Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/0/323830343a6566303a3a2f33322d3332203d3e20323633353538.roa
File:                     323830343a6566303a3a2f33322d3332203d3e20323633353538.roa (raw, json)
Hash identifier:          zRh3+l/GgayIqv2yvMyIduA8RDopWFIP3Ci0hwewn1Y=
Subject key identifier:   98:63:51:92:3D:7D:D7:48:6B:B7:25:24:56:6E:9E:1A:70:FF:9C:42
Certificate issuer:       /CN=D54EA86AED4619E690E439D38757C43EA1E3C266
Certificate serial:       3F6D7667881A80D22F3F00844C5F4A2613EC6F14
Authority key identifier: D5:4E:A8:6A:ED:46:19:E6:90:E4:39:D3:87:57:C4:3E:A1:E3:C2:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D54EA86AED4619E690E439D38757C43EA1E3C266.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/0/323830343a6566303a3a2f33322d3332203d3e20323633353538.roa
Signing time:             Sat 05 Aug 2023 15:18:01 +0000
ROA not before:           Sat 05 Aug 2023 15:13:01 +0000
ROA not after:            Sat 03 Aug 2024 15:18:01 +0000
asID:                     263558
IP address blocks:        2804:ef0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:6d:76:67:88:1a:80:d2:2f:3f:00:84:4c:5f:4a:26:13:ec:6f:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D54EA86AED4619E690E439D38757C43EA1E3C266
        Validity
            Not Before: Aug  5 15:13:01 2023 GMT
            Not After : Aug  3 15:18:01 2024 GMT
        Subject: CN=986351923D7DD7486BB72524566E9E1A70FF9C42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:38:b1:0c:14:45:9f:a0:46:3c:ff:1a:89:1b:
                    51:35:18:33:a5:c0:8c:66:87:52:3d:f5:75:b9:92:
                    3a:cb:09:b8:dc:60:b0:e2:c2:8d:1f:22:8e:12:39:
                    27:ba:82:09:ec:78:46:0b:7c:83:3e:9f:c2:35:be:
                    d1:98:7c:73:b5:c9:3d:89:cd:57:09:b6:e3:fc:3f:
                    31:d5:24:b4:df:02:82:ff:b6:11:6b:2a:1d:2d:c1:
                    05:ed:4b:c0:05:ea:72:00:3c:8f:56:4e:bc:b0:8e:
                    ce:56:95:20:41:62:1e:56:0a:37:f2:c4:3b:5d:e0:
                    18:c2:74:62:1d:84:fb:f3:36:6b:1a:89:2a:50:1b:
                    00:0c:3c:ff:37:a3:39:97:69:51:09:c5:b7:94:8a:
                    96:07:65:2e:2b:5f:5f:c5:c2:e2:e8:c6:f5:62:22:
                    b3:26:c7:96:f5:a4:88:ef:47:fc:88:c1:02:e2:be:
                    fe:c1:69:a4:8c:86:6f:73:83:66:7b:82:f0:ca:f0:
                    e6:83:5e:1c:53:c6:26:ed:13:35:a4:ea:08:a7:c5:
                    31:f0:df:83:c7:39:a9:77:c8:db:0f:62:03:36:3f:
                    5f:5e:ad:39:02:ca:b7:b8:9b:56:43:96:7d:71:04:
                    39:87:d9:07:23:c5:ad:04:39:98:d8:51:3f:e6:c9:
                    62:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:63:51:92:3D:7D:D7:48:6B:B7:25:24:56:6E:9E:1A:70:FF:9C:42
            X509v3 Authority Key Identifier:
                keyid:D5:4E:A8:6A:ED:46:19:E6:90:E4:39:D3:87:57:C4:3E:A1:E3:C2:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/0/D54EA86AED4619E690E439D38757C43EA1E3C266.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D54EA86AED4619E690E439D38757C43EA1E3C266.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/0/323830343a6566303a3a2f33322d3332203d3e20323633353538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ef0::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:b4:1f:39:7f:2b:89:26:18:e5:16:39:16:39:6d:48:13:a0:
         5c:21:08:b6:e4:4b:7d:41:8d:9d:bc:b9:9e:46:f4:4f:36:29:
         d2:b1:e1:d5:72:80:77:a5:97:dc:15:2c:2c:7d:55:0a:a2:16:
         f6:74:e9:87:6d:41:a6:cd:78:f8:ac:10:e0:db:c6:7e:9a:20:
         23:73:d1:ed:84:35:a0:62:05:67:2f:70:6f:16:08:bb:9e:9d:
         da:03:14:6d:f7:d9:9e:a2:28:22:6b:6d:73:1b:48:1b:1f:db:
         72:8e:9a:bc:2e:95:a2:63:6c:d9:18:99:08:81:8a:a2:a4:67:
         45:8c:c3:c2:cd:ed:53:0b:5f:b1:53:da:86:db:0a:28:28:b0:
         9b:00:da:dd:ea:65:6d:70:68:dc:99:f6:c9:1b:d0:9e:61:b9:
         d7:b4:c6:9c:62:68:3d:38:27:76:bb:48:ca:67:63:ef:1c:a8:
         a0:c7:0a:33:80:62:79:9c:80:64:13:11:ec:17:7c:d6:07:49:
         29:22:a7:92:d2:e1:53:71:b8:ab:94:e0:7e:16:86:b6:43:1f:
         5d:da:ae:68:76:e3:3d:4e:82:f5:f0:5d:e9:49:af:35:1f:de:
         85:9f:1a:8a:b6:e6:52:cb:48:97:28:cf:18:25:29:d4:3e:d2:
         fa:c7:ea:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:14 2025 by rpki-client