Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/323830343a3736383a3a2f33322d3332203d3e203532393737.roa
File:                     323830343a3736383a3a2f33322d3332203d3e203532393737.roa (raw, json)
Hash identifier:          XLgjSJni9mifCGp4eNOKWZlzXgu8mN26V0Ftl7AZFxU=
Subject key identifier:   08:28:A2:30:23:3A:2A:D6:8F:62:7C:DC:F3:D1:E9:A0:D8:A1:E6:82
Certificate issuer:       /CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
Certificate serial:       090E5BDCC112AC00E6ACF4ED7B592E85B5871DA7
Authority key identifier: 43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/323830343a3736383a3a2f33322d3332203d3e203532393737.roa
Signing time:             Tue 21 Nov 2023 06:00:05 +0000
ROA not before:           Tue 21 Nov 2023 05:55:05 +0000
ROA not after:            Tue 19 Nov 2024 06:00:05 +0000
asID:                     52977
IP address blocks:        2804:768::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:0e:5b:dc:c1:12:ac:00:e6:ac:f4:ed:7b:59:2e:85:b5:87:1d:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
        Validity
            Not Before: Nov 21 05:55:05 2023 GMT
            Not After : Nov 19 06:00:05 2024 GMT
        Subject: CN=0828A230233A2AD68F627CDCF3D1E9A0D8A1E682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:0c:89:d8:28:d6:9f:a1:81:8b:f5:92:0d:93:
                    fc:b4:a7:7c:53:a5:c3:c6:c1:d6:a0:41:f4:5d:24:
                    f4:1c:51:d9:d0:29:62:1d:40:ef:31:ae:96:e8:34:
                    73:cf:a1:36:b3:61:ea:2e:15:3d:93:76:e6:54:28:
                    47:01:a8:3b:93:d4:cc:c7:e3:1d:20:90:32:17:39:
                    3b:5a:7c:be:17:ab:c6:62:c6:9a:6b:66:b2:d5:1a:
                    6b:2b:07:23:30:9c:0f:de:61:6d:d7:d8:f7:e2:c0:
                    11:92:cd:e1:e2:f9:1d:65:17:68:d8:a5:be:d1:d8:
                    ad:24:e3:82:43:a4:83:fa:9e:4b:4c:f3:ee:24:aa:
                    66:8a:87:6c:67:58:d9:ee:cf:86:ce:2f:75:0c:60:
                    3c:a0:70:96:99:eb:0a:b2:c3:7d:02:9b:f9:d9:0f:
                    e2:9c:c8:af:5b:1f:7d:7f:ea:f1:7e:cf:b8:40:af:
                    8c:62:7c:b9:e9:21:09:9e:9d:56:dc:7b:1f:4e:42:
                    9b:21:d4:c5:c2:92:90:72:60:8d:8d:11:12:60:2e:
                    07:b8:a2:cd:4d:9f:ea:b5:ba:e6:26:cd:7b:99:82:
                    4e:cd:f9:28:61:0c:93:80:63:2a:d6:fa:f2:f0:1e:
                    2c:77:d1:21:4a:bb:67:b3:74:8b:fd:d6:62:a2:31:
                    4e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:28:A2:30:23:3A:2A:D6:8F:62:7C:DC:F3:D1:E9:A0:D8:A1:E6:82
            X509v3 Authority Key Identifier:
                keyid:43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/323830343a3736383a3a2f33322d3332203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:768::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:4a:73:05:62:c2:df:41:5d:c9:a6:dd:3f:24:b2:f3:a9:b9:
         46:08:80:62:ab:a0:4c:84:fb:94:68:be:b5:fa:8a:5e:15:90:
         3d:a9:2e:c9:21:c9:e8:41:9f:f5:41:73:e0:e7:5c:95:76:01:
         be:7f:a7:34:fe:e0:56:0f:6e:58:2c:ec:a7:26:8b:d0:1f:d5:
         48:41:9c:aa:cc:07:da:bd:81:7a:92:be:63:41:32:2e:55:3f:
         46:89:f0:cc:51:64:d4:e1:d9:7b:ae:c3:78:82:c6:65:7e:ef:
         78:86:e5:4d:8c:fd:ea:9b:f1:14:89:46:b9:fb:c9:9c:3e:88:
         2f:41:cf:f4:8e:62:7c:81:cf:13:fe:a2:bf:86:af:20:77:30:
         56:a7:ec:81:f3:88:35:d6:3f:eb:8c:85:9d:a2:6c:67:6b:13:
         f6:d4:aa:25:94:79:62:a6:64:c6:81:f5:22:dd:1f:3c:e3:dc:
         97:a1:26:8e:b1:08:a2:ca:5d:03:fb:f4:ea:39:33:6a:b6:cd:
         84:8b:a2:08:2c:b8:3f:12:63:87:74:b6:8a:cf:9c:d2:eb:d6:
         9c:79:f4:d3:6a:8e:a3:ef:10:07:19:66:e6:97:20:db:d9:36:
         cb:ff:5e:f5:dd:4e:f9:74:93:76:f4:ec:5c:0c:b6:e3:0f:15:
         de:ce:ee:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:17:07 2025 by rpki-client