Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cj9VttKBGBfJ73SvoxNQkz9jc4nMzAV4LGnxdERaAT9c/0/323830343a383765383a3a2f33322d3332203d3e20323732373339.roa
File:                     323830343a383765383a3a2f33322d3332203d3e20323732373339.roa (raw, json)
Hash identifier:          6Jyw3WLzGOiJDI6sYDqBKVyj+PZOndUed0EgI43G9k4=
Subject key identifier:   9D:27:E8:CB:B8:40:08:6E:AC:07:BE:FE:52:8D:12:F6:E3:35:22:2C
Certificate issuer:       /CN=23FF06DF1B1108721C3400360AFA788F0387915B
Certificate serial:       47A3E2EA117E4A734E375AFF39D8D43C1DDABFF5
Authority key identifier: 23:FF:06:DF:1B:11:08:72:1C:34:00:36:0A:FA:78:8F:03:87:91:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23FF06DF1B1108721C3400360AFA788F0387915B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cj9VttKBGBfJ73SvoxNQkz9jc4nMzAV4LGnxdERaAT9c/0/323830343a383765383a3a2f33322d3332203d3e20323732373339.roa
Signing time:             Sat 17 Aug 2024 15:37:25 +0000
ROA not before:           Sat 17 Aug 2024 15:32:25 +0000
ROA not after:            Sat 16 Aug 2025 15:37:25 +0000
asID:                     272739
IP address blocks:        2804:87e8::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:a3:e2:ea:11:7e:4a:73:4e:37:5a:ff:39:d8:d4:3c:1d:da:bf:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23FF06DF1B1108721C3400360AFA788F0387915B
        Validity
            Not Before: Aug 17 15:32:25 2024 GMT
            Not After : Aug 16 15:37:25 2025 GMT
        Subject: CN=9D27E8CBB840086EAC07BEFE528D12F6E335222C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:71:06:a5:fc:08:f9:a3:6d:1e:b9:5a:60:06:
                    3c:d2:1e:18:3e:dd:c2:ab:f1:0d:88:83:1a:05:7b:
                    4b:61:96:c5:cc:a8:4a:d8:de:55:7d:e2:59:23:46:
                    dc:bb:95:ff:99:84:82:32:95:e7:9f:cc:c4:d2:ab:
                    6a:90:66:72:78:31:35:3b:0b:56:90:bf:31:53:b7:
                    75:7f:71:16:53:7f:79:eb:9f:ea:54:7a:3e:ad:3a:
                    fc:69:01:ce:76:28:61:87:d8:80:d2:1b:b7:ba:33:
                    20:9f:9a:d3:99:8f:34:58:ab:0c:5c:60:d6:f0:68:
                    59:d7:71:f3:31:66:29:1f:18:fb:37:1e:74:a3:a1:
                    c7:37:17:40:e7:d3:43:42:c7:54:48:c3:8b:48:a6:
                    08:a4:ff:c2:5e:32:ee:b6:ec:e0:8a:7e:5d:25:42:
                    86:86:2d:0b:5a:10:6d:e8:36:d7:6b:0b:fd:44:fc:
                    63:ef:d4:12:11:cb:45:13:c7:31:41:b6:d8:de:53:
                    a3:c4:c9:61:59:59:a9:27:70:81:80:be:eb:0d:51:
                    0b:f9:68:be:d3:35:44:a9:cb:18:50:af:af:b5:ef:
                    19:f2:29:15:b9:03:17:db:06:b8:d5:d3:30:23:c9:
                    b5:59:ab:d0:73:43:bf:ef:5d:6d:75:11:3b:bd:6a:
                    2d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:27:E8:CB:B8:40:08:6E:AC:07:BE:FE:52:8D:12:F6:E3:35:22:2C
            X509v3 Authority Key Identifier:
                keyid:23:FF:06:DF:1B:11:08:72:1C:34:00:36:0A:FA:78:8F:03:87:91:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cj9VttKBGBfJ73SvoxNQkz9jc4nMzAV4LGnxdERaAT9c/0/23FF06DF1B1108721C3400360AFA788F0387915B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23FF06DF1B1108721C3400360AFA788F0387915B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cj9VttKBGBfJ73SvoxNQkz9jc4nMzAV4LGnxdERaAT9c/0/323830343a383765383a3a2f33322d3332203d3e20323732373339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:87e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         be:19:5e:0c:3f:1c:8f:c3:9a:eb:f9:03:3e:41:73:bc:02:a2:
         35:dc:37:11:54:8c:67:81:1d:2e:42:24:49:ea:5d:6c:2d:fe:
         70:d5:1b:6d:17:a9:1d:44:c7:5c:88:13:63:f8:6e:01:ae:55:
         37:13:7b:3a:40:71:fd:46:6e:23:bc:9e:b6:3a:5e:d1:77:87:
         22:45:49:f6:52:32:b3:df:63:db:58:4a:f5:e2:93:ad:56:1c:
         26:92:f1:e5:a3:48:59:dd:84:66:56:77:b2:60:29:20:3b:28:
         fe:4c:2e:d6:a1:43:5d:46:86:93:77:7e:83:e3:03:5c:c2:24:
         37:8f:53:e0:a0:c9:f0:38:ec:14:f7:26:0b:f4:62:75:64:13:
         67:4e:c8:bb:92:83:a3:f5:06:d7:5f:7e:a0:69:fb:81:84:b3:
         3b:38:9f:a4:37:36:7d:e5:df:23:9c:61:a8:e8:ea:ea:48:1c:
         de:0f:45:50:4d:d3:cd:56:c6:eb:e2:e3:a0:ad:41:2b:a4:06:
         c6:01:87:7c:76:eb:a4:f8:84:d3:d7:05:9b:90:e7:bb:5a:0c:
         3d:c5:ca:71:c6:78:42:af:f0:fc:9a:0f:6d:1f:f0:d6:8b:91:
         99:1f:11:28:b8:d2:b5:b5:c1:31:d0:e9:22:57:5a:10:17:b9:
         60:c3:d8:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 07:04:40 2025 by rpki-client