Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a343330303a3a2f34302d3430203d3e20323634333434.roa
File:                     323830343a323637343a343330303a3a2f34302d3430203d3e20323634333434.roa (raw, json)
Hash identifier:          sUwB/5+f+kLZcOVMu2EjBjKUcYAA3IYLcrEyylZ1tXA=
Subject key identifier:   AE:D7:B7:DC:11:A0:4D:AE:86:3B:09:58:0A:85:13:4C:71:98:0F:65
Certificate issuer:       /CN=513CE4A81796F944497410B832C764D2FEF2E43A
Certificate serial:       1C9C5844A07B4AA029DC22DF73E83FFE150A9E7B
Authority key identifier: 51:3C:E4:A8:17:96:F9:44:49:74:10:B8:32:C7:64:D2:FE:F2:E4:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/513CE4A81796F944497410B832C764D2FEF2E43A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a343330303a3a2f34302d3430203d3e20323634333434.roa
Signing time:             Wed 02 Oct 2024 14:58:25 +0000
ROA not before:           Wed 02 Oct 2024 14:53:25 +0000
ROA not after:            Wed 01 Oct 2025 14:58:25 +0000
asID:                     264344
IP address blocks:        2804:2674:4300::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:9c:58:44:a0:7b:4a:a0:29:dc:22:df:73:e8:3f:fe:15:0a:9e:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=513CE4A81796F944497410B832C764D2FEF2E43A
        Validity
            Not Before: Oct  2 14:53:25 2024 GMT
            Not After : Oct  1 14:58:25 2025 GMT
        Subject: CN=AED7B7DC11A04DAE863B09580A85134C71980F65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f8:4e:ea:ac:bf:e6:de:87:f7:f4:a3:3d:fa:
                    3c:97:2e:a7:ae:a8:5c:da:80:14:ba:08:e6:50:4e:
                    80:fa:77:78:a0:32:ae:40:81:31:9f:72:e3:5e:ce:
                    28:8b:0e:aa:07:9d:00:b3:12:46:64:76:d6:d9:b9:
                    57:c9:5c:9b:f0:4f:81:fd:d8:3d:7d:b2:68:ae:5d:
                    b8:c7:eb:fe:ab:66:21:84:88:62:b6:1e:ea:4e:bf:
                    1c:4a:80:10:df:13:74:5b:14:53:f7:2c:de:f7:d2:
                    c9:43:8c:c2:4e:47:b8:69:bf:03:30:05:58:ed:27:
                    99:85:f9:f2:f6:93:2c:29:f8:dc:0b:4a:3f:1e:72:
                    c5:3c:c6:38:b5:20:4d:a8:d2:63:a8:a7:d8:57:35:
                    d4:da:1b:37:86:02:8d:bf:8a:03:59:55:e9:7d:26:
                    75:02:02:62:e0:20:42:91:1e:5e:d5:4c:d0:54:87:
                    23:9b:e5:37:44:fa:d6:7e:65:a5:a4:e1:2c:40:50:
                    a6:71:5e:74:00:48:08:9f:8e:e8:e4:cf:1b:de:49:
                    1a:26:f6:cd:97:84:8b:18:07:09:bb:ec:be:46:d2:
                    5b:68:1d:2c:7a:1a:34:54:68:25:55:1d:41:9a:d1:
                    77:c4:ba:b8:5f:5f:5c:26:1d:b9:38:b0:b0:a9:1d:
                    68:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:D7:B7:DC:11:A0:4D:AE:86:3B:09:58:0A:85:13:4C:71:98:0F:65
            X509v3 Authority Key Identifier:
                keyid:51:3C:E4:A8:17:96:F9:44:49:74:10:B8:32:C7:64:D2:FE:F2:E4:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/513CE4A81796F944497410B832C764D2FEF2E43A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/513CE4A81796F944497410B832C764D2FEF2E43A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a343330303a3a2f34302d3430203d3e20323634333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2674:4300::/40

    Signature Algorithm: sha256WithRSAEncryption
         7b:b6:0f:8a:e0:fe:35:e0:ae:90:8e:86:a3:59:04:68:b5:8d:
         0c:79:93:39:cb:2a:0a:11:e2:8f:23:a5:c2:cb:d0:15:80:0c:
         89:c6:f3:69:bf:4e:ef:08:3d:05:98:a8:4f:5a:0d:ef:b1:86:
         19:4e:4e:21:cc:7e:69:bf:91:0d:06:90:e0:20:0a:c5:c3:7f:
         b5:b6:31:3a:60:22:3e:74:39:3f:ca:e6:ce:4d:57:0e:df:bc:
         66:3d:05:75:97:19:d6:85:76:d5:63:d1:d3:6e:52:da:e2:5a:
         39:60:6f:36:b8:58:cc:b8:bd:32:c8:7b:46:a2:0e:37:30:db:
         a4:bf:59:e0:15:01:a2:17:ed:f6:f2:24:07:ab:5d:d3:91:4a:
         ee:a4:2c:9e:57:75:2d:82:fa:cc:be:80:bb:ff:62:9b:0e:b9:
         19:0f:37:cd:fc:a1:a1:40:38:d8:3d:37:26:58:ee:2f:98:d5:
         45:dc:42:7f:e7:9d:09:4f:39:ae:0f:88:a9:22:e3:17:43:f0:
         e0:cf:c2:87:a3:8f:b1:fe:2b:a2:fc:c3:88:a8:bb:78:66:1a:
         2a:9a:e2:8a:b7:fd:3f:35:74:03:57:e9:ea:e5:e1:56:6c:46:
         45:53:24:6e:fc:22:a8:97:c9:75:4c:cf:d0:04:78:e9:4d:fe:
         0e:0a:81:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:59 2025 by rpki-client