Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BCRUvLvswSKz8s2qTwaoKMt88WS2DRMFWcYxB6iyRuGs/0/323830343a363961633a3a2f33322d3438203d3e20323730323834.roa
File:                     323830343a363961633a3a2f33322d3438203d3e20323730323834.roa (raw, json)
Hash identifier:          7Jcgb0slzDkCrHloI6cejKnjAPTcwhF1XENueGflMPw=
Subject key identifier:   43:77:CB:01:23:37:E2:90:87:95:A7:19:74:3C:04:EB:00:0D:81:31
Certificate issuer:       /CN=63AC10C4AA74CC3238BC10B3EBA01B8FC116DB0E
Certificate serial:       4AF92515F5B337B5DDC70783672F95C8763672CD
Authority key identifier: 63:AC:10:C4:AA:74:CC:32:38:BC:10:B3:EB:A0:1B:8F:C1:16:DB:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/63AC10C4AA74CC3238BC10B3EBA01B8FC116DB0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BCRUvLvswSKz8s2qTwaoKMt88WS2DRMFWcYxB6iyRuGs/0/323830343a363961633a3a2f33322d3438203d3e20323730323834.roa
Signing time:             Sat 25 Jun 2022 01:29:06 +0000
ROA not before:           Sat 25 Jun 2022 01:24:06 +0000
ROA not after:            Sat 24 Jun 2023 01:29:06 +0000
asID:                     270284
IP address blocks:        2804:69ac::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:f9:25:15:f5:b3:37:b5:dd:c7:07:83:67:2f:95:c8:76:36:72:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63AC10C4AA74CC3238BC10B3EBA01B8FC116DB0E
        Validity
            Not Before: Jun 25 01:24:06 2022 GMT
            Not After : Jun 24 01:29:06 2023 GMT
        Subject: CN=4377CB012337E2908795A719743C04EB000D8131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:73:b8:9f:84:85:e1:99:f8:1d:3b:de:dd:69:
                    b9:f2:70:33:af:e3:47:b9:7c:f1:0e:3d:e7:f0:5c:
                    9a:d7:43:16:db:75:8f:19:be:fc:e5:c1:14:74:63:
                    b9:77:78:48:e8:24:6e:2e:e6:86:37:61:f7:7f:f5:
                    b3:34:6e:a2:6b:fe:0f:c2:30:51:0d:f2:45:a8:96:
                    f3:9f:a2:74:3b:37:01:de:d2:08:03:9b:18:fa:7a:
                    ef:8d:9a:aa:fd:f3:d1:ea:2d:87:66:80:48:49:5a:
                    be:53:7a:8e:35:f6:a9:e8:48:cf:8c:a3:6f:15:90:
                    7a:d1:4b:b4:8f:90:b1:2c:e8:f0:c4:15:7f:38:86:
                    32:17:fa:c6:b3:13:8b:90:99:37:b2:32:97:fa:7e:
                    a7:d0:80:23:9b:fb:42:db:01:c6:5c:72:d1:cb:9b:
                    ad:8b:b1:79:24:68:4d:bc:db:ac:a0:03:e1:bf:52:
                    4c:2b:e9:35:d7:4b:67:cc:b3:bf:89:f5:11:a9:b0:
                    cd:72:4a:8c:68:ff:da:61:ab:18:50:7c:c4:28:19:
                    b2:91:38:c9:1d:65:68:4e:23:6a:88:71:bd:1e:2b:
                    25:44:c6:6f:af:21:98:58:10:44:8b:fa:2e:48:90:
                    74:96:43:8d:b0:2a:20:04:82:6b:09:24:30:d9:b2:
                    42:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:77:CB:01:23:37:E2:90:87:95:A7:19:74:3C:04:EB:00:0D:81:31
            X509v3 Authority Key Identifier:
                keyid:63:AC:10:C4:AA:74:CC:32:38:BC:10:B3:EB:A0:1B:8F:C1:16:DB:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BCRUvLvswSKz8s2qTwaoKMt88WS2DRMFWcYxB6iyRuGs/0/63AC10C4AA74CC3238BC10B3EBA01B8FC116DB0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/63AC10C4AA74CC3238BC10B3EBA01B8FC116DB0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BCRUvLvswSKz8s2qTwaoKMt88WS2DRMFWcYxB6iyRuGs/0/323830343a363961633a3a2f33322d3438203d3e20323730323834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:69ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:d4:59:8f:6d:37:aa:f3:9f:e0:d5:ca:fb:c9:dc:86:a3:3c:
         1d:a4:9a:dd:a2:cd:c1:0a:78:c0:1c:4c:8b:45:a3:8a:42:a4:
         91:93:9d:12:59:56:c7:03:a6:3a:84:7b:c9:7b:45:44:8c:cf:
         7c:4a:86:e0:7b:90:82:bc:c0:7c:93:48:e5:a7:c6:a6:bb:cc:
         cf:4b:c8:b5:39:aa:0b:80:8d:7c:1f:df:b0:9e:e0:ea:26:0a:
         f7:8a:0f:88:4f:46:42:3d:93:40:8e:08:a2:dc:e1:07:1f:82:
         8e:86:c4:2b:3e:d0:d8:47:c6:d5:28:a0:6d:7c:72:da:9e:74:
         cf:3d:d2:40:42:b4:b1:3a:aa:e3:ae:e5:9d:84:1c:c6:de:6b:
         20:87:1b:6d:45:31:f6:01:00:54:91:3d:bb:d3:2f:61:30:77:
         16:21:d0:c9:ae:cc:5b:56:49:ec:4b:b7:ef:6d:24:a1:34:4b:
         57:96:cb:3b:3b:85:83:c5:33:81:9c:21:02:5b:3b:f8:3e:b3:
         8d:74:85:87:94:2f:88:6b:cf:c7:00:e0:80:c7:68:9c:7b:ca:
         c1:b0:53:b5:5d:0c:52:2e:d4:c6:90:df:85:e0:99:25:c6:77:
         4c:3c:31:0f:7e:42:01:51:78:61:36:c0:d1:65:b0:b4:9d:78:
         ba:4b:3c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:17:57 2025 by rpki-client