Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/323830343a323039383a633030303a3a2f33352d3335203d3e20323634353030.roa
File:                     323830343a323039383a633030303a3a2f33352d3335203d3e20323634353030.roa (raw, json)
Hash identifier:          DznholbEQ2yGtzhE5j9bbnkr/Y5h1kGWtG/VzThls1Y=
Subject key identifier:   77:CA:F6:CB:AF:52:5F:69:1F:DF:BA:1F:5B:E8:A3:12:6C:80:66:3F
Certificate issuer:       /CN=5BD3911137575EB93CE8365D8A4CD0551A4D9BE6
Certificate serial:       29ECBB8C85029B396F6ABBA663BBC1A380C225E2
Authority key identifier: 5B:D3:91:11:37:57:5E:B9:3C:E8:36:5D:8A:4C:D0:55:1A:4D:9B:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BD3911137575EB93CE8365D8A4CD0551A4D9BE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/323830343a323039383a633030303a3a2f33352d3335203d3e20323634353030.roa
Signing time:             Tue 30 Jul 2024 17:48:51 +0000
ROA not before:           Tue 30 Jul 2024 17:43:51 +0000
ROA not after:            Tue 29 Jul 2025 17:48:51 +0000
asID:                     264500
IP address blocks:        2804:2098:c000::/35 maxlen: 35
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:ec:bb:8c:85:02:9b:39:6f:6a:bb:a6:63:bb:c1:a3:80:c2:25:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BD3911137575EB93CE8365D8A4CD0551A4D9BE6
        Validity
            Not Before: Jul 30 17:43:51 2024 GMT
            Not After : Jul 29 17:48:51 2025 GMT
        Subject: CN=77CAF6CBAF525F691FDFBA1F5BE8A3126C80663F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:25:da:04:9c:53:1d:39:16:f8:97:04:7e:35:
                    01:96:9e:52:45:6b:1a:20:e2:cb:9b:3d:73:5d:25:
                    c2:88:92:c9:44:7e:4b:fb:76:b3:cd:3a:fc:d6:7f:
                    54:e6:9d:3c:51:f1:cf:e1:fa:fd:2a:15:39:f1:59:
                    93:88:34:71:a9:5f:78:aa:cf:b7:bf:e3:83:f1:df:
                    79:f7:f2:b8:81:d3:63:f7:2e:4b:6d:5e:6e:9e:cc:
                    c0:ac:c7:47:91:db:6b:fd:3e:67:7c:29:8b:d4:a8:
                    52:0e:a1:be:19:03:54:b6:9a:d7:d1:3a:ac:a6:07:
                    91:65:f1:35:99:eb:16:50:0f:37:21:4f:6d:95:be:
                    c1:56:c1:9b:59:3f:b9:d0:90:50:26:ed:c9:47:3c:
                    75:00:40:f0:e1:db:df:e5:58:c7:44:71:72:5e:82:
                    ad:0b:41:8c:36:56:6c:1c:dc:92:29:be:e3:77:20:
                    75:66:49:88:d7:e4:4b:a5:55:7b:55:06:49:7e:78:
                    24:f1:5e:91:6f:02:9e:eb:6c:af:17:4d:33:4c:1b:
                    c4:ef:5b:82:48:cc:01:83:43:80:e5:7a:24:88:3e:
                    75:02:4e:54:2d:3f:7c:1d:b4:8d:7c:b3:bb:f7:0e:
                    df:b3:08:45:4b:f6:81:64:ab:96:2d:09:21:21:83:
                    69:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:CA:F6:CB:AF:52:5F:69:1F:DF:BA:1F:5B:E8:A3:12:6C:80:66:3F
            X509v3 Authority Key Identifier:
                keyid:5B:D3:91:11:37:57:5E:B9:3C:E8:36:5D:8A:4C:D0:55:1A:4D:9B:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/5BD3911137575EB93CE8365D8A4CD0551A4D9BE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BD3911137575EB93CE8365D8A4CD0551A4D9BE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/323830343a323039383a633030303a3a2f33352d3335203d3e20323634353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2098:c000::/35

    Signature Algorithm: sha256WithRSAEncryption
         a0:f7:d4:93:7f:38:77:a6:e4:29:a4:f0:e9:7b:75:a8:1a:5e:
         91:39:f7:f4:fb:2c:97:7e:e9:5e:87:97:00:57:ee:e9:da:d5:
         7a:fc:28:68:67:53:2c:53:98:8a:87:df:4b:3a:6a:76:27:e7:
         01:9c:0b:6e:28:8f:9a:7b:45:86:0a:11:09:f3:e5:09:54:f8:
         fc:11:a8:e6:e6:4a:c5:9c:71:39:5c:d0:a1:c2:3d:10:08:88:
         14:01:7a:ae:7c:62:af:86:16:ba:a8:4d:76:a6:ba:0e:57:27:
         08:44:6d:04:90:4c:32:3a:e2:e0:f7:27:5e:dc:cc:cd:34:d5:
         2b:ad:4a:2f:18:f7:9d:a8:1f:26:5d:e9:75:96:73:25:ab:b5:
         ca:9a:45:f4:f5:83:9f:a0:ba:16:09:e8:ff:6f:f5:e8:fa:94:
         ec:c8:8c:24:68:64:29:00:d9:33:e4:58:26:a7:e0:e3:ee:64:
         fe:24:ca:d2:23:a7:32:70:85:84:89:67:ba:41:88:23:d3:92:
         3b:14:d2:61:e2:d3:3f:05:14:36:7d:a6:9b:e6:f9:e1:27:c5:
         aa:86:3b:54:38:5b:00:1a:eb:0e:5e:66:d6:0b:54:f4:0e:ea:
         f0:e1:68:5b:20:2c:64:57:ee:fe:ad:0d:79:da:0e:1a:34:56:
         af:56:35:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:41 2025 by rpki-client