Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B86LBjoWhVBVj7kLtGqrEKBRAGpeq8QiogrGr1KGGEFr/0/323830343a343932633a3a2f33322d3430203d3e20323637313638.roa
File:                     323830343a343932633a3a2f33322d3430203d3e20323637313638.roa (raw, json)
Hash identifier:          gB9fHAkgU5lUfqv8oVuMqXdb8pPCuix6zX7VrB7QkTE=
Subject key identifier:   64:0C:31:7C:7C:05:FF:6B:A9:17:BB:ED:7F:D8:1A:FD:3F:73:FD:80
Certificate issuer:       /CN=C48F9D371DFEA1B18BDE20A84C319A09510281E0
Certificate serial:       518BAA5264128FE81D3C01AEBDB6AC0C0DBBA7BB
Authority key identifier: C4:8F:9D:37:1D:FE:A1:B1:8B:DE:20:A8:4C:31:9A:09:51:02:81:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C48F9D371DFEA1B18BDE20A84C319A09510281E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B86LBjoWhVBVj7kLtGqrEKBRAGpeq8QiogrGr1KGGEFr/0/323830343a343932633a3a2f33322d3430203d3e20323637313638.roa
Signing time:             Wed 17 May 2023 14:07:18 +0000
ROA not before:           Wed 17 May 2023 14:02:18 +0000
ROA not after:            Wed 15 May 2024 14:07:18 +0000
asID:                     267168
IP address blocks:        2804:492c::/32 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:8b:aa:52:64:12:8f:e8:1d:3c:01:ae:bd:b6:ac:0c:0d:bb:a7:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C48F9D371DFEA1B18BDE20A84C319A09510281E0
        Validity
            Not Before: May 17 14:02:18 2023 GMT
            Not After : May 15 14:07:18 2024 GMT
        Subject: CN=640C317C7C05FF6BA917BBED7FD81AFD3F73FD80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a5:2d:8f:bd:14:5d:2e:a2:a0:15:b2:68:65:
                    1c:c7:f6:56:3d:95:87:e0:f9:52:8b:f3:87:ab:ab:
                    c1:06:c6:b5:82:a8:61:e4:21:8d:d4:0b:78:10:26:
                    dc:c7:b9:25:91:d7:ce:6e:25:50:5c:72:ff:1c:49:
                    13:56:67:11:b3:33:f9:4a:cd:03:9e:9b:56:d8:42:
                    ac:f0:f0:d8:06:7d:b8:18:9f:26:ca:43:ea:e1:f3:
                    3d:63:99:1f:b9:5b:10:0f:c5:a6:7f:11:fe:6b:b4:
                    24:4a:a4:68:89:67:28:78:cd:7e:ef:93:5e:2c:28:
                    3e:64:24:8d:2c:59:aa:06:c8:70:07:d4:7d:20:be:
                    65:e5:e1:39:e8:0a:5c:83:55:42:c9:e6:74:5d:a6:
                    b8:10:e5:41:71:1e:d5:e6:e6:32:f4:a5:5c:40:43:
                    f8:01:a6:cc:7b:14:d4:a0:f5:72:9c:2c:3b:5b:8c:
                    a6:ba:87:3f:90:61:0e:4d:e9:00:83:62:69:bd:82:
                    bd:4f:f4:3d:58:02:0c:55:68:5b:c7:84:d0:c3:0b:
                    67:40:fb:3c:f7:9d:48:09:bc:0c:dd:1c:94:e0:a4:
                    2f:e6:28:ad:ad:34:0d:54:de:fa:e3:93:70:86:b9:
                    29:de:2a:dc:67:df:f9:4d:03:02:da:bf:98:e1:d3:
                    f0:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:0C:31:7C:7C:05:FF:6B:A9:17:BB:ED:7F:D8:1A:FD:3F:73:FD:80
            X509v3 Authority Key Identifier:
                keyid:C4:8F:9D:37:1D:FE:A1:B1:8B:DE:20:A8:4C:31:9A:09:51:02:81:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B86LBjoWhVBVj7kLtGqrEKBRAGpeq8QiogrGr1KGGEFr/0/C48F9D371DFEA1B18BDE20A84C319A09510281E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C48F9D371DFEA1B18BDE20A84C319A09510281E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B86LBjoWhVBVj7kLtGqrEKBRAGpeq8QiogrGr1KGGEFr/0/323830343a343932633a3a2f33322d3430203d3e20323637313638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:492c::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:cd:68:93:4d:25:59:0b:61:e9:3f:f4:84:8c:ee:17:9d:cc:
         77:8b:f1:ea:52:c6:01:cc:f6:7d:4c:7e:20:a4:e0:ab:0c:8e:
         9d:a2:22:c5:7f:a0:e1:f2:bd:fd:d2:f3:5e:9e:02:55:51:eb:
         80:d6:d3:30:25:bf:62:25:1e:ed:86:7b:02:f7:38:1a:ce:a2:
         b2:49:92:7b:5d:1e:b4:85:e6:e7:34:27:6e:3c:76:10:b1:e1:
         6f:99:ab:f0:c7:3d:19:98:6b:5c:af:ef:8d:91:c7:dd:ea:91:
         86:88:21:88:dd:80:3e:92:87:a4:8e:dd:c6:67:a4:cd:11:55:
         a7:99:21:92:c8:50:68:83:d3:83:ee:a8:f8:9e:39:5e:28:ff:
         c6:d0:65:63:cb:47:e1:bb:5c:2e:59:bb:63:bc:87:28:f1:00:
         2c:3a:fe:a1:49:47:1a:18:6c:7b:fc:2f:82:12:87:10:23:6d:
         9c:91:10:7a:d6:b7:7f:df:ba:e1:30:c7:03:cd:44:45:99:d4:
         4d:36:cb:30:df:a8:eb:e9:84:cc:9d:30:f7:eb:74:83:f4:6f:
         f0:fb:08:b7:9c:1b:ad:aa:28:f4:91:53:61:f6:2d:2a:8d:5f:
         86:81:c6:ca:07:f2:b3:98:ae:0d:dd:eb:d6:2a:3b:b0:6d:6e:
         14:b9:52:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:58:25 2025 by rpki-client