Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/0/323830343a346165343a3230303a3a2f34352d3435203d3e20323637323730.roa
File:                     323830343a346165343a3230303a3a2f34352d3435203d3e20323637323730.roa (raw, json)
Hash identifier:          sk6hb75yrFt0MJwxFonp6vhUFbg8xc4OI8WfZC7q4Xk=
Subject key identifier:   00:17:8C:38:77:16:53:77:D2:63:90:FF:BD:EE:10:52:49:0C:59:11
Certificate issuer:       /CN=81B32A0DFD35A761A0E4773BF209978F18CBA8F9
Certificate serial:       4838322E9561FD63907466F0389A2894E453298E
Authority key identifier: 81:B3:2A:0D:FD:35:A7:61:A0:E4:77:3B:F2:09:97:8F:18:CB:A8:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81B32A0DFD35A761A0E4773BF209978F18CBA8F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/0/323830343a346165343a3230303a3a2f34352d3435203d3e20323637323730.roa
Signing time:             Wed 16 Aug 2023 18:44:38 +0000
ROA not before:           Wed 16 Aug 2023 18:39:38 +0000
ROA not after:            Wed 14 Aug 2024 18:44:38 +0000
asID:                     267270
IP address blocks:        2804:4ae4:200::/45 maxlen: 45
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:38:32:2e:95:61:fd:63:90:74:66:f0:38:9a:28:94:e4:53:29:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81B32A0DFD35A761A0E4773BF209978F18CBA8F9
        Validity
            Not Before: Aug 16 18:39:38 2023 GMT
            Not After : Aug 14 18:44:38 2024 GMT
        Subject: CN=00178C3877165377D26390FFBDEE1052490C5911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0d:5c:83:d7:fa:1c:35:cd:a1:5a:63:7a:5f:
                    18:f1:e2:44:c0:67:51:ba:dd:05:33:8b:d0:0b:93:
                    4a:35:d0:e7:10:f8:2f:f4:ac:f3:67:6a:cb:6b:5e:
                    aa:7d:a6:41:af:2e:6b:31:fc:db:a0:4f:45:f3:08:
                    f5:b9:9b:45:46:40:7a:ff:26:4c:39:0c:ba:a3:51:
                    2b:4e:05:3f:51:45:44:e3:f3:75:04:66:69:a4:c4:
                    82:83:9d:8c:5e:02:b0:71:f5:88:ba:53:08:3b:8b:
                    cd:ce:46:57:91:5f:a4:69:e5:22:c5:d0:d0:07:b2:
                    08:5a:47:bf:20:32:8b:83:86:d4:e8:c2:a5:bc:4e:
                    9d:9a:17:61:fb:f9:50:2e:12:eb:22:01:48:91:ce:
                    7a:8a:33:52:c1:06:8f:c2:34:c9:7a:e8:27:22:5f:
                    b8:77:39:7a:25:5c:a0:37:91:04:3f:5d:4f:83:30:
                    69:54:e5:7b:54:43:62:98:4c:30:22:9a:ba:fb:50:
                    48:8e:a7:7f:af:5e:4d:51:34:db:2a:be:48:2a:09:
                    08:3a:1b:d8:f6:33:e4:e9:bb:42:03:c9:70:cd:52:
                    d3:25:f9:6d:3b:86:ec:68:00:9f:09:9b:a8:f7:9e:
                    3f:8b:f8:23:de:58:44:3d:f3:92:21:fb:13:48:64:
                    2f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:17:8C:38:77:16:53:77:D2:63:90:FF:BD:EE:10:52:49:0C:59:11
            X509v3 Authority Key Identifier:
                keyid:81:B3:2A:0D:FD:35:A7:61:A0:E4:77:3B:F2:09:97:8F:18:CB:A8:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/0/81B32A0DFD35A761A0E4773BF209978F18CBA8F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81B32A0DFD35A761A0E4773BF209978F18CBA8F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/0/323830343a346165343a3230303a3a2f34352d3435203d3e20323637323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4ae4:200::/45

    Signature Algorithm: sha256WithRSAEncryption
         15:1c:14:3a:19:fb:a3:22:84:d4:fe:b3:0d:8c:99:2a:0d:31:
         14:4d:53:5a:91:0b:21:03:c8:61:bc:97:7c:7d:68:0f:ef:7d:
         33:dc:2b:90:61:46:f9:d8:b2:9d:de:19:4a:4e:2b:e9:16:05:
         83:07:0a:6d:07:4d:65:9e:f4:6d:8e:7b:c4:31:04:80:73:ea:
         57:53:ae:82:0a:18:a9:0d:6c:56:21:f8:ed:96:ba:f5:aa:83:
         a5:51:78:1c:60:99:0b:e7:47:81:4f:3f:c4:11:d0:f3:05:f4:
         65:df:59:f1:a3:2d:1b:1f:97:a0:c2:2f:11:8d:5a:76:f3:a6:
         0e:c7:d5:1d:4f:2c:1c:cc:b9:f6:60:64:bc:8e:13:f3:21:76:
         f3:67:eb:a2:e1:b2:92:5a:8e:f9:c0:f3:53:b6:2e:3c:8a:2f:
         53:48:91:aa:86:a8:88:8d:47:bd:04:2f:75:eb:6f:e9:c1:c9:
         59:5d:71:b2:37:fd:16:9c:1d:3b:bc:b7:eb:0b:1c:4f:b7:11:
         4d:b3:9b:95:60:6f:59:7d:d4:fd:5b:9b:61:f6:5b:67:bc:fd:
         39:fd:d9:69:b6:17:8e:d7:3f:a4:e0:ba:53:29:bf:90:66:0a:
         50:c0:5e:3c:77:b0:0b:99:aa:8e:35:37:f1:26:72:ca:57:5c:
         55:e7:59:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 04:18:33 2025 by rpki-client