Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/323830343a326532383a633030303a3a2f33342d3334203d3e20323635333238.roa
File:                     323830343a326532383a633030303a3a2f33342d3334203d3e20323635333238.roa (raw, json)
Hash identifier:          afu1TEW7cM4VTNnGZfFe92wEE+B1roFnMGQmPdOj6X0=
Subject key identifier:   73:2A:6C:DE:75:0F:F3:17:3B:5C:6B:91:EA:B6:59:C4:FB:74:B4:67
Certificate issuer:       /CN=77947C88DBADADCA74224F342BBB9D3AE9B34D31
Certificate serial:       3E05CE5E04AEB1CD98AA1CA5E0FAAD95AD67E985
Authority key identifier: 77:94:7C:88:DB:AD:AD:CA:74:22:4F:34:2B:BB:9D:3A:E9:B3:4D:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/77947C88DBADADCA74224F342BBB9D3AE9B34D31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/323830343a326532383a633030303a3a2f33342d3334203d3e20323635333238.roa
Signing time:             Fri 29 Sep 2023 17:20:34 +0000
ROA not before:           Fri 29 Sep 2023 17:15:34 +0000
ROA not after:            Fri 27 Sep 2024 17:20:34 +0000
asID:                     265328
IP address blocks:        2804:2e28:c000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:05:ce:5e:04:ae:b1:cd:98:aa:1c:a5:e0:fa:ad:95:ad:67:e9:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77947C88DBADADCA74224F342BBB9D3AE9B34D31
        Validity
            Not Before: Sep 29 17:15:34 2023 GMT
            Not After : Sep 27 17:20:34 2024 GMT
        Subject: CN=732A6CDE750FF3173B5C6B91EAB659C4FB74B467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:55:46:01:20:c3:07:f0:ae:0c:a7:62:9b:9c:
                    f6:fb:b6:81:b8:27:67:22:f8:1e:ae:9f:2b:35:91:
                    6a:d1:4e:f5:21:23:be:2f:b8:b7:3f:29:35:01:b2:
                    8f:62:46:42:6d:45:5b:d2:93:60:06:6b:2a:c6:f7:
                    73:ec:fe:87:db:2e:22:9e:e7:04:38:f5:0d:c6:2b:
                    2c:28:14:27:e3:69:52:8e:f4:7a:f1:07:64:89:33:
                    c1:88:6a:5a:a8:9a:11:94:e7:f9:d3:8e:d3:5d:b2:
                    51:ef:97:ef:18:19:79:33:e0:82:f8:a6:a1:f9:d5:
                    7a:16:0d:57:c0:b2:d2:46:ac:d2:d8:03:40:fa:93:
                    e1:50:85:35:c0:1b:01:ce:b1:72:c1:ef:7f:e6:8f:
                    af:fb:dd:c2:60:f3:c2:85:8a:cb:f2:a2:d4:96:cb:
                    0f:b8:ca:13:41:82:d0:5a:58:df:f1:02:63:e4:86:
                    78:f9:f4:86:eb:24:ce:44:b5:cf:7f:20:a5:53:33:
                    bf:c5:74:3a:dc:38:17:e6:ec:80:8d:33:fb:ad:90:
                    85:a5:c2:d8:af:ec:28:41:1e:42:a9:08:5f:97:ec:
                    0a:49:b5:05:42:3c:9a:df:ba:a3:2c:85:ed:a0:09:
                    44:7f:89:e7:62:24:22:40:df:55:06:d4:f4:e3:2d:
                    e6:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:2A:6C:DE:75:0F:F3:17:3B:5C:6B:91:EA:B6:59:C4:FB:74:B4:67
            X509v3 Authority Key Identifier:
                keyid:77:94:7C:88:DB:AD:AD:CA:74:22:4F:34:2B:BB:9D:3A:E9:B3:4D:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/77947C88DBADADCA74224F342BBB9D3AE9B34D31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/77947C88DBADADCA74224F342BBB9D3AE9B34D31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/323830343a326532383a633030303a3a2f33342d3334203d3e20323635333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e28:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         d7:0e:2e:ea:fc:57:64:57:dd:5b:14:2d:4d:b6:9d:ff:f2:b2:
         f5:d2:2c:1d:4a:65:79:5b:46:7e:be:4f:bb:f9:ca:3f:07:7b:
         9a:8b:25:33:d2:2b:69:7d:5a:71:60:e3:e1:bc:4d:dd:fa:c1:
         c3:02:34:a7:a3:79:d6:d8:7a:21:24:23:24:c7:5a:54:85:1d:
         03:ac:7c:92:8f:6f:84:0e:67:d2:14:b1:6a:97:c7:8c:7a:27:
         60:24:68:b3:19:0d:ce:18:f2:70:de:4a:82:b2:d0:ba:4e:c1:
         9f:14:53:eb:dd:12:9b:f0:f8:5f:17:84:b0:8a:a9:ef:c6:2c:
         f4:f9:3e:a4:ea:0b:c6:94:6f:87:c4:fc:50:99:15:6c:48:ab:
         6c:5a:09:13:cf:d5:3e:0b:d4:bd:ac:9f:e7:78:8d:53:89:9c:
         89:5a:ff:05:ec:e5:b9:85:9c:6d:3f:27:61:a0:e9:e2:42:7e:
         ad:be:49:0a:cd:40:9d:f0:d9:f1:44:52:5c:5f:86:eb:0e:29:
         c7:c1:92:82:e4:e4:53:5c:e4:d4:97:0f:a8:33:28:6f:15:ba:
         c2:38:44:f3:e4:02:5c:d6:43:84:9b:5f:0a:83:14:72:fd:6b:
         bd:bd:7c:0e:01:0d:af:e5:92:22:d2:dd:12:ac:5e:d2:f7:5e:
         75:da:ae:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:56 2025 by rpki-client