Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a653830313a3a2f34382d3438203d3e203238323630.roa
File:                     323830343a323865343a653830313a3a2f34382d3438203d3e203238323630.roa (raw, json)
Hash identifier:          8rqRaRNwfu5xxmKMQ0xu1nFNmwj3ByomILKbc0sSbJA=
Subject key identifier:   79:A8:ED:5F:78:8B:34:DA:29:33:BF:00:BF:6C:E4:6D:71:60:7C:04
Certificate issuer:       /CN=A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5
Certificate serial:       34E2CD6D619D164A34606237866971262D5B1605
Authority key identifier: A4:D8:EB:E0:76:5C:AD:F8:22:4B:44:56:43:92:E6:E6:C6:E6:AE:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a653830313a3a2f34382d3438203d3e203238323630.roa
Signing time:             Thu 09 Mar 2023 20:17:50 +0000
ROA not before:           Thu 09 Mar 2023 20:12:50 +0000
ROA not after:            Thu 07 Mar 2024 20:17:50 +0000
asID:                     28260
IP address blocks:        2804:28e4:e801::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:e2:cd:6d:61:9d:16:4a:34:60:62:37:86:69:71:26:2d:5b:16:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5
        Validity
            Not Before: Mar  9 20:12:50 2023 GMT
            Not After : Mar  7 20:17:50 2024 GMT
        Subject: CN=79A8ED5F788B34DA2933BF00BF6CE46D71607C04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f1:b8:e2:20:44:59:2c:76:de:f3:76:56:4a:
                    fa:13:7e:dd:0c:7f:68:17:06:97:23:5d:6b:38:7c:
                    50:59:38:86:e0:32:ca:2e:af:69:15:25:59:c6:07:
                    a6:0a:69:a8:70:4c:5b:2c:7d:8b:81:62:b0:12:67:
                    77:7d:8f:2e:c9:38:b6:d3:d5:2e:f1:86:e9:a6:98:
                    f2:96:66:44:e3:e1:c4:db:f1:eb:c4:72:43:21:7d:
                    e7:83:b0:69:8b:5e:ee:43:75:cc:c9:b9:6f:c6:b9:
                    a4:5b:4a:71:40:c1:c5:46:19:cf:86:9a:a9:4f:28:
                    36:82:f8:42:95:8e:91:99:6e:59:77:6c:f4:ce:bb:
                    94:92:ff:57:3d:8d:e3:a1:06:5c:7a:4a:33:11:3a:
                    83:ff:da:03:70:af:0c:02:f8:c9:d3:70:5c:18:5a:
                    7e:3d:e9:b9:d5:18:63:49:9d:94:8c:4a:3f:76:53:
                    26:29:57:f0:e7:fc:74:b2:e2:e6:6e:63:f5:3f:f6:
                    c2:1b:f9:ba:e8:8e:db:eb:5c:ec:12:5e:10:79:0a:
                    c9:7a:92:a0:ad:ef:27:9b:0c:88:31:c2:c2:a0:25:
                    c4:e5:07:75:e9:31:1b:60:d6:6c:11:49:e2:2f:72:
                    ee:7e:5f:c8:22:1c:c0:82:72:a2:23:45:e1:e1:46:
                    81:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:A8:ED:5F:78:8B:34:DA:29:33:BF:00:BF:6C:E4:6D:71:60:7C:04
            X509v3 Authority Key Identifier:
                keyid:A4:D8:EB:E0:76:5C:AD:F8:22:4B:44:56:43:92:E6:E6:C6:E6:AE:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a653830313a3a2f34382d3438203d3e203238323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28e4:e801::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:db:8e:33:63:f5:51:ce:ba:9f:c1:1c:65:1c:e3:6d:55:d1:
         25:2f:bf:ca:40:57:a4:ac:d7:86:c4:9b:71:7d:0e:b8:8b:c0:
         bf:84:51:0a:34:4e:85:d1:e0:80:ec:31:a5:47:5e:f9:20:d5:
         3b:30:f2:e3:8d:26:01:9b:62:4c:2a:09:e9:23:66:1d:28:53:
         6a:2b:37:ed:ea:99:45:76:2e:f7:ac:33:d0:e6:fe:68:e3:be:
         99:0c:c2:c5:18:d9:fd:87:06:1d:a1:38:6f:97:a5:5e:f0:28:
         c8:a4:ca:6d:90:42:33:f4:71:53:2a:e2:c8:a3:40:4f:95:fe:
         72:9d:a5:98:87:2b:24:be:6b:12:d0:cb:a8:69:11:6c:4b:ee:
         78:45:9b:ef:dc:ba:ad:6f:24:4d:4c:76:32:5b:c5:1c:f4:1d:
         d2:d9:4a:49:a2:79:a9:ac:c2:54:53:7d:10:33:00:c1:dd:33:
         04:16:42:33:c6:f2:cc:60:85:8c:1a:c7:e4:80:76:bf:b3:36:
         a0:c6:66:70:d7:3f:dc:ed:1d:cd:9b:ab:49:8e:36:94:e5:37:
         86:4d:4e:ff:03:d4:c2:53:0a:0d:25:f0:03:0a:df:45:5f:b9:
         b4:13:07:b5:65:c7:14:ca:b3:02:49:6a:21:40:dc:00:b9:8c:
         d3:dd:34:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:43:06 2025 by rpki-client