:19:14:4e:12:
         5d:c2:a3:10:36:d7:6d:7b:37:eb:9e:ed:7d:8c:e6:99:46:31:
         68:2d:c1:86:66:8a:92:12:f9:50:6c:36:fc:c2:3a:d1:3a:38:
         d7:e5:3d:a4:80:50:d7:75:38:1c:19:4e:3a:8a:65:45:cf:4b:
         ed:6d:50:5f:6c:24:44:95:b2:83:15:12:d2:89:5c:9b:8a:39:
         53:19:19:24:b6:44:20:0b:9a:93:ce:c5:39:9e:56:2a:d6:90:
         aa:24:a8:c4:1e:c3:36:e8:50:60:0f:24:01:45:b1:5b:24:88:
         f4:f2:70:cc:73:4f:40:e3:03:66:c0:53:ba:48:b7:e1:c6:cb:
         4c:d0:18:e4:b1:20:4f:d1:d9:aa:ed:61:9e:8a:38:24:a1:be:
         43:e3:c8:6c:a3:45:8a:ac:39:7b:62:31:2f:59:60:44:89:9d:
         56:1b:c8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:06 2025 by rpki-client