Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/0/323830343a373365633a383030303a3a2f33342d3334203d3e20323730393436.roa
File:                     323830343a373365633a383030303a3a2f33342d3334203d3e20323730393436.roa (raw, json)
Hash identifier:          edpYLDMO9QTyxV8p9arU4XJvGCNtXZj6x6QHxCXLr6c=
Subject key identifier:   6F:6A:82:52:48:54:A3:80:B2:A1:89:70:CD:28:10:73:A0:6C:59:51
Certificate issuer:       /CN=87C98FAEA3D481ABF326707163A8DC73294B8D71
Certificate serial:       58C1729E5E13626643A3651EBBE1B0340CF4B414
Authority key identifier: 87:C9:8F:AE:A3:D4:81:AB:F3:26:70:71:63:A8:DC:73:29:4B:8D:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87C98FAEA3D481ABF326707163A8DC73294B8D71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/0/323830343a373365633a383030303a3a2f33342d3334203d3e20323730393436.roa
Signing time:             Sat 17 Feb 2024 05:23:53 +0000
ROA not before:           Sat 17 Feb 2024 05:18:53 +0000
ROA not after:            Sat 15 Feb 2025 05:23:53 +0000
asID:                     270946
IP address blocks:        2804:73ec:8000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:c1:72:9e:5e:13:62:66:43:a3:65:1e:bb:e1:b0:34:0c:f4:b4:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87C98FAEA3D481ABF326707163A8DC73294B8D71
        Validity
            Not Before: Feb 17 05:18:53 2024 GMT
            Not After : Feb 15 05:23:53 2025 GMT
        Subject: CN=6F6A82524854A380B2A18970CD281073A06C5951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:03:c2:95:84:d9:ca:fd:18:2e:81:16:84:db:
                    7c:ed:a3:49:8b:2f:0c:b4:23:d3:38:b5:f0:8e:84:
                    64:59:18:01:d8:85:c7:41:58:87:9a:8d:e0:fb:02:
                    81:46:c5:e7:84:f8:dd:01:a7:18:e4:23:5b:02:19:
                    66:48:1e:29:9c:e7:20:21:82:a9:29:30:33:aa:da:
                    0f:8d:28:61:df:d4:8a:87:4d:37:62:d6:8f:c8:40:
                    ab:80:aa:d9:8f:ed:e6:8f:0c:2f:4a:01:50:3c:a3:
                    2c:5a:21:b0:c1:9e:98:3f:63:59:10:85:ef:26:f2:
                    3c:1e:1d:79:7f:69:34:d4:85:45:86:67:63:b4:7b:
                    9a:ed:26:53:81:e7:fb:55:a5:58:ed:0e:26:50:27:
                    dd:ae:ed:1c:d4:88:42:a0:51:96:e0:6b:3a:e9:f6:
                    13:51:c1:5b:be:05:b1:8c:47:1e:bd:e5:f7:ca:17:
                    37:15:20:d8:21:d5:19:04:5b:46:0f:cf:95:09:f0:
                    bd:96:84:b2:d7:83:4d:bf:69:7b:21:b3:37:fc:c7:
                    4d:22:27:50:10:00:ad:04:f8:2c:3e:ca:45:1a:a1:
                    82:c4:6c:41:19:46:d7:d1:23:8b:02:e6:97:20:58:
                    5e:2e:16:ae:c0:46:f2:c9:34:3c:13:70:96:23:55:
                    dd:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:6A:82:52:48:54:A3:80:B2:A1:89:70:CD:28:10:73:A0:6C:59:51
            X509v3 Authority Key Identifier:
                keyid:87:C9:8F:AE:A3:D4:81:AB:F3:26:70:71:63:A8:DC:73:29:4B:8D:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/0/87C98FAEA3D481ABF326707163A8DC73294B8D71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87C98FAEA3D481ABF326707163A8DC73294B8D71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/0/323830343a373365633a383030303a3a2f33342d3334203d3e20323730393436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:73ec:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         c0:1f:05:c4:10:b4:b2:3c:f6:39:b8:7e:2a:26:25:24:a1:73:
         6d:15:3d:6b:7a:81:bb:e8:fc:46:47:b3:16:1d:e3:c9:dc:8b:
         5b:69:ed:2a:d4:20:45:cf:21:0f:2b:91:7e:02:41:8b:76:fd:
         a4:91:89:61:ed:04:79:b2:d3:b1:10:03:3d:b1:fa:2d:8b:ee:
         79:53:0a:2d:c5:ec:68:e9:67:04:aa:c4:95:a7:a1:e3:83:62:
         bd:b3:9d:5e:d8:2d:2a:2c:29:d8:8e:79:dc:d4:01:63:f7:1d:
         a8:1e:5b:6e:96:da:72:0b:0d:f6:d1:b7:87:59:52:12:ad:20:
         0a:d8:56:c8:26:87:de:c5:45:0d:dc:70:ab:f4:30:29:c2:02:
         5b:24:76:3f:11:87:45:62:df:75:d1:68:72:79:51:9b:6b:cb:
         ec:f5:41:e8:bb:12:5c:04:40:44:72:d6:24:d6:e0:bf:c1:45:
         a3:63:41:ed:22:94:ea:15:c5:96:20:51:de:98:8c:58:b3:fa:
         84:67:07:b5:5e:a0:81:57:42:4c:70:e6:99:b9:7e:2c:c4:24:
         46:b8:4b:74:97:2c:9e:59:8b:3d:99:4c:4b:e4:9b:37:89:64:
         3e:54:3b:96:fc:92:00:ea:73:5f:df:3b:c9:45:d2:67:4b:75:
         14:93:f6:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:33:04 2025 by rpki-client