Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/0/323830343a336263383a3a2f33322d3332203d3e20323636313730.roa
File:                     323830343a336263383a3a2f33322d3332203d3e20323636313730.roa (raw, json)
Hash identifier:          mUrDeBAFY+AH7A5Aq6PaP99QB1STN+6+IvFhR+CJZkw=
Subject key identifier:   4F:42:79:C1:27:82:77:A8:F4:25:86:76:4F:D7:B0:03:59:A5:21:E3
Certificate issuer:       /CN=BFE42304450EA733F37BD9420D070B3323835C2F
Certificate serial:       3EDD9FDDCA0D143A663CF1F4CEAF80AB70622947
Authority key identifier: BF:E4:23:04:45:0E:A7:33:F3:7B:D9:42:0D:07:0B:33:23:83:5C:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BFE42304450EA733F37BD9420D070B3323835C2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/0/323830343a336263383a3a2f33322d3332203d3e20323636313730.roa
Signing time:             Fri 09 Feb 2024 12:33:43 +0000
ROA not before:           Fri 09 Feb 2024 12:28:43 +0000
ROA not after:            Fri 07 Feb 2025 12:33:43 +0000
asID:                     266170
IP address blocks:        2804:3bc8::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:dd:9f:dd:ca:0d:14:3a:66:3c:f1:f4:ce:af:80:ab:70:62:29:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BFE42304450EA733F37BD9420D070B3323835C2F
        Validity
            Not Before: Feb  9 12:28:43 2024 GMT
            Not After : Feb  7 12:33:43 2025 GMT
        Subject: CN=4F4279C1278277A8F42586764FD7B00359A521E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:43:2c:10:a4:b3:f4:aa:7e:c2:82:dd:9a:08:
                    ba:96:96:46:d4:c1:d3:b5:85:ac:c9:a3:9e:8e:c3:
                    69:6d:ed:5b:71:de:66:b1:09:4c:e0:b1:79:c0:01:
                    2e:26:2e:c8:2f:b5:46:0f:b2:5e:19:4e:64:ab:e5:
                    71:7f:e4:e7:00:d1:b5:bb:36:c1:14:36:f5:cd:1a:
                    9c:b1:ef:52:80:98:17:04:80:8e:ed:30:37:64:82:
                    75:34:81:fa:44:d0:01:c6:1f:ba:14:30:2f:90:fb:
                    74:98:73:8a:8e:94:f2:9d:f1:f7:37:e3:3b:c1:7c:
                    1f:04:af:23:98:0a:53:3b:54:4c:e2:ac:21:11:07:
                    cc:e7:1b:d6:d8:71:1c:6a:de:bc:bc:c7:1f:a1:83:
                    e0:95:9e:07:78:4c:14:1f:82:22:dc:50:ec:10:b0:
                    56:50:9e:92:77:3a:91:c1:b2:07:13:c6:73:dd:4c:
                    44:a5:7f:b9:56:48:83:30:47:87:ff:5f:d7:20:fa:
                    f8:27:ed:64:80:47:a9:89:9c:34:b3:0d:ac:1d:ac:
                    c1:bf:52:7c:a9:29:aa:73:51:37:78:e2:45:c8:5f:
                    28:50:81:b4:fd:88:8c:58:2f:f1:5c:bc:08:9e:2c:
                    2d:e0:cd:7c:27:5d:f8:e0:1d:48:29:a7:a4:44:5f:
                    db:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:42:79:C1:27:82:77:A8:F4:25:86:76:4F:D7:B0:03:59:A5:21:E3
            X509v3 Authority Key Identifier:
                keyid:BF:E4:23:04:45:0E:A7:33:F3:7B:D9:42:0D:07:0B:33:23:83:5C:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/0/BFE42304450EA733F37BD9420D070B3323835C2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BFE42304450EA733F37BD9420D070B3323835C2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/0/323830343a336263383a3a2f33322d3332203d3e20323636313730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3bc8::/32

    Signature Algorithm: sha256WithRSAEncryption
         e3:58:6f:67:1f:19:d2:04:30:fe:d5:c4:83:49:3d:51:01:ea:
         94:03:7f:e5:05:ca:c1:79:e5:95:52:7a:9e:f0:38:6e:5b:b0:
         6c:27:11:08:c5:e0:97:e1:00:ce:86:6b:9e:b6:f5:db:65:4f:
         d1:26:a3:e6:56:93:8f:4c:ab:b9:29:b1:3e:8b:20:87:71:02:
         7a:70:6a:0c:66:81:7e:88:df:cd:6f:b0:a8:b4:99:d8:c8:f5:
         5d:7c:59:ce:ca:16:72:da:ed:4f:05:b0:cf:8c:3e:ee:4a:c8:
         64:a0:59:cf:84:b8:c0:dd:81:df:f9:97:e0:5a:23:13:14:72:
         13:9f:29:78:5c:34:95:52:23:b1:50:8b:e7:85:63:ae:9a:57:
         3b:b1:ac:ab:f1:ca:4c:65:0f:c9:c6:cb:5a:68:b7:8e:9e:10:
         fc:5b:3b:a8:98:3e:9f:37:b3:eb:91:6f:01:93:9e:56:b6:99:
         80:29:6e:b2:8e:04:0d:8c:07:d4:33:80:9a:cf:f8:91:88:83:
         0e:88:77:8a:54:13:f0:29:d2:e8:7a:41:b1:99:86:3c:58:56:
         a7:c9:35:81:ca:4f:c6:d1:3c:e0:77:c1:af:5d:21:78:29:f8:
         ff:99:7d:25:89:3d:85:dc:85:d2:32:48:4a:82:ad:e0:00:8f:
         63:97:bc:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:30:37 2025 by rpki-client