Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BWFkvkfDw6CgpBTYs6jCUGkZvXhxS13evTj1fbgDuYPw/0/323830343a363733633a633530303a3a2f34312d3431203d3e20323639363135.roa
File:                     323830343a363733633a633530303a3a2f34312d3431203d3e20323639363135.roa (raw, json)
Hash identifier:          ZeBg0W6xQr6B+ksv237S209MmRwh6fd79GEzTy+lcwE=
Subject key identifier:   38:48:08:06:46:88:A6:5C:35:DC:CF:53:E0:C6:FB:EE:28:BA:0D:1C
Certificate issuer:       /CN=374FF28757655832E796473386AA89E3873C9674
Certificate serial:       574E22D1B989EF61200AD0C0C5DBB18925B76E0D
Authority key identifier: 37:4F:F2:87:57:65:58:32:E7:96:47:33:86:AA:89:E3:87:3C:96:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/374FF28757655832E796473386AA89E3873C9674.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BWFkvkfDw6CgpBTYs6jCUGkZvXhxS13evTj1fbgDuYPw/0/323830343a363733633a633530303a3a2f34312d3431203d3e20323639363135.roa
Signing time:             Thu 16 Nov 2023 17:22:50 +0000
ROA not before:           Thu 16 Nov 2023 17:17:50 +0000
ROA not after:            Thu 14 Nov 2024 17:22:50 +0000
asID:                     269615
IP address blocks:        2804:673c:c500::/41 maxlen: 41
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:4e:22:d1:b9:89:ef:61:20:0a:d0:c0:c5:db:b1:89:25:b7:6e:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=374FF28757655832E796473386AA89E3873C9674
        Validity
            Not Before: Nov 16 17:17:50 2023 GMT
            Not After : Nov 14 17:22:50 2024 GMT
        Subject: CN=384808064688A65C35DCCF53E0C6FBEE28BA0D1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:9f:63:6c:39:58:5b:de:6c:3f:6d:c8:17:1a:
                    f5:94:cf:ce:bc:c5:2c:40:09:02:ed:db:4e:7b:46:
                    d1:6b:74:ac:dc:43:c8:0a:83:6c:cd:24:ab:51:17:
                    de:fa:b5:7a:b9:24:62:9f:5c:d5:b8:ff:67:db:b9:
                    c6:1d:ac:48:f5:af:7d:32:66:25:df:a3:79:84:07:
                    c6:3f:5b:23:52:eb:f3:c9:af:61:a3:c1:77:78:29:
                    37:1e:0e:e2:d4:41:58:dc:b6:95:0c:a8:46:4f:22:
                    1e:3d:5d:e0:ad:84:d4:fa:70:b7:97:ff:5a:af:43:
                    3a:76:d6:93:f2:4f:3f:1a:e9:64:c9:01:df:00:5b:
                    2d:95:02:2f:40:42:6b:c5:c2:58:ab:26:2a:71:83:
                    5f:7e:da:de:b1:3b:a8:42:16:37:7f:11:60:be:bf:
                    49:58:cc:73:6a:3b:d7:65:e1:9c:28:ab:7e:fd:ba:
                    2c:d0:96:e6:55:a4:8f:08:10:e4:2e:11:de:de:fc:
                    e7:49:85:b4:fe:87:e0:a0:b2:f6:ca:43:01:af:00:
                    b2:eb:73:d3:e9:fb:4a:81:21:ad:63:3f:ef:01:71:
                    81:9b:91:08:91:86:42:eb:91:6f:da:54:1d:37:ae:
                    f9:a9:8a:8c:eb:ce:83:ab:a4:0f:89:0a:ec:66:a3:
                    8c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:48:08:06:46:88:A6:5C:35:DC:CF:53:E0:C6:FB:EE:28:BA:0D:1C
            X509v3 Authority Key Identifier:
                keyid:37:4F:F2:87:57:65:58:32:E7:96:47:33:86:AA:89:E3:87:3C:96:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BWFkvkfDw6CgpBTYs6jCUGkZvXhxS13evTj1fbgDuYPw/0/374FF28757655832E796473386AA89E3873C9674.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/374FF28757655832E796473386AA89E3873C9674.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BWFkvkfDw6CgpBTYs6jCUGkZvXhxS13evTj1fbgDuYPw/0/323830343a363733633a633530303a3a2f34312d3431203d3e20323639363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:673c:c500::/41

    Signature Algorithm: sha256WithRSAEncryption
         4d:af:d2:df:8b:99:04:a2:45:f6:4a:56:a0:58:7d:46:7d:00:
         54:21:b4:98:bf:29:10:e1:05:4d:98:71:aa:96:94:e2:30:6e:
         62:12:c3:c4:a7:78:8b:b9:a8:c2:e1:37:e0:16:00:f6:7a:36:
         cd:5e:a6:c1:f7:a3:6e:7a:3e:5d:2b:4d:a3:e0:84:d5:c1:60:
         41:cc:6b:77:11:38:2c:d3:42:af:4d:a6:c4:1a:e6:28:dc:3b:
         9b:4f:4d:10:2b:57:3e:62:2c:70:37:78:b0:5a:ee:ef:65:52:
         6b:ee:a5:9d:2c:7e:07:27:63:40:1e:72:8b:d3:d6:ee:ef:e6:
         4d:b0:7b:1f:ae:16:7f:e0:07:9f:c9:d6:68:08:f2:20:cb:9d:
         e0:0b:4d:b2:99:33:d0:41:39:18:05:43:3c:96:8e:eb:2b:97:
         65:1b:db:f9:94:96:40:05:7d:81:bb:cd:7c:36:bb:2f:1a:f6:
         00:65:35:2a:5d:aa:e6:81:18:ce:78:50:2a:8c:af:8d:8f:14:
         7b:b2:18:10:50:58:02:5a:4b:e9:39:02:86:05:3b:04:43:5f:
         0a:fe:f1:88:3e:d4:69:d7:8a:3d:9c:5b:b0:07:f3:43:5a:d8:
         f7:d7:f3:1a:8d:88:a5:78:29:ef:9f:97:e1:74:4a:51:a4:30:
         7b:8a:97:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:42:44 2025 by rpki-client