Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BfHJA72CBUa7YWcZ1sPGbJgQmtPDRvxFJ5eXDwW7i9K5/0/323830343a343265343a3a2f33322d3332203d3e20323637353335.roa
File:                     323830343a343265343a3a2f33322d3332203d3e20323637353335.roa (raw, json)
Hash identifier:          sA97h7d3bCHLT/IZo7TBtH9vYawTJyip2ptvnw3xEjY=
Subject key identifier:   10:4A:11:52:7E:FB:C1:F2:5A:32:AC:F7:45:EB:00:89:96:E8:F9:22
Certificate issuer:       /CN=6C02C0A7B20F757D7F8FBC02D2841706802CF35B
Certificate serial:       295BBFB39014B2F1C2498D8F69458502978F37C0
Authority key identifier: 6C:02:C0:A7:B2:0F:75:7D:7F:8F:BC:02:D2:84:17:06:80:2C:F3:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6C02C0A7B20F757D7F8FBC02D2841706802CF35B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BfHJA72CBUa7YWcZ1sPGbJgQmtPDRvxFJ5eXDwW7i9K5/0/323830343a343265343a3a2f33322d3332203d3e20323637353335.roa
Signing time:             Thu 06 Apr 2023 22:17:19 +0000
ROA not before:           Thu 06 Apr 2023 22:12:19 +0000
ROA not after:            Thu 04 Apr 2024 22:17:19 +0000
asID:                     267535
IP address blocks:        2804:42e4::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:5b:bf:b3:90:14:b2:f1:c2:49:8d:8f:69:45:85:02:97:8f:37:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C02C0A7B20F757D7F8FBC02D2841706802CF35B
        Validity
            Not Before: Apr  6 22:12:19 2023 GMT
            Not After : Apr  4 22:17:19 2024 GMT
        Subject: CN=104A11527EFBC1F25A32ACF745EB008996E8F922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:60:0f:74:9d:77:69:72:34:63:aa:6b:e8:ef:
                    b1:38:3e:50:17:f3:10:ee:94:18:90:05:ab:8e:89:
                    15:e8:ea:54:f7:fc:f8:7a:60:98:63:a3:a6:04:5b:
                    f9:dc:41:6c:15:48:97:26:03:8a:73:94:e7:d2:59:
                    7d:3e:fc:e6:0b:39:4c:43:66:d7:c2:d2:fa:a9:53:
                    19:3b:cb:16:6f:c4:51:78:23:f2:a7:1a:a1:1a:46:
                    a2:a1:9b:a4:24:4e:c6:6c:a9:3e:60:ac:81:95:12:
                    c0:90:71:db:b9:da:19:e9:e3:9b:d4:f7:22:6d:81:
                    07:1c:42:26:53:be:4f:f4:66:e8:6c:cf:91:92:f7:
                    8d:bd:b4:c9:52:46:dc:30:2e:7a:51:12:21:44:3c:
                    77:5a:2b:4e:31:22:1e:3f:d2:8a:b8:06:93:c6:48:
                    c5:0e:18:24:6e:cd:35:83:f6:ff:20:4a:05:d2:12:
                    a6:ac:b7:e0:76:3f:d8:9d:10:88:85:96:1b:ec:b8:
                    11:3f:79:c9:f6:fe:bd:75:5b:a7:b4:31:2a:2d:23:
                    b4:54:80:3d:0d:76:15:1c:f6:83:5e:58:0b:41:b7:
                    4c:d4:03:df:d4:52:17:93:a2:d6:77:6d:40:4a:25:
                    49:f8:c7:37:85:2f:d0:16:c9:ae:17:cd:bd:69:00:
                    ab:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:4A:11:52:7E:FB:C1:F2:5A:32:AC:F7:45:EB:00:89:96:E8:F9:22
            X509v3 Authority Key Identifier:
                keyid:6C:02:C0:A7:B2:0F:75:7D:7F:8F:BC:02:D2:84:17:06:80:2C:F3:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BfHJA72CBUa7YWcZ1sPGbJgQmtPDRvxFJ5eXDwW7i9K5/0/6C02C0A7B20F757D7F8FBC02D2841706802CF35B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6C02C0A7B20F757D7F8FBC02D2841706802CF35B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BfHJA72CBUa7YWcZ1sPGbJgQmtPDRvxFJ5eXDwW7i9K5/0/323830343a343265343a3a2f33322d3332203d3e20323637353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:42e4::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:89:e5:32:77:e9:c2:7f:eb:fd:5f:96:5c:4a:b8:4a:56:e0:
         a4:db:84:20:62:ef:bd:6b:a7:2b:8b:45:90:f2:a5:96:ca:6f:
         92:ec:0c:ca:32:10:b1:ff:53:1e:bd:57:23:c4:e2:94:22:60:
         6a:17:dc:ff:f8:95:28:49:fe:57:f3:4d:72:e8:2e:9b:9a:de:
         fa:3f:19:bd:70:ae:ff:ad:e1:8b:5f:5b:8b:33:b4:4f:89:b0:
         c1:2a:10:91:19:dd:03:23:b9:6f:f4:59:d0:4f:d5:bf:b2:56:
         5a:b1:cc:f6:1d:cd:49:ca:16:c0:ba:3e:6c:d8:13:21:13:f0:
         89:ad:c5:0b:13:0b:5f:e1:e5:df:34:d0:b0:0f:2d:ea:66:91:
         f7:c1:59:02:01:ef:ab:86:03:02:24:89:fb:79:40:12:d4:a1:
         91:14:09:c9:35:70:46:a6:da:4d:c0:d2:65:17:50:0e:52:2c:
         30:7f:51:7c:5b:d0:75:c9:30:1c:d7:19:31:b3:8f:7e:1d:ce:
         aa:4d:83:3d:49:af:92:ea:06:19:90:ce:68:c5:1d:dc:21:b7:
         45:59:63:88:e4:93:32:b5:17:10:3b:01:ee:92:44:4c:59:9a:
         79:2c:67:53:35:ba:ea:94:33:b3:ca:48:c4:97:44:b6:2c:be:
         6f:59:47:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 03:46:43 2025 by rpki-client