Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BSdyo9MmBpqhibd585BgzLy1s4fCWL27Q3PdjBLgmAu1/0/323830343a363538633a3a2f33322d3332203d3e20323639343939.roa
File:                     323830343a363538633a3a2f33322d3332203d3e20323639343939.roa (raw, json)
Hash identifier:          KJrP7mVBMa0bHJkK4tgB6GAMCtnFHBlTcFJ1avxhN6Q=
Subject key identifier:   71:A8:75:CA:CE:F8:F7:01:48:60:C3:4E:9E:F2:0E:EA:DF:57:69:F1
Certificate issuer:       /CN=A0086FD21CF6CD26003723997398968937DC3452
Certificate serial:       5157F8453078F6104302D8294F192130D9828156
Authority key identifier: A0:08:6F:D2:1C:F6:CD:26:00:37:23:99:73:98:96:89:37:DC:34:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0086FD21CF6CD26003723997398968937DC3452.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSdyo9MmBpqhibd585BgzLy1s4fCWL27Q3PdjBLgmAu1/0/323830343a363538633a3a2f33322d3332203d3e20323639343939.roa
Signing time:             Thu 05 Sep 2024 18:20:18 +0000
ROA not before:           Thu 05 Sep 2024 18:15:18 +0000
ROA not after:            Thu 04 Sep 2025 18:20:18 +0000
asID:                     269499
IP address blocks:        2804:658c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:57:f8:45:30:78:f6:10:43:02:d8:29:4f:19:21:30:d9:82:81:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0086FD21CF6CD26003723997398968937DC3452
        Validity
            Not Before: Sep  5 18:15:18 2024 GMT
            Not After : Sep  4 18:20:18 2025 GMT
        Subject: CN=71A875CACEF8F7014860C34E9EF20EEADF5769F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e3:19:7f:44:e7:c5:b8:0b:0c:57:46:4d:21:
                    30:5b:a6:ce:c7:40:6c:91:f0:20:5b:cb:79:72:39:
                    a1:d6:a2:c5:3f:db:00:3d:54:c5:f3:48:c9:5e:7c:
                    04:7e:6b:b9:a1:1c:6f:96:de:01:d3:3b:54:b7:4d:
                    45:aa:5b:83:4c:e3:32:e7:15:65:10:4e:ed:c3:6f:
                    7c:cc:c2:97:ef:62:5c:48:4b:ad:1d:d4:3a:98:b2:
                    d4:e3:4f:60:9e:75:a8:1a:52:f4:78:57:25:35:ab:
                    a3:ce:a5:1e:c5:aa:d8:4f:14:91:10:5b:b0:aa:ab:
                    c8:a2:a6:d4:7d:83:ca:2c:31:44:00:c4:d7:9e:63:
                    3d:2b:24:5b:f7:aa:dd:a1:64:10:dc:32:20:0f:51:
                    86:a8:ee:0d:b9:f2:ef:02:dd:df:32:23:30:50:34:
                    96:15:ee:12:35:83:1b:42:86:38:1d:7e:3d:ca:f2:
                    a9:92:80:56:92:2f:85:42:d2:39:b0:13:e6:40:92:
                    ea:0c:27:91:f1:fd:4d:a8:74:c2:00:dc:04:81:7f:
                    d2:ae:64:84:30:c5:16:50:10:b3:87:b5:c9:5e:4a:
                    04:2a:f2:8b:d4:f7:ff:1f:9b:b2:ab:ca:a7:0f:12:
                    03:c5:d5:e6:d4:eb:af:37:44:37:16:de:54:95:8e:
                    53:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:A8:75:CA:CE:F8:F7:01:48:60:C3:4E:9E:F2:0E:EA:DF:57:69:F1
            X509v3 Authority Key Identifier:
                keyid:A0:08:6F:D2:1C:F6:CD:26:00:37:23:99:73:98:96:89:37:DC:34:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSdyo9MmBpqhibd585BgzLy1s4fCWL27Q3PdjBLgmAu1/0/A0086FD21CF6CD26003723997398968937DC3452.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0086FD21CF6CD26003723997398968937DC3452.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSdyo9MmBpqhibd585BgzLy1s4fCWL27Q3PdjBLgmAu1/0/323830343a363538633a3a2f33322d3332203d3e20323639343939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:658c::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:49:2c:73:71:3f:f3:ce:b6:3a:0d:3e:b6:8b:11:3c:a6:03:
         50:25:f4:ad:fd:27:bf:16:32:f0:21:b9:17:25:bb:0d:91:f6:
         1b:a3:c2:7a:8c:f1:47:b6:f2:15:f9:1c:ab:25:9d:aa:10:6d:
         61:8d:ef:40:cc:c6:8b:34:ec:01:d2:aa:cc:ef:55:a6:be:c3:
         71:fc:d9:a5:c6:8f:38:f5:d8:36:92:b1:f1:82:a3:5d:fe:3e:
         56:dc:11:e8:77:61:68:d9:62:fe:a8:52:e3:10:1c:04:06:51:
         49:50:21:13:ca:24:ee:d8:fc:33:ca:d4:9c:e6:81:1b:ed:6f:
         61:e6:5b:68:13:cb:41:5b:a5:46:b9:9a:a8:d9:c5:08:14:4c:
         36:b8:54:f0:bb:46:6b:e9:84:b4:56:f5:e2:81:7c:89:7c:d4:
         8b:07:94:31:fd:a0:c4:e1:38:0d:37:42:40:97:19:c1:c3:f9:
         ab:e5:e5:7b:cb:a4:3c:c4:46:c6:38:aa:60:ed:72:73:f3:73:
         3f:23:58:e5:ff:30:f4:5b:08:43:7f:9e:e0:d4:2c:bf:0e:d9:
         30:81:07:13:01:85:ca:68:c3:53:58:d2:37:20:09:66:e2:38:
         44:e9:de:e4:6b:c4:56:12:82:2d:ca:82:92:23:e1:5c:17:58:
         e1:e2:80:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:34:49 2025 by rpki-client