Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9r5RggKk5WyYsUkqy9TxbdaBCyMZ57wyhVxzYTdEhEPS/2/323830343a383135633a3a2f33322d313238203d3e20323732343439.roa
File:                     323830343a383135633a3a2f33322d313238203d3e20323732343439.roa (raw, json)
Hash identifier:          2vAmpyKdzJscrCvkrmKzSipxuSeplPs+Si3GEw0Bh8w=
Subject key identifier:   B6:A3:D7:95:39:A4:1F:10:A3:B2:31:AD:67:C1:6F:E2:B5:F7:7A:7D
Certificate issuer:       /CN=E79BBA1710374A7068781F6FA9196EF53226AD3A
Certificate serial:       60CD4BA0E6936464F5BCC179D3A0C4756AB53CCE
Authority key identifier: E7:9B:BA:17:10:37:4A:70:68:78:1F:6F:A9:19:6E:F5:32:26:AD:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E79BBA1710374A7068781F6FA9196EF53226AD3A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9r5RggKk5WyYsUkqy9TxbdaBCyMZ57wyhVxzYTdEhEPS/2/323830343a383135633a3a2f33322d313238203d3e20323732343439.roa
Signing time:             Tue 20 Feb 2024 17:53:36 +0000
ROA not before:           Tue 20 Feb 2024 17:48:36 +0000
ROA not after:            Tue 18 Feb 2025 17:53:36 +0000
asID:                     272449
IP address blocks:        2804:815c::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:cd:4b:a0:e6:93:64:64:f5:bc:c1:79:d3:a0:c4:75:6a:b5:3c:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E79BBA1710374A7068781F6FA9196EF53226AD3A
        Validity
            Not Before: Feb 20 17:48:36 2024 GMT
            Not After : Feb 18 17:53:36 2025 GMT
        Subject: CN=B6A3D79539A41F10A3B231AD67C16FE2B5F77A7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fc:62:64:15:5e:12:06:d4:c1:cc:8e:19:7f:
                    c6:ab:08:29:9c:8d:9d:98:33:1b:8b:d1:5a:c6:a9:
                    f8:91:6e:d8:a8:1d:25:8c:9d:c8:09:37:d0:fb:ad:
                    a8:c6:2a:6a:d2:fd:60:62:0b:3e:22:a3:8c:1f:9c:
                    33:c1:26:1b:ca:24:2d:1b:4d:96:ab:ef:b7:c6:c3:
                    f9:29:34:bb:37:c6:23:69:71:ea:5a:4c:b4:3b:fb:
                    9b:7f:b9:f8:4f:66:b9:29:6b:6b:61:dd:ec:50:0a:
                    c1:fb:3a:2a:07:2e:22:86:68:58:0e:ca:af:e6:5a:
                    0b:0c:c4:75:58:52:82:9a:e7:0a:ce:fa:a0:33:5a:
                    8a:a4:ee:7c:1f:c3:27:d0:78:f8:92:30:59:d2:6d:
                    79:2d:aa:7e:0d:4d:ce:be:ff:89:16:3f:e0:20:0c:
                    6d:b9:4c:05:6e:8b:af:bd:a9:42:21:e1:c2:98:99:
                    ef:e9:28:1c:c8:48:e0:a2:85:bb:60:b3:5e:16:1d:
                    f6:61:0c:88:ba:93:08:ce:6a:4c:b6:7c:e0:33:1a:
                    11:d5:b0:3d:40:26:e4:ff:98:8b:71:f6:f7:95:f7:
                    36:10:a9:fb:96:66:27:f2:7d:ee:9a:13:24:76:7e:
                    27:0d:8b:5d:a0:6c:0b:4e:c8:10:01:ee:7e:92:0f:
                    ca:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:A3:D7:95:39:A4:1F:10:A3:B2:31:AD:67:C1:6F:E2:B5:F7:7A:7D
            X509v3 Authority Key Identifier:
                keyid:E7:9B:BA:17:10:37:4A:70:68:78:1F:6F:A9:19:6E:F5:32:26:AD:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9r5RggKk5WyYsUkqy9TxbdaBCyMZ57wyhVxzYTdEhEPS/2/E79BBA1710374A7068781F6FA9196EF53226AD3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E79BBA1710374A7068781F6FA9196EF53226AD3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9r5RggKk5WyYsUkqy9TxbdaBCyMZ57wyhVxzYTdEhEPS/2/323830343a383135633a3a2f33322d313238203d3e20323732343439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:815c::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:d9:5c:de:de:e4:86:e1:2d:93:ed:57:27:26:fa:f5:76:b0:
         1c:e9:73:98:04:74:32:b2:eb:df:cc:f2:de:b8:26:85:40:82:
         23:c2:56:bc:7d:12:a3:0f:78:b5:9e:fe:d8:da:48:80:d5:26:
         26:59:f6:97:3e:8d:32:29:06:23:3b:d5:ac:17:b7:5c:fc:79:
         65:05:ac:14:a5:21:c4:d8:18:0c:e9:f3:96:b3:cf:05:3e:c9:
         37:9e:bf:ba:62:52:dd:bf:b7:f2:5e:08:11:bf:68:3a:d2:89:
         1f:f3:cb:6a:af:a1:0b:d1:bf:75:cf:1f:c5:7d:f4:93:9b:0e:
         e7:f4:da:3d:59:e3:57:94:79:a4:83:72:e6:6f:98:25:fc:7d:
         ed:38:a9:3a:55:85:02:57:c2:30:d7:43:42:af:af:da:45:45:
         f1:16:d5:0b:2b:8f:65:ea:32:c1:90:5c:f9:52:39:9b:0d:a4:
         5b:f5:9c:8d:f0:98:2e:e2:ba:ff:45:89:6e:0b:f7:29:93:0b:
         fc:11:0a:61:c8:7a:7f:0b:8d:4c:57:36:c3:8d:bf:ab:20:88:
         12:d4:d1:de:1b:46:fc:71:b8:a7:38:0b:57:36:5d:a0:a3:30:
         b1:98:f1:4f:ac:4d:3b:4e:19:5f:8f:8e:d7:6f:61:8a:3b:1c:
         a7:5d:5b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:20:13 2025 by rpki-client