Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/323830343a343332633a3a2f33322d313238203d3e20323637353533.roa
File:                     323830343a343332633a3a2f33322d313238203d3e20323637353533.roa (raw, json)
Hash identifier:          MGlDb3g8dOuuR01Xw7L2rDXNeJJouMkvbaxFLK+wSNU=
Subject key identifier:   1E:DA:A3:87:90:A6:88:C7:4A:44:DA:55:AE:BB:E0:98:D3:EF:B7:0B
Certificate issuer:       /CN=E25F3D52DD8C272CC64492A7621AE551E084A019
Certificate serial:       45FA811E43231BB4BE3CBFBFDEA93F659AD5C472
Authority key identifier: E2:5F:3D:52:DD:8C:27:2C:C6:44:92:A7:62:1A:E5:51:E0:84:A0:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E25F3D52DD8C272CC64492A7621AE551E084A019.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/323830343a343332633a3a2f33322d313238203d3e20323637353533.roa
Signing time:             Wed 05 Jun 2024 13:19:38 +0000
ROA not before:           Wed 05 Jun 2024 13:14:38 +0000
ROA not after:            Wed 04 Jun 2025 13:19:38 +0000
asID:                     267553
IP address blocks:        2804:432c::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:fa:81:1e:43:23:1b:b4:be:3c:bf:bf:de:a9:3f:65:9a:d5:c4:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E25F3D52DD8C272CC64492A7621AE551E084A019
        Validity
            Not Before: Jun  5 13:14:38 2024 GMT
            Not After : Jun  4 13:19:38 2025 GMT
        Subject: CN=1EDAA38790A688C74A44DA55AEBBE098D3EFB70B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c3:31:9a:47:b6:e7:68:8f:cf:af:5f:51:1c:
                    56:91:ab:90:5f:10:d4:da:4d:87:dc:6c:d8:4f:3e:
                    dc:91:bd:36:27:d0:40:1d:b9:91:6d:ba:96:07:ed:
                    6c:08:86:d7:47:0a:1a:61:ee:d2:2d:88:57:63:0d:
                    40:87:be:6a:8f:bc:58:e3:24:c9:ac:05:b8:31:e7:
                    7e:a4:d1:cf:1d:ff:95:ea:72:40:34:94:10:aa:8f:
                    eb:d0:55:66:e8:52:1d:f0:09:8c:28:9f:a8:0b:e9:
                    88:7b:cd:c4:bc:32:dd:6d:45:7f:72:fc:2b:5c:98:
                    8d:20:44:41:84:af:0d:8d:4a:7e:ca:c2:5b:a9:0d:
                    ae:ab:40:97:df:da:a1:ab:ff:ce:33:63:05:76:e0:
                    74:77:34:82:3b:7b:d6:a5:74:9a:c1:49:4a:bc:f9:
                    c8:94:03:4a:2d:25:ef:e8:b5:e7:67:49:5e:09:55:
                    aa:54:77:d3:b8:89:c0:8a:ec:ed:9b:f0:84:ef:91:
                    b9:1f:75:d8:86:a4:b8:1e:be:0f:e7:e1:ed:74:3f:
                    d1:a4:78:c2:91:00:af:6f:83:b4:fa:06:c1:25:0d:
                    12:40:d9:da:50:fa:9d:e5:23:cc:ec:43:bd:61:9b:
                    16:81:fe:2b:35:02:21:1c:a7:d7:59:8f:f8:40:77:
                    66:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:DA:A3:87:90:A6:88:C7:4A:44:DA:55:AE:BB:E0:98:D3:EF:B7:0B
            X509v3 Authority Key Identifier:
                keyid:E2:5F:3D:52:DD:8C:27:2C:C6:44:92:A7:62:1A:E5:51:E0:84:A0:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/E25F3D52DD8C272CC64492A7621AE551E084A019.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E25F3D52DD8C272CC64492A7621AE551E084A019.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/323830343a343332633a3a2f33322d313238203d3e20323637353533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:432c::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:ce:ea:bf:8e:dd:72:96:4c:e3:0c:0d:0d:59:88:0e:51:75:
         8c:08:2d:e8:5d:3a:41:c9:6a:ac:ad:1f:87:90:5d:bf:e9:e1:
         db:80:db:e8:5f:73:a8:91:d2:e8:bd:60:2d:36:e0:3e:4b:a4:
         4a:29:f8:ee:a8:2e:57:38:e4:09:9e:1e:5d:2a:b4:3d:f5:d8:
         fa:2f:68:39:9e:9c:01:49:4e:85:2c:68:8b:29:2f:a0:1c:ca:
         61:0f:ad:ac:ef:18:e2:1d:fc:a5:a7:0c:b7:90:bb:26:e2:0a:
         8b:27:7b:59:27:4c:1a:69:66:08:e7:a4:61:09:81:35:20:99:
         0b:b9:67:be:de:f1:ca:55:60:2e:9a:39:e7:d8:1d:e6:47:ce:
         d7:f1:68:06:09:aa:1d:39:18:38:62:9c:a1:89:cd:1e:a9:a8:
         9d:33:19:a4:7b:20:74:60:36:0c:f2:4a:ce:71:75:e4:6f:3e:
         ae:da:50:88:e2:27:2d:2a:5b:0f:33:fd:79:c9:95:a6:c0:21:
         26:bf:1e:7f:cd:98:64:4f:a8:46:51:a0:94:ab:60:2d:76:f7:
         38:bc:4e:b5:5f:3b:34:f5:b5:db:46:db:6a:f6:0d:5a:f3:13:
         81:36:67:0f:6b:f6:5d:7d:6e:ab:d6:83:99:fd:68:a0:f9:69:
         e4:4a:92:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:00:27 2025 by rpki-client