Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DjhhMjAZ3HJyDsKoAUGTJ9wNCRtnooZxrkuKMwcsbf8J/0/323830343a343337633a383030303a3a2f34302d3430203d3e20323637353733.roa
File:                     323830343a343337633a383030303a3a2f34302d3430203d3e20323637353733.roa (raw, json)
Hash identifier:          H5AYfyJ/ST0QbdSPDQMIvP9ZLKFG2bd3RZgkao9BBnI=
Subject key identifier:   5F:AE:19:A3:42:78:E9:D3:EA:3C:D4:5E:40:F4:2B:0E:52:FC:0A:58
Certificate issuer:       /CN=568240316B2E029888E6CD5C24522C55D5D6DA1E
Certificate serial:       6159A3AD05B33F92E470A629EFADD7644B593BA9
Authority key identifier: 56:82:40:31:6B:2E:02:98:88:E6:CD:5C:24:52:2C:55:D5:D6:DA:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/568240316B2E029888E6CD5C24522C55D5D6DA1E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DjhhMjAZ3HJyDsKoAUGTJ9wNCRtnooZxrkuKMwcsbf8J/0/323830343a343337633a383030303a3a2f34302d3430203d3e20323637353733.roa
Signing time:             Mon 15 May 2023 22:50:19 +0000
ROA not before:           Mon 15 May 2023 22:45:19 +0000
ROA not after:            Mon 13 May 2024 22:50:19 +0000
asID:                     267573
IP address blocks:        2804:437c:8000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:59:a3:ad:05:b3:3f:92:e4:70:a6:29:ef:ad:d7:64:4b:59:3b:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=568240316B2E029888E6CD5C24522C55D5D6DA1E
        Validity
            Not Before: May 15 22:45:19 2023 GMT
            Not After : May 13 22:50:19 2024 GMT
        Subject: CN=5FAE19A34278E9D3EA3CD45E40F42B0E52FC0A58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0b:0c:57:4d:91:65:98:aa:a4:28:85:c0:2b:
                    27:4f:6f:de:65:c2:6f:19:b3:da:02:6c:d3:39:f6:
                    64:98:96:8e:3c:c0:bd:08:ad:93:38:ea:9c:94:5c:
                    34:d6:ff:73:85:54:37:ff:02:65:9d:78:71:8c:3d:
                    6f:5b:77:b1:6c:cf:0a:bc:2f:ca:98:13:40:c5:4e:
                    03:17:de:74:7f:31:f1:ac:e8:62:15:d9:52:ad:96:
                    dc:cc:d1:fa:89:c2:01:88:81:31:cd:0b:54:e8:b9:
                    8d:f8:ab:05:bc:fc:90:3c:cd:e1:6c:93:a2:5d:49:
                    b9:3c:7b:0b:93:25:83:fd:c0:3c:36:83:fb:cf:0a:
                    fa:34:21:a0:20:e6:fa:da:4c:0b:e6:78:aa:9a:18:
                    de:b2:dc:4b:ef:e4:ca:90:b2:27:ca:b9:8e:bd:3d:
                    d2:b0:9a:16:db:52:fc:50:11:0e:8b:e7:a2:69:f3:
                    58:07:14:8c:c5:03:56:49:a9:43:45:6e:fd:25:0e:
                    9a:99:f6:2e:37:b8:e2:51:5c:ec:6c:b4:2c:0f:d4:
                    52:12:dc:fb:6f:4e:3f:06:cc:9a:9f:40:77:34:c6:
                    a0:e4:9c:c0:13:b6:e0:1c:84:8a:f3:6a:fe:be:3a:
                    b3:02:e0:57:ea:70:e8:bd:27:20:b5:03:fe:2f:57:
                    61:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:AE:19:A3:42:78:E9:D3:EA:3C:D4:5E:40:F4:2B:0E:52:FC:0A:58
            X509v3 Authority Key Identifier:
                keyid:56:82:40:31:6B:2E:02:98:88:E6:CD:5C:24:52:2C:55:D5:D6:DA:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DjhhMjAZ3HJyDsKoAUGTJ9wNCRtnooZxrkuKMwcsbf8J/0/568240316B2E029888E6CD5C24522C55D5D6DA1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/568240316B2E029888E6CD5C24522C55D5D6DA1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DjhhMjAZ3HJyDsKoAUGTJ9wNCRtnooZxrkuKMwcsbf8J/0/323830343a343337633a383030303a3a2f34302d3430203d3e20323637353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:437c:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         82:5a:ba:54:f7:66:29:2a:c7:cb:f9:8f:2b:0f:f3:3a:fd:e7:
         d4:70:9b:6e:d1:bc:4a:53:0c:82:06:09:f7:30:a8:6a:cd:09:
         a7:35:5a:fe:e2:47:19:8b:6b:85:d4:86:62:e2:97:ca:9d:1d:
         94:5b:15:03:fe:68:55:39:b2:ae:67:4c:05:ad:92:48:4a:de:
         5f:74:a2:6e:3e:ff:5a:69:60:ce:6a:2a:39:f8:f9:74:9d:c3:
         bf:8e:f0:30:bd:97:6e:7f:0d:ca:ab:94:77:a6:f3:eb:f3:04:
         ba:8d:1b:e0:cf:e9:bb:53:cd:1f:4b:a6:55:14:9e:37:b3:6f:
         95:05:9c:30:9d:5a:a7:b1:8c:57:ac:62:63:32:a8:01:f5:bd:
         04:e9:d1:2a:5e:0b:21:83:b6:2f:1b:41:a0:bd:96:be:3c:87:
         dc:e2:5f:73:d3:9c:a4:e9:1b:5d:5e:56:b2:ad:27:68:1e:1f:
         81:95:33:bf:fa:db:92:0d:1a:00:3b:e1:69:51:ab:34:65:1f:
         91:91:e4:95:b8:f7:b9:2b:99:e0:5a:7a:2a:51:26:da:46:26:
         fd:43:88:d3:d9:a4:91:b2:a3:9e:0a:7e:19:f0:05:20:19:35:
         06:9a:c5:12:1d:0d:b5:50:cf:58:05:84:47:df:f2:b8:06:af:
         41:f0:a6:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:31:34 2025 by rpki-client