Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CTRvSZPTpy3fheWpmcPmyUFabCnfWogRMfpVLhYchtJZ/0/323830343a386532633a3a2f33322d3332203d3e20323632333433.roa
File:                     323830343a386532633a3a2f33322d3332203d3e20323632333433.roa (raw, json)
Hash identifier:          RszVe3EkU3zkYePH3CtR4SG3a27/BRmju8ujVD3calc=
Subject key identifier:   BE:A4:70:3B:7D:0F:D5:CD:AD:E6:AB:18:66:1B:6E:16:B4:07:38:CC
Certificate issuer:       /CN=1033FD7652BC4E5027EFF9C0EA4634A97B32A7CA
Certificate serial:       0AD2612C9330AE7A13E9C22728DC0EC6370D5D78
Authority key identifier: 10:33:FD:76:52:BC:4E:50:27:EF:F9:C0:EA:46:34:A9:7B:32:A7:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1033FD7652BC4E5027EFF9C0EA4634A97B32A7CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CTRvSZPTpy3fheWpmcPmyUFabCnfWogRMfpVLhYchtJZ/0/323830343a386532633a3a2f33322d3332203d3e20323632333433.roa
Signing time:             Fri 27 Dec 2024 19:23:12 +0000
ROA not before:           Fri 27 Dec 2024 19:18:12 +0000
ROA not after:            Fri 26 Dec 2025 19:23:12 +0000
asID:                     262343
IP address blocks:        2804:8e2c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:d2:61:2c:93:30:ae:7a:13:e9:c2:27:28:dc:0e:c6:37:0d:5d:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1033FD7652BC4E5027EFF9C0EA4634A97B32A7CA
        Validity
            Not Before: Dec 27 19:18:12 2024 GMT
            Not After : Dec 26 19:23:12 2025 GMT
        Subject: CN=BEA4703B7D0FD5CDADE6AB18661B6E16B40738CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d8:27:7f:45:b4:2f:97:da:87:c6:fd:90:4d:
                    77:0a:33:46:be:b1:ca:52:27:ca:9b:d6:e5:5d:04:
                    35:49:53:75:22:c9:37:08:6a:ab:9a:80:99:ac:35:
                    bf:37:a4:31:0b:b6:00:da:87:11:2b:20:f3:5f:31:
                    6d:b7:f2:9e:6f:66:b5:00:ce:d7:63:11:ae:99:f0:
                    0c:af:45:82:a1:59:8a:35:c1:2a:4c:57:42:bc:ce:
                    fc:b4:b5:67:81:b2:35:93:68:ea:3f:ad:46:eb:e5:
                    1b:9a:4b:ba:e5:0c:4f:60:8c:ec:02:76:37:0d:d0:
                    5f:48:3a:29:7a:e2:08:0a:ca:3b:7e:86:f0:b8:3e:
                    05:c3:86:ae:22:3b:e3:49:c7:c9:04:90:b7:5c:fe:
                    69:ba:d4:bd:11:ec:82:d4:32:1c:b0:e9:ce:cf:01:
                    f0:7e:9b:5b:9b:08:d7:8b:f5:be:6f:27:a9:32:49:
                    3e:f9:80:dd:e8:a0:19:71:fe:71:e9:3f:f9:27:67:
                    89:70:6e:15:b5:ac:2d:62:d5:ee:f5:1a:8f:a4:ec:
                    a9:00:08:6b:ac:28:47:45:da:05:ac:01:00:e7:03:
                    9a:a8:c6:bf:80:8d:67:81:d6:7e:bd:49:4c:15:2c:
                    1e:16:2c:6e:8f:d1:f3:f7:28:0c:08:14:5d:db:dd:
                    2d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:A4:70:3B:7D:0F:D5:CD:AD:E6:AB:18:66:1B:6E:16:B4:07:38:CC
            X509v3 Authority Key Identifier:
                keyid:10:33:FD:76:52:BC:4E:50:27:EF:F9:C0:EA:46:34:A9:7B:32:A7:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CTRvSZPTpy3fheWpmcPmyUFabCnfWogRMfpVLhYchtJZ/0/1033FD7652BC4E5027EFF9C0EA4634A97B32A7CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1033FD7652BC4E5027EFF9C0EA4634A97B32A7CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CTRvSZPTpy3fheWpmcPmyUFabCnfWogRMfpVLhYchtJZ/0/323830343a386532633a3a2f33322d3332203d3e20323632333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8e2c::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:82:72:fa:50:d4:b7:0d:3f:f0:dd:69:f8:29:39:6b:77:92:
         89:a5:34:6d:5a:bd:4c:f0:08:cb:06:c4:d9:18:bb:3e:09:50:
         13:e4:02:6e:ed:ba:89:75:fd:46:f2:9e:6a:ab:6f:fe:b9:5f:
         62:cc:3b:56:72:0c:a5:86:1a:57:13:ed:03:0a:7e:ba:fe:ad:
         10:07:fb:ce:c8:76:73:1b:ad:60:13:19:38:b0:a3:e3:79:34:
         fa:40:d9:b7:4c:fa:f5:54:c6:73:98:a5:e4:bc:62:c3:dc:07:
         15:2c:68:f4:60:36:44:ed:a7:1f:83:fa:2c:bd:b5:37:98:50:
         26:e2:34:88:9d:49:91:c4:72:6e:30:ef:3f:53:fe:58:39:7e:
         d0:69:06:de:d6:1f:71:8e:5c:dc:d0:39:f7:e4:31:57:1b:a4:
         47:1e:9d:66:cc:98:16:ad:aa:8b:1b:13:59:a2:a4:42:0c:17:
         f1:10:1a:55:d4:00:92:28:eb:71:ce:d4:e0:98:0e:03:2f:9d:
         3a:ca:c4:5c:33:98:9a:d0:a8:f2:f7:15:49:f1:3c:04:e8:cc:
         f6:3f:83:7a:d5:d1:f3:50:6e:77:28:f1:6b:39:d8:2c:77:47:
         84:cf:cf:4d:40:b1:9e:24:da:c1:b0:6e:ce:00:2c:54:42:70:
         b0:97:8e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:36:12 2025 by rpki-client