Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/323830343a376133303a343a3a2f34372d3437203d3e20323731333533.roa
File:                     323830343a376133303a343a3a2f34372d3437203d3e20323731333533.roa (raw, json)
Hash identifier:          hrXVtzDwmO955HPWNR+RvbeZ/qU2avKJxd7ZhEIsrVQ=
Subject key identifier:   03:C5:2D:34:3B:51:4D:B6:0D:18:61:D9:A8:91:D8:95:47:86:BD:C1
Certificate issuer:       /CN=49DBAD5FECCD33235162300AA0573876E9771175
Certificate serial:       0F518B7D755A4B3F2226E7DB96A8BDAC6796441B
Authority key identifier: 49:DB:AD:5F:EC:CD:33:23:51:62:30:0A:A0:57:38:76:E9:77:11:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49DBAD5FECCD33235162300AA0573876E9771175.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/323830343a376133303a343a3a2f34372d3437203d3e20323731333533.roa
Signing time:             Wed 17 Jul 2024 19:34:46 +0000
ROA not before:           Wed 17 Jul 2024 19:29:46 +0000
ROA not after:            Wed 16 Jul 2025 19:34:46 +0000
asID:                     271353
IP address blocks:        2804:7a30:4::/47 maxlen: 47
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:51:8b:7d:75:5a:4b:3f:22:26:e7:db:96:a8:bd:ac:67:96:44:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49DBAD5FECCD33235162300AA0573876E9771175
        Validity
            Not Before: Jul 17 19:29:46 2024 GMT
            Not After : Jul 16 19:34:46 2025 GMT
        Subject: CN=03C52D343B514DB60D1861D9A891D8954786BDC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1d:c1:10:af:e1:62:a0:c0:9f:8e:9c:00:08:
                    ec:ea:a0:d5:3e:df:fb:9f:92:2d:4b:a6:bd:b4:00:
                    7b:b6:c6:9b:2a:89:5d:cc:32:37:d6:16:c6:55:8b:
                    dd:5d:aa:f0:56:34:ba:03:43:ce:8b:5f:ec:af:1b:
                    1a:c0:df:b0:d4:87:be:51:14:a9:55:70:bd:42:ad:
                    2e:03:af:a6:95:ad:30:6f:bb:fb:68:68:6f:a0:9e:
                    de:c3:89:2d:4d:ae:d2:a3:52:7d:72:ac:54:6c:6d:
                    9c:a1:c9:e3:2e:0b:8a:b3:c5:53:16:db:02:da:e1:
                    e9:48:9b:c9:94:56:e9:5c:7e:0a:ad:fd:ac:a6:92:
                    0e:76:5b:1c:f8:be:5c:21:1a:1f:ef:a6:e6:d4:e6:
                    69:da:32:4b:9d:a0:66:e3:36:3a:8d:9e:82:53:ce:
                    68:50:fc:b5:6e:fd:1c:da:61:0a:c6:1b:ec:48:b7:
                    fe:b1:a8:52:12:a4:94:53:37:3b:7f:c0:8a:e9:10:
                    16:ac:f1:4e:95:58:ac:02:23:06:57:d4:79:dc:f8:
                    c5:3b:a8:7a:da:08:20:be:c1:91:fe:33:48:39:3f:
                    d0:4e:a1:05:f1:4a:b9:b9:f4:38:df:36:87:5b:b5:
                    69:3f:28:bb:80:52:0d:a0:76:73:d5:cb:2f:82:b1:
                    c6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:C5:2D:34:3B:51:4D:B6:0D:18:61:D9:A8:91:D8:95:47:86:BD:C1
            X509v3 Authority Key Identifier:
                keyid:49:DB:AD:5F:EC:CD:33:23:51:62:30:0A:A0:57:38:76:E9:77:11:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/49DBAD5FECCD33235162300AA0573876E9771175.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49DBAD5FECCD33235162300AA0573876E9771175.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/323830343a376133303a343a3a2f34372d3437203d3e20323731333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a30:4::/47

    Signature Algorithm: sha256WithRSAEncryption
         65:6e:2e:0b:e8:d9:47:3c:c5:67:98:e7:39:b0:a0:83:17:8b:
         25:b5:6e:43:75:bc:14:7e:a8:8c:29:77:ec:87:71:bd:3b:13:
         09:d8:94:6e:40:5b:db:be:cc:6d:ed:bc:07:cd:ed:8c:b3:47:
         6f:68:3a:7d:f4:51:08:29:61:08:a3:a8:5e:cc:b3:0f:ff:dc:
         99:78:ed:fa:5c:c8:29:a6:5b:7b:0a:60:17:48:72:5b:41:c5:
         af:d8:53:4e:d3:a1:e6:16:0b:9e:53:27:59:1e:d2:93:58:6e:
         43:1c:58:0f:33:45:ee:1f:13:fd:ea:ad:e8:7b:7c:0a:19:32:
         8e:d8:c0:57:25:da:91:d8:c7:77:31:fd:fd:5a:e1:bf:25:05:
         63:1a:18:cf:e6:b9:bf:cb:e0:14:00:13:49:fa:75:24:c7:db:
         eb:5c:fe:2e:5a:4e:c8:a1:e5:9f:36:57:7f:19:22:10:c1:d2:
         54:d1:34:19:8a:a6:33:cb:ec:94:ba:d4:0c:88:98:3c:37:6b:
         30:9f:c2:5d:02:47:17:b7:c4:33:af:c2:05:79:56:b4:f7:95:
         61:8c:91:7d:68:4a:0b:f1:eb:af:3e:e0:0d:09:da:ad:d8:1c:
         d7:db:41:a8:a7:5d:93:f4:d9:7e:95:3c:3d:f6:5a:ec:c3:ef:
         c5:d2:19:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:02 2025 by rpki-client