Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B6HUk6omZaKaY3GzLZCLTqPCVLQjwxmsMMKAR1jfnSYZ/0/323830343a353634343a383030303a3a2f33332d3333203d3e20323637393837.roa
File:                     323830343a353634343a383030303a3a2f33332d3333203d3e20323637393837.roa (raw, json)
Hash identifier:          4lTz9p8elylA2EhdH2EdPoaSCLNXQOL67TqRScCfDBo=
Subject key identifier:   3C:CF:72:3F:68:AD:F5:C2:4C:D5:66:C9:B2:3A:49:DF:59:C3:76:92
Certificate issuer:       /CN=13520DAFF407052F1C2BFBEFFD2ED8571B8C2073
Certificate serial:       29DDE38C79A87EE6491A632C5399708BF7FD1CE8
Authority key identifier: 13:52:0D:AF:F4:07:05:2F:1C:2B:FB:EF:FD:2E:D8:57:1B:8C:20:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13520DAFF407052F1C2BFBEFFD2ED8571B8C2073.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B6HUk6omZaKaY3GzLZCLTqPCVLQjwxmsMMKAR1jfnSYZ/0/323830343a353634343a383030303a3a2f33332d3333203d3e20323637393837.roa
Signing time:             Thu 15 Feb 2024 20:47:09 +0000
ROA not before:           Thu 15 Feb 2024 20:42:09 +0000
ROA not after:            Thu 13 Feb 2025 20:47:09 +0000
asID:                     267987
IP address blocks:        2804:5644:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:dd:e3:8c:79:a8:7e:e6:49:1a:63:2c:53:99:70:8b:f7:fd:1c:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13520DAFF407052F1C2BFBEFFD2ED8571B8C2073
        Validity
            Not Before: Feb 15 20:42:09 2024 GMT
            Not After : Feb 13 20:47:09 2025 GMT
        Subject: CN=3CCF723F68ADF5C24CD566C9B23A49DF59C37692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:ea:c3:6f:db:c0:70:85:76:71:80:b8:af:9e:
                    47:4c:38:5d:52:fc:6f:80:86:85:7e:da:44:ff:8a:
                    61:4a:01:61:56:91:8a:c0:da:c2:72:dd:7a:44:b0:
                    d6:74:d8:82:02:81:f2:39:a9:66:7f:c4:60:2f:86:
                    bb:88:2b:26:e8:e8:27:3e:db:19:8b:e0:07:53:de:
                    d8:27:fa:05:56:85:0e:0e:18:b6:ee:54:1b:2b:c4:
                    b9:af:51:9e:da:73:4c:b5:b3:2d:85:ed:66:06:fa:
                    04:87:3e:71:4e:3d:94:0a:31:85:5a:dd:13:62:79:
                    b8:b0:a8:f5:d9:43:98:c5:be:8e:59:ea:33:62:b6:
                    82:4d:62:74:98:18:08:2a:3b:17:53:8d:7d:dd:5f:
                    04:64:f2:63:01:b1:38:83:9f:d2:ae:08:a6:fa:8d:
                    5b:4d:fe:b7:b4:f2:c0:89:b5:06:20:5d:d0:f5:97:
                    7c:db:23:d6:39:df:fb:a1:a9:e2:2b:bd:b2:b0:fe:
                    3d:64:72:1f:17:f9:7d:d7:0c:15:91:2d:7e:6e:af:
                    6c:29:b2:c5:ae:af:5d:17:c2:52:9e:90:b9:1e:ea:
                    19:18:e0:85:3a:44:45:50:ef:40:40:d7:98:c8:86:
                    43:e6:c3:27:cf:87:b5:73:33:6b:be:9b:fb:4b:6b:
                    9f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:CF:72:3F:68:AD:F5:C2:4C:D5:66:C9:B2:3A:49:DF:59:C3:76:92
            X509v3 Authority Key Identifier:
                keyid:13:52:0D:AF:F4:07:05:2F:1C:2B:FB:EF:FD:2E:D8:57:1B:8C:20:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B6HUk6omZaKaY3GzLZCLTqPCVLQjwxmsMMKAR1jfnSYZ/0/13520DAFF407052F1C2BFBEFFD2ED8571B8C2073.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13520DAFF407052F1C2BFBEFFD2ED8571B8C2073.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B6HUk6omZaKaY3GzLZCLTqPCVLQjwxmsMMKAR1jfnSYZ/0/323830343a353634343a383030303a3a2f33332d3333203d3e20323637393837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5644:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         3d:f5:3a:31:a5:3c:de:c7:f1:0a:68:ed:dc:0f:ca:fc:31:45:
         7d:74:ef:61:db:59:87:c3:91:6c:44:cd:3a:81:d9:9a:ad:4e:
         eb:a6:62:52:95:46:75:01:90:dd:4c:f3:ac:5e:bc:92:a8:53:
         37:e9:38:46:50:7c:39:c3:11:14:a8:11:ad:01:b9:ff:4a:5d:
         14:d1:80:b5:68:4b:f8:95:64:7c:81:01:84:14:5b:7e:63:38:
         32:b4:c8:d5:dc:14:d1:c8:22:0a:92:7c:ef:a9:f3:d5:d2:c5:
         5e:a9:61:3f:19:28:a2:e2:56:4d:e8:f7:77:47:57:3e:47:e1:
         0f:bd:f7:75:18:bb:49:fd:c3:65:ee:60:03:46:6e:c6:86:10:
         8d:5a:25:4f:62:74:30:05:77:9b:c7:28:cd:55:f5:05:3c:83:
         d7:e7:4f:99:65:90:60:01:dd:68:25:d9:e5:8e:cc:3a:1e:d6:
         19:b8:f9:e4:14:b6:29:85:e3:7e:89:4a:ac:4c:5d:c8:fb:af:
         db:c8:1b:7c:47:3c:71:c2:db:03:11:b0:0f:98:6a:59:7d:13:
         42:31:64:d4:2f:af:f8:c5:ba:9b:54:55:72:e2:de:fb:0d:6a:
         d7:96:c7:29:59:b4:67:87:f7:8e:5b:f2:ad:48:8a:84:0c:a4:
         e4:df:86:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:23:11 2025 by rpki-client