Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/0/323830343a373365633a3a2f33332d3333203d3e20323730393436.roa
File:                     323830343a373365633a3a2f33332d3333203d3e20323730393436.roa (raw, json)
Hash identifier:          CQPCG9EoguXmMtGQHaH78IM3XYkS75kDjeFal+jd/6g=
Subject key identifier:   4A:8C:FB:D3:0E:27:B9:D1:9E:94:68:88:E7:1B:49:71:C2:96:44:FB
Certificate issuer:       /CN=87C98FAEA3D481ABF326707163A8DC73294B8D71
Certificate serial:       3E9BD9DBC56ED44D19AE2F4C591A90E37207101D
Authority key identifier: 87:C9:8F:AE:A3:D4:81:AB:F3:26:70:71:63:A8:DC:73:29:4B:8D:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87C98FAEA3D481ABF326707163A8DC73294B8D71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/0/323830343a373365633a3a2f33332d3333203d3e20323730393436.roa
Signing time:             Sat 17 Feb 2024 05:23:53 +0000
ROA not before:           Sat 17 Feb 2024 05:18:53 +0000
ROA not after:            Sat 15 Feb 2025 05:23:53 +0000
asID:                     270946
IP address blocks:        2804:73ec::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:9b:d9:db:c5:6e:d4:4d:19:ae:2f:4c:59:1a:90:e3:72:07:10:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87C98FAEA3D481ABF326707163A8DC73294B8D71
        Validity
            Not Before: Feb 17 05:18:53 2024 GMT
            Not After : Feb 15 05:23:53 2025 GMT
        Subject: CN=4A8CFBD30E27B9D19E946888E71B4971C29644FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:34:1e:da:e7:7f:48:5b:b0:39:fa:f3:f7:18:
                    5a:a8:e6:c9:2c:51:8f:f8:be:18:56:b1:3f:81:40:
                    7b:43:12:de:44:1c:d4:7e:1f:8e:57:c8:bb:56:b1:
                    da:41:17:e2:91:c0:3e:e5:a2:4f:37:40:26:bc:6e:
                    4a:52:82:8d:52:d1:bb:75:2f:8b:9c:30:2c:ae:c8:
                    de:12:ed:86:f1:44:9d:c8:3a:a3:74:9f:a2:24:00:
                    01:57:08:77:55:13:d7:72:08:d8:3f:6f:b8:4a:70:
                    2a:1f:51:66:9c:3b:2d:8e:52:3b:d5:2d:e6:8c:ed:
                    8d:1c:8d:c6:2e:61:16:f2:84:f0:df:f4:45:6e:fd:
                    29:74:cd:6b:6d:ef:19:9f:0c:3b:dd:65:93:9d:99:
                    f5:d7:ed:5f:fd:81:e2:5a:f1:03:9b:36:65:81:ec:
                    6c:4d:b4:36:a0:35:cd:2c:68:2b:29:ef:a8:66:40:
                    9a:9b:99:88:f9:a6:e6:44:6d:3c:d0:fa:e9:41:c1:
                    90:78:ca:3b:18:23:1a:ae:ac:9b:99:0f:9f:59:af:
                    f5:9e:2e:04:77:53:95:dc:c5:da:ba:f2:2e:f6:7e:
                    86:a0:d9:a5:42:c6:db:e8:8d:28:7a:3c:5e:c7:78:
                    2c:6f:a1:93:76:1d:9c:99:10:ce:93:e9:d8:eb:23:
                    fd:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:8C:FB:D3:0E:27:B9:D1:9E:94:68:88:E7:1B:49:71:C2:96:44:FB
            X509v3 Authority Key Identifier:
                keyid:87:C9:8F:AE:A3:D4:81:AB:F3:26:70:71:63:A8:DC:73:29:4B:8D:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/0/87C98FAEA3D481ABF326707163A8DC73294B8D71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87C98FAEA3D481ABF326707163A8DC73294B8D71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/0/323830343a373365633a3a2f33332d3333203d3e20323730393436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:73ec::/33

    Signature Algorithm: sha256WithRSAEncryption
         16:63:47:a1:cc:e7:4a:a4:69:7f:80:e0:6f:f5:ed:17:5b:26:
         24:d4:21:84:4c:78:df:51:04:58:8f:22:47:b9:10:66:8c:68:
         38:a9:71:a6:70:1d:1c:16:eb:8c:96:23:e4:92:14:fd:69:cf:
         43:98:0e:8e:54:46:b5:fc:ee:88:ed:46:95:1c:73:f7:fc:86:
         03:73:05:7c:ab:3c:5e:4a:0f:ec:f9:ae:a9:62:45:73:3c:f2:
         e5:a6:21:f2:4f:66:b4:e1:f1:8f:11:cd:86:1c:12:ab:75:e2:
         60:16:92:a2:a2:40:27:37:41:2f:57:cf:c0:ed:e4:4a:90:f4:
         99:fc:86:fa:54:8f:d4:9b:eb:1f:97:bb:ac:08:44:fe:c2:90:
         d8:23:b9:cc:12:a4:62:e6:52:b4:f4:0e:82:f8:bf:1d:76:bc:
         2e:a5:7f:fd:b6:7b:06:f7:c9:90:16:31:ef:19:43:d3:15:85:
         16:d9:f6:4d:3b:a3:58:85:1d:87:40:70:16:50:13:be:d3:c4:
         eb:e6:ec:5f:44:db:b5:40:5e:78:54:53:09:b5:3f:1b:12:64:
         a3:02:b0:d1:68:12:b8:31:91:90:e2:16:b0:a0:fd:d8:90:2e:
         13:10:b1:b4:64:fd:c3:18:f2:15:7c:b4:e4:ea:13:7d:de:5f:
         68:d1:53:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:08:42 2025 by rpki-client