Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/0/323830343a363938343a383030303a3a2f33332d3333203d3e20323730323735.roa
File:                     323830343a363938343a383030303a3a2f33332d3333203d3e20323730323735.roa (raw, json)
Hash identifier:          dvJV8uk7pYXTTAwKGeldxGDlLkSSGCi2T5uV/WhBpxw=
Subject key identifier:   09:4A:71:EE:39:54:BB:FD:6B:9C:13:80:48:78:81:E3:4C:24:23:95
Certificate issuer:       /CN=AF4E045CCD60F57F93C3C91D5A9A71004102D44B
Certificate serial:       2AF38CF40CD77098C9048FD6540C99867E4D2F6D
Authority key identifier: AF:4E:04:5C:CD:60:F5:7F:93:C3:C9:1D:5A:9A:71:00:41:02:D4:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF4E045CCD60F57F93C3C91D5A9A71004102D44B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/0/323830343a363938343a383030303a3a2f33332d3333203d3e20323730323735.roa
Signing time:             Mon 26 Jun 2023 16:15:11 +0000
ROA not before:           Mon 26 Jun 2023 16:10:11 +0000
ROA not after:            Mon 24 Jun 2024 16:15:11 +0000
asID:                     270275
IP address blocks:        2804:6984:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:f3:8c:f4:0c:d7:70:98:c9:04:8f:d6:54:0c:99:86:7e:4d:2f:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF4E045CCD60F57F93C3C91D5A9A71004102D44B
        Validity
            Not Before: Jun 26 16:10:11 2023 GMT
            Not After : Jun 24 16:15:11 2024 GMT
        Subject: CN=094A71EE3954BBFD6B9C1380487881E34C242395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ce:14:2c:67:36:54:fd:d4:9e:b7:0a:c9:fa:
                    d0:e5:17:6d:f8:a8:ed:5a:bd:76:5f:ad:c1:16:c2:
                    5c:3e:24:a1:12:ad:6b:12:b4:85:ee:16:d3:75:41:
                    16:5d:29:ca:d6:b8:b9:fa:2b:18:dd:33:3c:e5:a7:
                    0e:e8:a5:60:04:5f:51:f5:76:21:7e:bd:11:e5:28:
                    26:25:9e:c5:e3:5a:fd:0d:f2:b4:db:61:cb:03:4d:
                    5a:06:87:6a:41:24:f4:4d:1f:02:82:92:a4:12:25:
                    34:09:1e:fe:8b:f7:5a:47:75:18:6a:00:29:bc:6f:
                    3c:d2:1a:6a:3c:19:e4:62:54:d5:1a:bf:97:66:38:
                    35:9d:f8:2e:bd:43:67:20:b1:23:83:10:1e:e6:fe:
                    96:e6:37:62:ee:14:1d:0d:47:89:b5:5e:2d:2a:33:
                    1b:4a:c2:d4:31:e1:ae:5f:40:25:d2:f7:08:6b:60:
                    d3:98:4f:94:47:13:55:0d:c9:7b:5b:9d:61:6b:d9:
                    f7:cb:e3:9c:f3:d0:58:06:46:a2:01:90:86:3d:81:
                    a7:06:c0:9a:60:b7:3d:1e:e3:ef:15:a5:ea:bc:6d:
                    7d:13:d5:ca:50:56:43:1b:de:c8:e4:ba:8c:ce:2e:
                    c0:ec:28:e0:6c:71:1e:87:11:2a:57:1d:b7:db:6c:
                    03:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:4A:71:EE:39:54:BB:FD:6B:9C:13:80:48:78:81:E3:4C:24:23:95
            X509v3 Authority Key Identifier:
                keyid:AF:4E:04:5C:CD:60:F5:7F:93:C3:C9:1D:5A:9A:71:00:41:02:D4:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/0/AF4E045CCD60F57F93C3C91D5A9A71004102D44B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF4E045CCD60F57F93C3C91D5A9A71004102D44B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/0/323830343a363938343a383030303a3a2f33332d3333203d3e20323730323735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6984:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         11:9c:56:66:50:69:9b:19:db:db:d6:57:2c:5c:8c:15:00:36:
         0c:fe:14:17:95:59:0d:15:31:5a:a9:6d:d2:33:36:91:a9:23:
         11:8d:5c:57:23:80:82:39:f9:b4:67:64:15:33:7f:e4:0f:58:
         e6:77:df:3f:73:1e:80:df:0c:b9:53:d4:fa:64:12:c7:85:72:
         ce:40:00:9f:48:e7:d5:69:c8:23:b0:ef:cc:2d:97:07:a3:a7:
         ea:78:6e:77:cf:7d:54:cc:e6:6b:61:60:a8:c3:54:d7:10:11:
         f9:0c:00:ce:02:49:9a:ed:25:18:67:35:e7:44:19:99:0c:bf:
         b6:b8:76:d6:29:29:bc:ad:90:c6:c6:6f:1b:3a:ae:6a:1c:2b:
         27:c9:47:e1:8f:cd:3c:28:e3:94:a3:bd:4e:61:2f:d1:f2:bc:
         dc:88:a2:36:88:7d:77:73:b8:15:fd:79:e1:4f:37:22:3a:aa:
         39:53:95:ef:e0:9b:b1:c4:f2:10:c6:6b:17:75:da:89:05:73:
         d7:0d:da:93:6a:0b:81:b0:bb:b0:37:f6:83:52:a7:3f:84:0b:
         ca:ff:26:30:95:79:05:38:03:b0:24:65:80:d1:0b:4d:a2:6d:
         28:96:9a:16:50:e7:18:2f:e9:b4:d4:c1:75:32:d5:5e:41:7c:
         a9:70:65:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:31:37 2025 by rpki-client