Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DjhhMjAZ3HJyDsKoAUGTJ9wNCRtnooZxrkuKMwcsbf8J/0/323830343a343337633a343030303a3a2f34302d3430203d3e20323637353733.roa
File:                     323830343a343337633a343030303a3a2f34302d3430203d3e20323637353733.roa (raw, json)
Hash identifier:          u8gF6/J3BywW0+S9AndVhCU8g9Gq5ygxwZLg8HqAg10=
Subject key identifier:   69:29:11:02:50:28:7D:7F:8F:C3:B3:4D:01:58:A2:5D:E8:F6:6A:C8
Certificate issuer:       /CN=568240316B2E029888E6CD5C24522C55D5D6DA1E
Certificate serial:       634BF6766451B847B134FB949D5B32EB210AE02B
Authority key identifier: 56:82:40:31:6B:2E:02:98:88:E6:CD:5C:24:52:2C:55:D5:D6:DA:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/568240316B2E029888E6CD5C24522C55D5D6DA1E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DjhhMjAZ3HJyDsKoAUGTJ9wNCRtnooZxrkuKMwcsbf8J/0/323830343a343337633a343030303a3a2f34302d3430203d3e20323637353733.roa
Signing time:             Tue 16 May 2023 14:41:39 +0000
ROA not before:           Tue 16 May 2023 14:36:39 +0000
ROA not after:            Tue 14 May 2024 14:41:39 +0000
asID:                     267573
IP address blocks:        2804:437c:4000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:4b:f6:76:64:51:b8:47:b1:34:fb:94:9d:5b:32:eb:21:0a:e0:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=568240316B2E029888E6CD5C24522C55D5D6DA1E
        Validity
            Not Before: May 16 14:36:39 2023 GMT
            Not After : May 14 14:41:39 2024 GMT
        Subject: CN=6929110250287D7F8FC3B34D0158A25DE8F66AC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d3:2d:66:2a:09:84:1f:52:7b:5b:9a:54:38:
                    fe:5d:27:42:f4:27:99:64:76:e5:48:fc:d6:4e:08:
                    a4:12:7c:6d:97:58:d4:b8:bd:e5:48:8d:1e:71:8a:
                    45:f8:e9:58:e0:98:33:59:e7:04:2a:b0:76:03:25:
                    1e:2d:43:9e:78:f6:7e:6d:fe:25:d6:af:74:62:f2:
                    a5:f4:cb:ff:a7:d7:d1:f8:22:37:43:98:ce:1e:a2:
                    a8:06:56:97:23:88:70:90:44:d8:60:c5:ad:5a:dc:
                    e1:44:16:d3:9c:d7:31:14:0e:9c:c0:f9:b5:2f:43:
                    09:33:65:33:48:a3:c9:fa:09:7e:57:db:35:fe:c2:
                    64:1d:f4:72:d3:f3:0f:10:31:35:13:5a:2b:19:0e:
                    fc:9d:b5:aa:3f:53:0e:2c:bb:a8:3b:f7:6a:62:16:
                    9d:1e:80:e8:81:21:be:cc:2e:7e:bf:43:3f:c9:a3:
                    8b:74:69:1e:05:a3:4a:e8:19:2b:ea:07:4f:a8:eb:
                    2e:44:ec:d1:df:79:1f:64:be:43:c9:20:83:57:2f:
                    55:eb:11:7b:95:7c:13:97:28:0e:c5:46:78:b9:40:
                    af:d6:87:66:9f:b3:61:05:2b:dd:f2:ff:72:46:22:
                    72:db:8a:e7:a8:0e:d5:32:b8:47:db:a1:e2:f5:79:
                    77:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:29:11:02:50:28:7D:7F:8F:C3:B3:4D:01:58:A2:5D:E8:F6:6A:C8
            X509v3 Authority Key Identifier:
                keyid:56:82:40:31:6B:2E:02:98:88:E6:CD:5C:24:52:2C:55:D5:D6:DA:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DjhhMjAZ3HJyDsKoAUGTJ9wNCRtnooZxrkuKMwcsbf8J/0/568240316B2E029888E6CD5C24522C55D5D6DA1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/568240316B2E029888E6CD5C24522C55D5D6DA1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DjhhMjAZ3HJyDsKoAUGTJ9wNCRtnooZxrkuKMwcsbf8J/0/323830343a343337633a343030303a3a2f34302d3430203d3e20323637353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:437c:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         5e:b5:22:35:51:44:47:a0:60:d4:1c:6e:08:2b:76:ab:70:80:
         72:55:35:24:21:b4:86:78:cf:09:36:59:08:46:b3:9d:be:af:
         11:76:d9:c8:1a:f0:0d:1f:fa:3d:98:cb:02:18:49:4c:e3:a1:
         cb:40:1d:8e:8f:fe:2c:67:26:15:bb:2b:ad:bf:2b:72:08:d7:
         df:dc:46:06:89:4e:b7:94:8a:33:11:11:22:0d:f9:87:db:25:
         41:cf:bc:77:a8:27:79:52:ec:2f:da:70:56:74:a5:db:1f:b3:
         9c:00:3d:98:b5:85:7a:7d:f5:bb:a4:58:4c:59:1d:9f:de:d4:
         e8:45:a3:d5:bc:7f:ab:c7:74:81:c1:74:57:52:4f:97:29:6e:
         be:70:99:bc:10:02:9d:38:19:7c:32:70:ae:89:c9:88:fe:48:
         9f:14:d8:df:cf:c4:05:60:9f:02:a5:7b:6d:b9:74:cc:99:5b:
         35:ee:fc:77:c6:28:08:5e:df:9c:a3:64:ff:2f:cf:3c:f4:f3:
         43:45:84:c6:57:1d:61:25:03:21:9c:4d:92:1a:be:7b:51:8c:
         0a:fd:7c:99:d2:a7:63:59:17:ee:84:2c:cd:ea:70:08:4d:52:
         c4:a1:bd:f9:04:1d:66:9d:7b:5f:ab:be:a3:4d:a9:a6:62:55:
         5a:04:11:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:25:37 2025 by rpki-client