Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/323830343a336437343a333a3a2f34382d3438203d3e20323632363137.roa
File:                     323830343a336437343a333a3a2f34382d3438203d3e20323632363137.roa (raw, json)
Hash identifier:          LWuTYJ3NW3HgnLpa2j8FOwugFEaMK3Tr9fHKcD4ROKY=
Subject key identifier:   D5:C3:78:2E:8B:B4:B4:9E:0B:E4:36:63:8D:F6:14:A7:7D:23:9C:A9
Certificate issuer:       /CN=97E394FE854613CE9784B1D64D805ABFF0DF922C
Certificate serial:       75043056534C95FCD4525D2D32CC495850405AAA
Authority key identifier: 97:E3:94:FE:85:46:13:CE:97:84:B1:D6:4D:80:5A:BF:F0:DF:92:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97E394FE854613CE9784B1D64D805ABFF0DF922C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/323830343a336437343a333a3a2f34382d3438203d3e20323632363137.roa
Signing time:             Tue 24 Jan 2023 18:27:51 +0000
ROA not before:           Tue 24 Jan 2023 18:22:51 +0000
ROA not after:            Tue 23 Jan 2024 18:27:51 +0000
asID:                     262617
IP address blocks:        2804:3d74:3::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:04:30:56:53:4c:95:fc:d4:52:5d:2d:32:cc:49:58:50:40:5a:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97E394FE854613CE9784B1D64D805ABFF0DF922C
        Validity
            Not Before: Jan 24 18:22:51 2023 GMT
            Not After : Jan 23 18:27:51 2024 GMT
        Subject: CN=D5C3782E8BB4B49E0BE436638DF614A77D239CA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ab:c3:61:85:8d:6b:d8:53:3e:92:37:24:74:
                    d6:64:38:5d:4f:ca:42:2f:65:8f:15:69:37:a7:f3:
                    1d:bf:2d:49:28:e5:e9:42:8b:70:43:15:69:eb:b4:
                    d2:1f:7c:2f:14:4c:22:ac:58:7e:3e:b9:8f:7a:15:
                    5f:06:72:8a:c4:9f:5c:d9:d7:84:ab:41:70:8f:76:
                    b3:05:30:0f:66:cd:7d:68:0d:b0:d2:64:d3:76:98:
                    d9:9a:c7:6f:ab:8c:02:99:dc:81:87:bf:ca:46:55:
                    8d:02:5b:e6:33:02:24:9f:a6:6e:43:e6:f3:31:52:
                    82:f8:b7:fa:c2:d2:e7:45:d4:de:d7:3b:41:20:9b:
                    87:55:01:99:92:9a:08:b7:91:d6:95:c9:c6:20:6e:
                    57:b5:13:93:f0:cb:f4:5e:40:b6:d4:24:eb:f0:4b:
                    bd:82:5b:0a:67:9a:29:75:da:4d:9b:65:d5:4e:15:
                    8a:8a:34:64:5c:9f:9d:45:38:59:21:95:59:3e:b0:
                    71:83:8d:42:2f:9e:44:5d:df:65:9b:17:35:86:86:
                    00:e1:02:e8:15:88:19:b1:e5:f7:bf:19:47:30:ca:
                    d8:e4:36:dc:db:cc:f0:af:9e:f1:d5:45:27:6c:c8:
                    38:5c:c7:66:6c:4e:be:57:90:14:81:ab:6f:1c:e9:
                    bb:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:C3:78:2E:8B:B4:B4:9E:0B:E4:36:63:8D:F6:14:A7:7D:23:9C:A9
            X509v3 Authority Key Identifier:
                keyid:97:E3:94:FE:85:46:13:CE:97:84:B1:D6:4D:80:5A:BF:F0:DF:92:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/97E394FE854613CE9784B1D64D805ABFF0DF922C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97E394FE854613CE9784B1D64D805ABFF0DF922C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/323830343a336437343a333a3a2f34382d3438203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d74:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:7f:a6:45:b2:95:9e:47:cf:ac:c8:f9:d9:22:ed:44:e1:ac:
         71:4a:9d:01:ac:c9:35:72:4c:5c:a2:55:d6:57:42:d8:85:27:
         b1:e2:54:91:c8:99:53:17:36:9f:aa:ec:44:88:33:aa:17:a3:
         2f:d9:1b:2a:ca:e7:d1:5d:9a:88:7c:4f:da:94:a8:0e:e4:74:
         2a:12:27:71:dc:05:01:d4:93:71:3b:01:db:9e:f8:b8:3d:c4:
         bb:2d:d8:eb:40:00:80:4f:0b:ba:8b:0e:69:6c:7d:44:1e:bd:
         4c:a4:71:3a:48:05:a5:40:4b:b0:51:4c:1f:66:f7:30:6d:63:
         77:53:47:ab:03:ca:9a:cd:08:09:46:bb:21:36:47:b0:95:bc:
         82:eb:be:89:74:94:2c:4b:0a:47:37:5c:25:72:e3:61:eb:f5:
         a4:cb:06:a9:c6:7a:1d:32:43:8e:ba:95:02:ed:fb:27:d4:ee:
         7a:05:1f:61:b5:9b:fd:66:b6:ae:af:44:fc:d4:cf:16:53:5c:
         c1:8f:3e:68:b9:38:73:a7:ad:d0:bf:25:71:d3:b6:a4:86:6d:
         8c:ab:ca:05:de:47:19:41:21:0a:be:1b:57:23:43:8c:9e:b4:
         7a:48:35:59:33:ac:a9:9b:10:ff:5c:67:a1:48:cc:2e:32:8c:
         8f:9b:f5:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:08:16 2025 by rpki-client