Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Q3pDWGo9toJMNuuk5EHfW5NNLxxTSKqDbkNT8JSK31E/0/323830343a333431383a343030303a3a2f33342d313238203d3e20323635343335.roa
File:                     323830343a333431383a343030303a3a2f33342d313238203d3e20323635343335.roa (raw, json)
Hash identifier:          fFUqBF+f84Q7vdKyAkXXSP85YhAsPUMQtwu0cHWGReo=
Subject key identifier:   73:E9:10:0A:55:02:79:B3:AC:5C:41:79:F7:5A:76:C2:34:F4:AF:E8
Certificate issuer:       /CN=7AC3F86BBB414BACE798C34BBF248ABFFE48CB9B
Certificate serial:       32F68E8032FF3ABCBE6F0F78F0C064FA7027272C
Authority key identifier: 7A:C3:F8:6B:BB:41:4B:AC:E7:98:C3:4B:BF:24:8A:BF:FE:48:CB:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7AC3F86BBB414BACE798C34BBF248ABFFE48CB9B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Q3pDWGo9toJMNuuk5EHfW5NNLxxTSKqDbkNT8JSK31E/0/323830343a333431383a343030303a3a2f33342d313238203d3e20323635343335.roa
Signing time:             Sat 18 Mar 2023 18:26:20 +0000
ROA not before:           Sat 18 Mar 2023 18:21:20 +0000
ROA not after:            Sat 16 Mar 2024 18:26:20 +0000
asID:                     265435
IP address blocks:        2804:3418:4000::/34 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:f6:8e:80:32:ff:3a:bc:be:6f:0f:78:f0:c0:64:fa:70:27:27:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AC3F86BBB414BACE798C34BBF248ABFFE48CB9B
        Validity
            Not Before: Mar 18 18:21:20 2023 GMT
            Not After : Mar 16 18:26:20 2024 GMT
        Subject: CN=73E9100A550279B3AC5C4179F75A76C234F4AFE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:50:0f:29:f9:37:eb:ef:53:c2:d8:b2:00:dd:
                    b4:e9:ba:cc:8c:1e:0f:08:e4:f3:a5:0f:64:ea:12:
                    b3:75:5e:c9:91:e9:6e:cb:a7:79:f4:f5:62:19:ce:
                    8a:83:17:dd:5a:8c:9d:93:2c:1c:0f:c9:9f:76:e3:
                    0a:e9:c1:57:9c:f4:0b:11:f2:6c:27:0a:17:67:af:
                    bf:84:e1:20:62:17:74:7d:71:18:2e:8f:85:b5:c5:
                    16:cf:a5:44:3c:e9:f4:fb:f5:52:c8:5f:ac:9d:cb:
                    3f:55:ed:33:f4:52:02:67:e2:cb:0d:0d:11:9e:b8:
                    1e:2d:c3:c6:a9:fd:0a:2f:5a:ce:02:cb:3f:a2:99:
                    c8:8c:06:fc:3e:f2:3d:71:3f:9d:b4:7b:a4:7d:f1:
                    11:05:cd:66:2e:b3:78:6d:ac:9c:91:c4:b1:97:08:
                    90:6a:10:5a:a8:8a:32:dd:6c:cf:54:10:29:50:9c:
                    3e:82:a4:65:b6:7b:c6:de:ca:5a:a3:e4:51:5a:5c:
                    46:1a:fe:0c:29:7c:ed:85:5c:dd:17:78:f4:0a:76:
                    6c:05:19:6b:3e:30:ee:4e:85:2c:bb:25:56:63:ba:
                    85:4f:b7:f2:f9:98:e8:cc:db:ba:47:30:c2:e0:f5:
                    a6:7b:be:b8:c7:f5:78:69:88:af:ea:55:14:25:b6:
                    8d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:E9:10:0A:55:02:79:B3:AC:5C:41:79:F7:5A:76:C2:34:F4:AF:E8
            X509v3 Authority Key Identifier:
                keyid:7A:C3:F8:6B:BB:41:4B:AC:E7:98:C3:4B:BF:24:8A:BF:FE:48:CB:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Q3pDWGo9toJMNuuk5EHfW5NNLxxTSKqDbkNT8JSK31E/0/7AC3F86BBB414BACE798C34BBF248ABFFE48CB9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7AC3F86BBB414BACE798C34BBF248ABFFE48CB9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Q3pDWGo9toJMNuuk5EHfW5NNLxxTSKqDbkNT8JSK31E/0/323830343a333431383a343030303a3a2f33342d313238203d3e20323635343335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3418:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         03:73:80:fa:e4:14:66:e5:94:bc:ea:9e:42:c2:7c:b6:96:43:
         a6:68:bf:df:76:60:1f:04:09:b4:a5:34:7b:0a:e8:ab:d6:c1:
         54:89:9b:8b:50:f4:81:d2:7f:cc:db:0b:cd:72:32:28:f1:fd:
         6c:f8:68:50:69:0b:87:22:4f:99:fa:fe:90:09:79:4c:52:00:
         83:cf:cb:92:cf:b3:73:26:e0:93:98:a9:9d:0e:3f:48:d7:5d:
         5e:6d:4c:50:fe:78:85:bd:ca:e6:4f:04:9b:8e:40:bc:7d:47:
         f1:ea:a3:45:b8:f1:4a:71:9d:c6:65:cd:63:a2:b0:f5:9d:d4:
         21:34:ef:d3:c9:9b:70:c4:eb:91:e0:99:32:27:d3:78:21:89:
         74:d1:6c:c9:ac:70:15:34:74:d1:61:2b:01:dd:fe:23:ec:06:
         21:c5:cb:36:fa:f5:39:fa:9c:d0:9b:96:0c:5d:21:06:1d:5a:
         b1:60:e2:f5:66:c8:81:9d:38:46:34:37:41:af:51:9f:82:12:
         3a:53:71:5f:77:5a:e3:21:30:ec:c2:4e:39:e6:9e:cf:b6:87:
         b6:55:94:c4:80:22:1c:8c:fd:b6:aa:64:e4:5a:04:f9:ff:e6:
         d5:f9:45:43:2e:46:6d:b7:9a:f7:02:b4:24:92:3c:52:c8:0d:
         ce:15:95:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:20:40 2025 by rpki-client