Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DjhhMjAZ3HJyDsKoAUGTJ9wNCRtnooZxrkuKMwcsbf8J/0/323830343a343337633a633030303a3a2f34302d3430203d3e20323637353733.roa
File:                     323830343a343337633a633030303a3a2f34302d3430203d3e20323637353733.roa (raw, json)
Hash identifier:          vCJrafWRlbJ+VzGKHY1v8UMqJYwNnm9P50RGtiFOjjU=
Subject key identifier:   96:1B:A2:74:9C:A2:34:61:FC:E2:B8:F6:7A:9F:2E:C8:05:AD:3A:57
Certificate issuer:       /CN=568240316B2E029888E6CD5C24522C55D5D6DA1E
Certificate serial:       71D8F51C6E7918B84974E500AB6A168117A1FF55
Authority key identifier: 56:82:40:31:6B:2E:02:98:88:E6:CD:5C:24:52:2C:55:D5:D6:DA:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/568240316B2E029888E6CD5C24522C55D5D6DA1E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DjhhMjAZ3HJyDsKoAUGTJ9wNCRtnooZxrkuKMwcsbf8J/0/323830343a343337633a633030303a3a2f34302d3430203d3e20323637353733.roa
Signing time:             Mon 15 May 2023 21:55:38 +0000
ROA not before:           Mon 15 May 2023 21:50:38 +0000
ROA not after:            Mon 13 May 2024 21:55:38 +0000
asID:                     267573
IP address blocks:        2804:437c:c000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:d8:f5:1c:6e:79:18:b8:49:74:e5:00:ab:6a:16:81:17:a1:ff:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=568240316B2E029888E6CD5C24522C55D5D6DA1E
        Validity
            Not Before: May 15 21:50:38 2023 GMT
            Not After : May 13 21:55:38 2024 GMT
        Subject: CN=961BA2749CA23461FCE2B8F67A9F2EC805AD3A57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:af:e4:12:61:36:5e:be:39:f1:9e:4b:8e:69:
                    c0:ec:ba:ea:13:7a:ca:21:a0:49:ef:24:67:ff:ad:
                    d4:ee:a6:42:82:03:1f:1a:8c:28:2c:50:16:57:19:
                    a4:cc:55:79:44:f3:2b:79:43:5d:b0:b3:00:ed:f2:
                    4d:c3:73:70:24:b3:12:48:2e:0b:d6:be:08:68:69:
                    62:01:d2:4a:c9:f0:b9:4a:f6:87:e7:be:d4:51:de:
                    16:39:1c:6d:38:eb:28:83:19:3e:de:c6:09:f0:d5:
                    ed:84:3b:0a:36:5a:30:6e:35:c3:85:de:8a:8e:b7:
                    57:08:26:42:00:61:32:da:17:4c:85:8d:c7:f9:9a:
                    df:0b:5b:50:cb:de:b2:d1:b0:bd:67:1d:ad:35:86:
                    fd:e9:4c:87:dd:ec:8b:72:48:1f:c1:75:8b:f9:39:
                    9d:10:1f:ea:4e:fe:71:b1:56:37:5a:7a:5f:78:15:
                    1e:3a:cd:f0:40:46:a1:97:b9:ac:4a:72:be:ce:71:
                    b9:67:db:e2:99:2d:fe:5d:83:7c:a6:35:61:78:a8:
                    14:a2:c8:c0:56:2d:3a:3a:42:d3:00:2b:fa:b6:8c:
                    d7:f7:3c:b7:9e:a0:46:6a:5f:7a:27:98:45:62:f9:
                    b5:8b:e7:7b:2a:78:8a:a2:b2:61:16:0b:2f:13:cc:
                    d3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:1B:A2:74:9C:A2:34:61:FC:E2:B8:F6:7A:9F:2E:C8:05:AD:3A:57
            X509v3 Authority Key Identifier:
                keyid:56:82:40:31:6B:2E:02:98:88:E6:CD:5C:24:52:2C:55:D5:D6:DA:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DjhhMjAZ3HJyDsKoAUGTJ9wNCRtnooZxrkuKMwcsbf8J/0/568240316B2E029888E6CD5C24522C55D5D6DA1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/568240316B2E029888E6CD5C24522C55D5D6DA1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DjhhMjAZ3HJyDsKoAUGTJ9wNCRtnooZxrkuKMwcsbf8J/0/323830343a343337633a633030303a3a2f34302d3430203d3e20323637353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:437c:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         2f:84:53:1c:ae:cc:07:39:2f:8c:e7:2a:9a:4b:d1:d8:36:ce:
         56:46:01:87:f3:33:c7:13:aa:31:ef:27:80:a2:eb:13:4f:9a:
         62:39:46:91:6f:a9:92:f8:f0:4e:f7:d1:e9:46:d5:cc:77:b7:
         81:0d:07:27:9a:e6:79:8e:5e:46:f5:fa:02:56:69:0b:82:9b:
         12:1e:76:37:a5:59:c6:7a:47:29:c5:9b:a0:0a:09:bc:0e:c9:
         c1:c0:0e:58:a5:58:8c:c7:2b:0b:a0:d4:0d:ae:04:4c:81:58:
         0e:19:a5:3f:f5:e0:7f:e1:74:bb:72:31:0b:d3:6a:f8:89:3e:
         94:4a:01:7b:17:23:82:8e:2f:7b:8d:5a:98:de:64:56:5b:76:
         89:72:71:46:a2:9b:7f:76:1b:1b:73:2f:17:16:05:cd:7e:9a:
         98:2e:11:a1:f1:76:96:d0:c5:76:ab:a4:e5:2c:16:08:42:cd:
         a4:19:c8:06:5b:25:48:4a:6f:ea:8c:88:d6:34:87:a4:8a:15:
         5b:0f:bc:5a:fb:21:42:39:80:fc:16:0e:4d:c5:18:17:1c:38:
         43:1f:1c:ce:aa:97:28:88:e9:6f:7c:60:08:04:0f:a7:4d:27:
         45:96:77:c4:63:a0:99:8d:a6:8b:96:17:43:70:2b:3e:76:0f:
         ae:8c:05:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 06:01:57 2025 by rpki-client