Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/323830343a326532383a3a2f33322d313238203d3e20323635333238.roa
File:                     323830343a326532383a3a2f33322d313238203d3e20323635333238.roa (raw, json)
Hash identifier:          gk4E8vAWRecvzwVpEVt9zx1QmZ7Vl1/FxmVhp+deK/k=
Subject key identifier:   B2:86:C9:41:D3:54:7C:63:CF:1F:08:DD:F5:23:66:03:AC:E8:8D:5E
Certificate issuer:       /CN=F910017DA6B3A447EEA3F28FEA637B6EE7E93862
Certificate serial:       285824ECB354BA4B9084FB03EB833461E6C09DDB
Authority key identifier: F9:10:01:7D:A6:B3:A4:47:EE:A3:F2:8F:EA:63:7B:6E:E7:E9:38:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F910017DA6B3A447EEA3F28FEA637B6EE7E93862.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/323830343a326532383a3a2f33322d313238203d3e20323635333238.roa
Signing time:             Mon 09 Oct 2023 21:20:19 +0000
ROA not before:           Mon 09 Oct 2023 21:15:19 +0000
ROA not after:            Mon 07 Oct 2024 21:20:19 +0000
asID:                     265328
IP address blocks:        2804:2e28::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:58:24:ec:b3:54:ba:4b:90:84:fb:03:eb:83:34:61:e6:c0:9d:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F910017DA6B3A447EEA3F28FEA637B6EE7E93862
        Validity
            Not Before: Oct  9 21:15:19 2023 GMT
            Not After : Oct  7 21:20:19 2024 GMT
        Subject: CN=B286C941D3547C63CF1F08DDF5236603ACE88D5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b7:3b:42:7c:7f:44:4b:13:4b:a3:78:a0:b4:
                    21:ba:16:45:d5:c3:0e:e6:4d:87:35:cc:02:c6:d8:
                    1a:55:22:c9:9f:57:cc:14:27:cb:1e:a9:6f:4e:a4:
                    9e:c5:9a:78:92:74:f8:c2:d7:78:e4:40:dd:e8:47:
                    de:9e:d4:d8:42:28:d2:73:e8:93:e0:ed:19:63:34:
                    c6:05:2d:bc:de:1c:a8:fb:39:01:a8:e2:b1:82:6d:
                    ff:a1:75:42:1b:4d:c0:d7:ed:54:f4:10:6f:7d:86:
                    fb:66:d8:a2:21:6e:b5:80:bd:86:43:40:56:9f:44:
                    7e:80:ec:40:3a:46:c2:d0:df:f7:27:33:99:d9:68:
                    b7:ca:d6:ad:1f:c5:cb:23:6d:cc:97:74:9c:33:c8:
                    4b:00:e2:8b:33:93:2d:49:36:ee:f9:10:e9:cb:70:
                    6a:25:05:c0:f5:cf:1a:05:97:43:ac:cf:5d:b1:8e:
                    15:fd:69:be:78:53:84:d3:ac:53:08:e7:40:99:5d:
                    f9:7b:bb:4a:63:bd:a0:49:0a:86:d7:83:a7:42:3c:
                    55:17:62:df:96:3c:fe:46:47:e1:37:bc:ee:02:cd:
                    01:27:b4:b3:c2:ca:8d:62:dc:1b:32:13:e0:cf:58:
                    cd:ab:8d:f2:0d:5b:f8:de:cb:7c:77:2f:7d:ff:5f:
                    9b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:86:C9:41:D3:54:7C:63:CF:1F:08:DD:F5:23:66:03:AC:E8:8D:5E
            X509v3 Authority Key Identifier:
                keyid:F9:10:01:7D:A6:B3:A4:47:EE:A3:F2:8F:EA:63:7B:6E:E7:E9:38:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/F910017DA6B3A447EEA3F28FEA637B6EE7E93862.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F910017DA6B3A447EEA3F28FEA637B6EE7E93862.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/323830343a326532383a3a2f33322d313238203d3e20323635333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e28::/32

    Signature Algorithm: sha256WithRSAEncryption
         b1:f4:66:fc:1e:3a:51:29:8a:9d:97:ed:67:f9:8f:08:1c:41:
         b5:a9:39:05:bd:20:83:a4:43:15:61:ad:38:19:ce:97:5d:ea:
         aa:d2:aa:07:ac:5b:32:04:b8:59:3e:61:07:47:59:dd:a2:6f:
         d9:67:29:f5:0b:4d:69:5c:67:ce:6a:bc:21:66:fc:3b:27:38:
         3b:cf:21:0d:c0:e4:48:ff:a7:0f:c8:18:4e:d3:33:e1:c5:1d:
         32:f6:d8:44:6d:bb:f4:b2:80:34:ec:91:33:39:22:0f:36:d8:
         f3:37:aa:ca:35:87:fd:94:08:40:ba:c5:d2:01:89:e2:f2:46:
         40:02:6f:f2:94:44:d9:75:4a:2f:8b:86:f7:3b:6d:7e:ad:7a:
         dc:a8:8c:32:ef:6a:a8:60:c4:a6:cb:79:90:6e:17:7b:1c:7a:
         6d:42:24:e1:c2:cb:07:f9:ca:17:27:a4:9a:30:73:6c:1b:01:
         56:88:71:8c:e4:ac:1d:cd:de:46:c2:57:2b:61:92:9d:36:34:
         80:2e:7b:6c:f1:a3:1f:ca:8d:5f:46:d0:0e:67:85:78:2d:af:
         07:61:e5:aa:97:3c:1b:6f:51:26:7d:61:d3:38:58:fd:40:23:
         c3:a5:81:ad:14:bb:0f:8c:d5:8c:2b:00:c7:a8:d7:79:a3:9e:
         70:ef:e2:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:32:58 2025 by rpki-client