Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DhSptJHFELEV3Mm2sPYjjT3iTWD7idfYYU1AXKCQ6Zkg/0/323830343a333537343a3a2f33342d3334203d3e20323636323837.roa
File:                     323830343a333537343a3a2f33342d3334203d3e20323636323837.roa (raw, json)
Hash identifier:          6TVtRKX9ppCl6iaRuHAKd0bEGm0O5DChj5tn8YDEckY=
Subject key identifier:   F8:34:1B:DB:71:65:13:B5:92:5E:9A:61:75:0D:EA:2A:4A:24:D8:05
Certificate issuer:       /CN=9A7757F2422FC09935E55C6FC83910131BF7B3D5
Certificate serial:       55D7DFD6EF25B6D289576AF98ABED7E64830ED62
Authority key identifier: 9A:77:57:F2:42:2F:C0:99:35:E5:5C:6F:C8:39:10:13:1B:F7:B3:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A7757F2422FC09935E55C6FC83910131BF7B3D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhSptJHFELEV3Mm2sPYjjT3iTWD7idfYYU1AXKCQ6Zkg/0/323830343a333537343a3a2f33342d3334203d3e20323636323837.roa
Signing time:             Sun 14 May 2023 23:31:19 +0000
ROA not before:           Sun 14 May 2023 23:26:19 +0000
ROA not after:            Sun 12 May 2024 23:31:19 +0000
asID:                     266287
IP address blocks:        2804:3574::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:d7:df:d6:ef:25:b6:d2:89:57:6a:f9:8a:be:d7:e6:48:30:ed:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A7757F2422FC09935E55C6FC83910131BF7B3D5
        Validity
            Not Before: May 14 23:26:19 2023 GMT
            Not After : May 12 23:31:19 2024 GMT
        Subject: CN=F8341BDB716513B5925E9A61750DEA2A4A24D805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:dd:f2:59:4f:57:31:b3:d1:15:2d:ac:b7:ff:
                    b0:71:64:c7:f8:42:86:8b:3b:b0:1d:ee:a2:65:e1:
                    f7:f3:59:5d:b1:42:ff:10:d6:c4:0b:3c:68:25:f1:
                    26:47:ef:2f:25:d8:17:37:c4:30:94:4d:85:fc:bd:
                    aa:5e:b9:f3:e0:2b:52:ac:1e:14:d5:ef:cb:2c:e3:
                    60:d9:35:ed:07:13:e7:a8:dd:2c:69:be:04:95:c3:
                    81:0b:6e:1c:1c:c2:c1:a3:e4:aa:ba:f9:0d:f5:19:
                    92:6a:4e:a8:dd:d8:c5:c4:1b:03:0a:8d:e1:e5:ab:
                    38:4a:af:55:36:7c:84:fc:52:5b:a6:15:2f:d5:28:
                    1a:d0:52:d7:5a:7e:92:ed:9a:21:da:55:bd:a6:a7:
                    36:4f:ab:78:89:36:b8:f7:6b:dd:bb:32:b5:f9:91:
                    f9:58:fc:dd:9c:ad:49:70:0b:b6:39:a8:a1:11:0f:
                    21:b3:05:f8:54:97:2a:14:f6:2a:31:c3:cf:d3:b0:
                    f3:86:d2:82:a8:05:22:0e:cf:c6:ed:de:8b:92:73:
                    14:ac:4d:ad:b7:ad:f9:11:91:ac:70:a0:30:a7:a0:
                    9d:f9:29:56:c6:1e:72:42:e5:55:c6:8f:9a:13:39:
                    61:93:18:1e:ef:3c:5d:9a:88:1c:dd:1a:15:2c:17:
                    8f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:34:1B:DB:71:65:13:B5:92:5E:9A:61:75:0D:EA:2A:4A:24:D8:05
            X509v3 Authority Key Identifier:
                keyid:9A:77:57:F2:42:2F:C0:99:35:E5:5C:6F:C8:39:10:13:1B:F7:B3:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhSptJHFELEV3Mm2sPYjjT3iTWD7idfYYU1AXKCQ6Zkg/0/9A7757F2422FC09935E55C6FC83910131BF7B3D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A7757F2422FC09935E55C6FC83910131BF7B3D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhSptJHFELEV3Mm2sPYjjT3iTWD7idfYYU1AXKCQ6Zkg/0/323830343a333537343a3a2f33342d3334203d3e20323636323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3574::/34

    Signature Algorithm: sha256WithRSAEncryption
         a5:c7:25:33:9f:51:cd:a8:e1:a3:49:56:b2:39:36:e8:b1:de:
         a3:73:45:18:9b:d6:23:cb:66:03:c9:7b:bb:97:e8:17:33:08:
         98:20:9e:42:81:c0:81:7f:54:69:41:b2:9e:fe:0e:d3:ce:92:
         06:fe:f4:ed:88:d2:8a:55:b6:36:ba:1a:0f:8c:8d:74:d9:3f:
         75:27:93:89:5e:b7:71:4c:08:d1:23:35:e3:72:9d:9e:23:cc:
         e2:de:9f:cb:01:a2:92:33:31:bf:e2:5f:9b:92:7f:90:ed:ce:
         a0:e4:2f:9a:d9:cc:33:16:62:e2:a0:7c:da:ce:7e:51:36:cb:
         a8:cc:25:4b:ae:c8:fa:64:99:32:dc:57:3a:33:03:2f:8d:10:
         87:ba:aa:1b:2e:5a:2e:e0:09:f5:94:b3:49:e8:ec:79:4f:3f:
         58:5e:b9:3d:49:22:6f:3d:35:bc:85:d7:81:eb:d5:91:76:19:
         28:7d:c3:a6:be:92:a2:c1:5e:15:4d:ef:fb:8b:67:14:20:9f:
         33:8c:f0:38:0f:f5:ab:4e:f7:48:4b:a5:a1:4b:08:dc:81:e4:
         9c:db:bd:14:2e:73:e2:b5:51:69:58:53:e2:2d:59:34:87:ab:
         ec:03:c3:8f:57:2b:83:29:4f:93:ad:56:b0:97:1d:a3:8a:b5:
         aa:58:b2:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:54:32 2025 by rpki-client