Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRccY9j3NLHySbZfi1EtDmVjG5a2rPKEUaPzyNxthMtF/0/323830343a343635383a3a2f33322d3336203d3e20323636393834.roa
File:                     323830343a343635383a3a2f33322d3336203d3e20323636393834.roa (raw, json)
Hash identifier:          pLVUll+LAOgMawcMaHts5BuwZYF+WjtTbl6yzlaLaKY=
Subject key identifier:   4A:36:C0:BD:0C:62:83:57:53:42:34:45:DA:C3:EA:80:44:FB:C1:64
Certificate issuer:       /CN=9F9A86935CAD204DD7AB759116AA64E71A38753D
Certificate serial:       3CD90D226C015181AC2FA843A9C3A0A1E7B0616A
Authority key identifier: 9F:9A:86:93:5C:AD:20:4D:D7:AB:75:91:16:AA:64:E7:1A:38:75:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F9A86935CAD204DD7AB759116AA64E71A38753D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRccY9j3NLHySbZfi1EtDmVjG5a2rPKEUaPzyNxthMtF/0/323830343a343635383a3a2f33322d3336203d3e20323636393834.roa
Signing time:             Wed 04 Jan 2023 13:52:31 +0000
ROA not before:           Wed 04 Jan 2023 13:47:31 +0000
ROA not after:            Wed 03 Jan 2024 13:52:31 +0000
asID:                     266984
IP address blocks:        2804:4658::/32 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:d9:0d:22:6c:01:51:81:ac:2f:a8:43:a9:c3:a0:a1:e7:b0:61:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F9A86935CAD204DD7AB759116AA64E71A38753D
        Validity
            Not Before: Jan  4 13:47:31 2023 GMT
            Not After : Jan  3 13:52:31 2024 GMT
        Subject: CN=4A36C0BD0C62835753423445DAC3EA8044FBC164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:3d:02:f1:01:58:26:e9:1b:25:e5:e7:aa:53:
                    8f:b2:26:82:fb:fc:3f:c6:21:3d:8e:66:0d:57:79:
                    1a:ba:00:60:27:5e:56:a4:ec:5a:33:35:36:ee:f3:
                    94:45:67:6e:c3:96:26:7a:97:f0:db:32:6b:41:66:
                    25:cc:c4:67:5b:77:78:d8:5d:b3:53:4f:d7:34:67:
                    4c:17:a7:6d:1a:b2:5c:07:67:8f:8e:47:c0:ff:47:
                    85:e8:1d:f6:91:0f:04:89:36:8b:2a:d4:5a:52:1f:
                    94:2f:72:29:3d:28:ef:45:76:1c:80:51:af:2e:69:
                    18:69:83:1f:bc:5e:7f:c1:d6:7c:e5:3d:42:fb:63:
                    3d:23:98:c7:90:0b:37:79:3f:89:38:9d:56:c7:d6:
                    93:e5:3f:fc:eb:f4:55:1f:d2:6e:df:c5:e8:e8:49:
                    de:38:77:67:b5:ba:e7:c9:bf:02:6c:68:7e:5c:6a:
                    a9:92:9f:10:c5:3b:36:29:9f:ed:81:ff:4a:7b:a1:
                    3f:07:11:88:c0:00:0d:fc:eb:1c:f6:3d:e0:87:86:
                    21:98:0d:c2:46:a3:c2:93:a2:7e:b8:1e:99:ea:92:
                    64:ce:76:36:d1:ae:b9:b1:ed:04:01:b8:1c:f1:1c:
                    81:32:f5:27:15:d3:4c:a6:60:b3:3d:c9:30:f4:f0:
                    02:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:36:C0:BD:0C:62:83:57:53:42:34:45:DA:C3:EA:80:44:FB:C1:64
            X509v3 Authority Key Identifier:
                keyid:9F:9A:86:93:5C:AD:20:4D:D7:AB:75:91:16:AA:64:E7:1A:38:75:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRccY9j3NLHySbZfi1EtDmVjG5a2rPKEUaPzyNxthMtF/0/9F9A86935CAD204DD7AB759116AA64E71A38753D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F9A86935CAD204DD7AB759116AA64E71A38753D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRccY9j3NLHySbZfi1EtDmVjG5a2rPKEUaPzyNxthMtF/0/323830343a343635383a3a2f33322d3336203d3e20323636393834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4658::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:1c:23:7d:07:06:8d:b5:a8:a8:3a:ee:ac:2b:d1:94:6b:60:
         d2:51:c4:0e:c3:df:8f:49:28:fd:74:70:93:b8:b6:4c:79:af:
         05:ca:4f:c3:96:2e:2b:bd:b9:37:f9:36:48:66:2a:20:18:c9:
         7e:6e:b4:10:69:24:40:d3:98:d7:5e:39:b0:8e:55:42:6e:f9:
         b3:25:cd:cb:40:83:c7:61:87:ef:77:f9:ec:f6:1f:53:7f:48:
         e7:6d:0d:c3:44:30:d0:b9:96:68:41:43:e0:85:a1:0a:0b:a4:
         06:5c:32:f9:5c:ac:44:7e:95:1b:71:37:29:56:2d:cc:15:bc:
         71:41:d8:06:be:27:59:d6:05:cc:9f:79:85:f9:86:7c:4f:af:
         04:29:94:65:37:ef:66:b1:c1:a8:e1:41:94:45:1c:2b:8a:42:
         c5:99:c6:e3:f5:b0:10:c3:f6:45:aa:3e:c1:b1:16:15:06:a9:
         f4:76:dd:c9:02:27:87:d9:94:fd:d5:c3:72:41:9f:08:78:7f:
         16:2a:7b:03:74:8f:50:6c:9a:c0:86:2b:4b:2a:40:70:e1:fb:
         f6:3c:c0:ac:bb:fb:8e:e9:a2:3c:af:1e:43:24:5f:8c:4e:cf:
         14:9d:ba:f7:60:50:5f:94:1e:45:36:8d:24:17:62:ec:0c:61:
         32:21:93:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 06:37:44 2025 by rpki-client