Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/323830343a316130343a32363a3a2f34382d3438203d3e203631383332.roa
File:                     323830343a316130343a32363a3a2f34382d3438203d3e203631383332.roa (raw, json)
Hash identifier:          QoUHTBsqNmUunlqMfUtj5RzEC6nFd5cMm+PDEQonvsc=
Subject key identifier:   BA:7D:EE:49:3C:BA:5E:FA:EA:99:20:77:F5:06:A5:0E:86:FE:E2:44
Certificate issuer:       /CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
Certificate serial:       07FC27EED624A9E5AC4FD7FE89C243FC26F0BA48
Authority key identifier: D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/323830343a316130343a32363a3a2f34382d3438203d3e203631383332.roa
Signing time:             Thu 05 Oct 2023 17:51:49 +0000
ROA not before:           Thu 05 Oct 2023 17:46:49 +0000
ROA not after:            Thu 03 Oct 2024 17:51:49 +0000
asID:                     61832
IP address blocks:        2804:1a04:26::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:fc:27:ee:d6:24:a9:e5:ac:4f:d7:fe:89:c2:43:fc:26:f0:ba:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
        Validity
            Not Before: Oct  5 17:46:49 2023 GMT
            Not After : Oct  3 17:51:49 2024 GMT
        Subject: CN=BA7DEE493CBA5EFAEA992077F506A50E86FEE244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:39:2c:55:50:2d:8f:61:17:00:7a:e2:10:3f:
                    59:c9:f9:98:45:91:e0:9d:32:cf:c7:3f:e5:6b:97:
                    e2:f2:26:04:95:e6:16:0a:8e:22:a2:95:61:b3:dd:
                    2e:7b:ab:32:01:26:09:6c:6b:7b:3e:ec:34:f5:a5:
                    52:5e:00:cf:9c:5a:11:4f:35:08:43:4c:fe:ca:e5:
                    56:d4:95:ef:1c:38:67:41:3f:83:f7:51:c0:b3:b7:
                    45:94:43:73:79:a0:2b:ac:0f:ee:ee:20:17:b5:36:
                    db:a7:e8:1a:aa:55:e9:a8:dc:0d:41:5f:38:37:97:
                    e6:86:65:8a:8d:a4:60:ff:dd:50:cd:bc:bd:bd:e2:
                    d6:1e:ce:78:c9:35:c2:8a:f5:76:87:a3:55:4f:04:
                    1c:34:d2:90:6c:0f:1c:f7:6f:90:5c:13:29:94:2e:
                    7a:68:7b:5b:f5:8a:c8:cf:6e:f9:19:ba:d4:b9:0d:
                    44:76:73:25:90:a4:38:73:eb:30:27:2a:09:69:78:
                    de:d3:a2:b2:cb:2c:ad:3a:bc:d3:94:8c:29:72:3d:
                    98:b0:e1:78:38:86:ae:48:6a:0e:7f:de:12:32:c2:
                    86:6d:13:79:f7:e3:6c:b4:ce:d8:b8:f1:e7:01:51:
                    a1:e1:66:2c:99:d2:fd:49:bf:33:6e:9c:7e:36:34:
                    be:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:7D:EE:49:3C:BA:5E:FA:EA:99:20:77:F5:06:A5:0E:86:FE:E2:44
            X509v3 Authority Key Identifier:
                keyid:D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/323830343a316130343a32363a3a2f34382d3438203d3e203631383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1a04:26::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:bf:35:5f:35:f8:1e:b8:3d:06:93:7e:33:ce:bb:d4:41:d9:
         cb:31:02:8b:10:a2:15:02:fb:54:ad:08:48:2c:49:5c:cc:9d:
         c0:3d:5b:4a:61:a1:c5:2f:47:0c:d9:76:50:b0:02:2f:1e:10:
         80:0a:f8:9d:81:db:bc:69:0c:b0:e4:7a:d6:ca:4a:e8:1b:2c:
         c8:ea:ef:34:a9:18:df:6e:40:a6:b9:b9:2e:b3:d8:8a:f1:9f:
         d4:e7:6a:05:8c:3b:bd:d1:f2:ca:c7:9f:ea:d0:a7:9a:11:86:
         a3:48:fc:ad:92:5c:d3:6d:3c:14:57:cb:b8:02:cf:e7:17:30:
         3c:b2:0a:61:76:2f:09:7e:57:3f:16:85:c6:a7:c4:8e:d0:6b:
         48:21:86:d4:b7:22:96:77:f7:6b:49:2d:d3:38:65:c1:1d:34:
         69:c9:e6:26:06:76:d6:32:03:35:d7:24:83:b1:88:9a:75:d1:
         9f:2b:8e:2e:a1:f3:32:80:41:bf:41:4f:5a:d1:73:78:b0:f9:
         ba:6a:42:e9:ea:04:ae:f3:9e:05:04:cc:ad:9f:36:04:8a:4f:
         71:38:63:38:9f:e2:5a:6d:03:a0:43:a6:7d:28:04:f2:ef:cc:
         69:25:29:19:36:bb:c9:83:26:f0:b8:b2:86:0b:4f:1e:ba:38:
         10:87:af:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:37:58 2025 by rpki-client