Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/1/323830343a336237633a3130303a3a2f34302d3430203d3e20323636313532.roa
File:                     323830343a336237633a3130303a3a2f34302d3430203d3e20323636313532.roa (raw, json)
Hash identifier:          GVBJF6qzPqSElXAh2z2IFKJploKkA9QTN69tXAzTQtU=
Subject key identifier:   9C:0D:C5:8E:26:2F:76:A9:77:5F:B5:F6:16:DC:DC:C7:B8:24:A0:83
Certificate issuer:       /CN=BF741951CE72820C5CAEB22CA5BEBFBC47F41278
Certificate serial:       2F53FF24D27C317F0486185DE991F75FE9E20783
Authority key identifier: BF:74:19:51:CE:72:82:0C:5C:AE:B2:2C:A5:BE:BF:BC:47:F4:12:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF741951CE72820C5CAEB22CA5BEBFBC47F41278.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/1/323830343a336237633a3130303a3a2f34302d3430203d3e20323636313532.roa
Signing time:             Fri 01 Sep 2023 16:45:59 +0000
ROA not before:           Fri 01 Sep 2023 16:40:59 +0000
ROA not after:            Fri 30 Aug 2024 16:45:59 +0000
asID:                     266152
IP address blocks:        2804:3b7c:100::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:53:ff:24:d2:7c:31:7f:04:86:18:5d:e9:91:f7:5f:e9:e2:07:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF741951CE72820C5CAEB22CA5BEBFBC47F41278
        Validity
            Not Before: Sep  1 16:40:59 2023 GMT
            Not After : Aug 30 16:45:59 2024 GMT
        Subject: CN=9C0DC58E262F76A9775FB5F616DCDCC7B824A083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3c:8f:dd:7b:e7:bb:43:06:2b:f3:a0:17:6d:
                    f6:fa:b7:28:54:94:95:b6:6d:ca:a5:2a:af:ec:6b:
                    da:cf:58:11:cf:3b:5a:c2:74:dc:ee:6a:c7:21:66:
                    e3:1e:90:cb:79:1a:fd:44:07:9c:6f:57:98:46:c5:
                    3b:ea:3e:8e:3a:f6:aa:17:60:2b:3f:ec:fe:92:53:
                    e5:f9:8a:37:4b:85:c7:03:28:00:69:57:1e:80:c2:
                    f1:62:7e:b7:b5:08:d2:f6:15:c9:79:f0:14:54:05:
                    d9:42:9b:97:f2:5c:00:bc:73:0e:ba:90:25:bd:f4:
                    20:3c:a3:cb:94:26:15:a9:ec:3d:86:fe:ce:09:c3:
                    7f:9e:45:25:fd:91:9f:99:f7:4c:59:cf:c6:5f:34:
                    29:cf:25:3d:69:5e:1c:52:95:5c:06:ab:33:16:6e:
                    dc:d1:37:f8:65:2f:31:4e:fa:ef:be:6b:8f:1f:c6:
                    9a:da:20:15:1a:3d:cd:a6:ed:95:63:a8:b8:98:07:
                    4a:fb:ab:07:63:42:02:20:66:e2:d7:46:da:5d:31:
                    8e:f9:a0:b4:1a:9b:95:a4:a7:97:37:5e:38:a5:98:
                    41:17:5e:bd:8e:a6:3f:10:de:9b:39:f2:38:54:79:
                    d7:5a:2a:22:ac:ba:83:af:99:1f:92:6d:39:0c:09:
                    2b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:0D:C5:8E:26:2F:76:A9:77:5F:B5:F6:16:DC:DC:C7:B8:24:A0:83
            X509v3 Authority Key Identifier:
                keyid:BF:74:19:51:CE:72:82:0C:5C:AE:B2:2C:A5:BE:BF:BC:47:F4:12:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/1/BF741951CE72820C5CAEB22CA5BEBFBC47F41278.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF741951CE72820C5CAEB22CA5BEBFBC47F41278.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/1/323830343a336237633a3130303a3a2f34302d3430203d3e20323636313532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b7c:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         2c:e1:86:ae:39:8e:2c:4f:4d:2e:b4:d2:5e:8b:69:f2:12:ca:
         f8:e3:b0:ca:cd:70:07:60:3b:db:df:f3:6e:2e:ee:a4:f9:95:
         af:95:f4:bd:04:06:0b:ac:80:de:55:16:c1:18:ee:3c:a1:b2:
         cf:69:40:50:15:dd:36:98:31:81:6d:6d:65:d8:44:ef:3f:d5:
         1e:c9:27:fb:90:64:f8:0f:d8:42:ea:13:91:a5:4c:0b:60:27:
         45:00:5c:f4:cc:cd:59:02:28:5e:c6:05:e5:0f:51:a3:fd:c9:
         1b:42:23:2d:fe:64:fe:53:ce:38:62:2f:72:57:29:ee:30:35:
         b9:21:45:4d:23:80:bd:61:c8:ce:4f:0a:25:4f:03:ff:1c:bc:
         8e:7a:e6:d9:55:d0:b7:e9:a5:7c:6d:df:8e:b9:50:4a:0e:34:
         d9:06:b5:c1:a4:35:ab:f9:bd:0e:7e:8a:34:13:12:08:a6:23:
         05:1a:ab:6d:52:d0:f3:d5:4f:3b:f4:25:27:0c:9a:b4:1e:19:
         30:9d:97:7d:9e:33:4a:3d:1b:4b:53:9e:d1:54:d5:78:1f:a2:
         e5:ad:a1:87:02:6e:8a:54:48:3b:7c:2a:9b:47:8a:6e:00:e6:
         60:75:2e:b8:d0:17:72:96:32:3f:10:52:29:50:1a:b8:41:ba:
         ba:9f:30:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 09:18:07 2025 by rpki-client