Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DmBYtGF8KhDKrJwv99qzEHcwUy9Tq6iyCkDbbt1Zh4Lm/0/323830343a323031383a333030303a3a2f33362d3336203d3e20323634343634.roa
File:                     323830343a323031383a333030303a3a2f33362d3336203d3e20323634343634.roa (raw, json)
Hash identifier:          xLvfivpyxYcEjwHt2hnN+Fs6pq8wm+Iu5p5oZoJ76VA=
Subject key identifier:   4B:D5:C8:DB:95:A8:91:50:24:DC:07:59:04:85:35:80:68:87:AA:9C
Certificate issuer:       /CN=91B1809A31F7DD41292ACFCD2406D788A6681B82
Certificate serial:       7288AF16A4CDB92C38A38CCE2BA340F881692202
Authority key identifier: 91:B1:80:9A:31:F7:DD:41:29:2A:CF:CD:24:06:D7:88:A6:68:1B:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/91B1809A31F7DD41292ACFCD2406D788A6681B82.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DmBYtGF8KhDKrJwv99qzEHcwUy9Tq6iyCkDbbt1Zh4Lm/0/323830343a323031383a333030303a3a2f33362d3336203d3e20323634343634.roa
Signing time:             Mon 13 Dec 2021 14:00:00 +0000
ROA not before:           Mon 13 Dec 2021 13:55:00 +0000
ROA not after:            Tue 13 Dec 2022 14:00:00 +0000
asID:                     264464
IP address blocks:        2804:2018:3000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:88:af:16:a4:cd:b9:2c:38:a3:8c:ce:2b:a3:40:f8:81:69:22:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91B1809A31F7DD41292ACFCD2406D788A6681B82
        Validity
            Not Before: Dec 13 13:55:00 2021 GMT
            Not After : Dec 13 14:00:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:19:29:06:17:9f:d1:d0:e1:c6:6c:66:a1:1f:
                    75:8b:d3:89:7f:17:8a:3e:96:fa:30:ad:3b:87:d5:
                    6f:90:4a:a0:18:18:2a:0f:4f:9d:5c:44:e1:57:33:
                    67:a0:60:d0:38:39:d6:18:85:26:4c:3d:b8:67:8b:
                    f7:20:69:64:d2:8c:1c:43:8f:92:7f:22:94:29:92:
                    3e:5c:27:cb:5f:7b:f3:50:1f:f9:a7:2f:77:f8:41:
                    cb:13:f1:e2:cc:86:54:34:94:af:aa:d6:34:60:dd:
                    53:9e:c7:d2:5f:73:8d:9b:dd:0d:df:ad:de:54:c6:
                    a4:2a:58:be:db:31:0a:cf:fe:05:35:26:75:39:ff:
                    40:f4:01:65:fd:11:9d:d5:ee:40:e5:47:78:be:6e:
                    af:88:01:a4:f8:20:48:4c:11:90:4f:c2:44:f2:b4:
                    19:2c:78:d9:ec:b7:db:01:b1:21:20:17:5d:c7:f4:
                    cf:76:8d:66:a1:26:b8:07:d9:15:bf:24:fd:8c:b1:
                    3a:68:21:80:ca:c9:f9:23:c6:06:24:f0:ae:bc:6e:
                    57:15:b0:88:5e:6a:2d:ba:5f:4c:df:30:47:77:a8:
                    68:9f:6d:d9:df:9c:dd:4d:08:17:74:99:2d:03:b7:
                    59:6c:23:46:5a:3d:3a:32:6a:93:0a:b4:49:a9:39:
                    54:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:D5:C8:DB:95:A8:91:50:24:DC:07:59:04:85:35:80:68:87:AA:9C
            X509v3 Authority Key Identifier:
                keyid:91:B1:80:9A:31:F7:DD:41:29:2A:CF:CD:24:06:D7:88:A6:68:1B:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DmBYtGF8KhDKrJwv99qzEHcwUy9Tq6iyCkDbbt1Zh4Lm/0/91B1809A31F7DD41292ACFCD2406D788A6681B82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/91B1809A31F7DD41292ACFCD2406D788A6681B82.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DmBYtGF8KhDKrJwv99qzEHcwUy9Tq6iyCkDbbt1Zh4Lm/0/323830343a323031383a333030303a3a2f33362d3336203d3e20323634343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2018:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         0d:cc:f3:e4:27:ad:44:90:8d:0d:e0:e5:bf:65:66:31:1c:e5:
         fa:54:85:4b:0d:ad:e1:78:ba:9c:63:af:f4:3d:18:2d:2c:db:
         f3:f4:e2:45:57:cf:08:33:b2:a3:09:d9:d5:5b:19:b5:e7:a3:
         72:15:0e:40:62:90:1b:c6:23:de:76:c6:c7:2a:3d:4a:18:4c:
         48:aa:a9:69:bd:b1:61:6c:80:9e:24:22:59:83:82:2d:18:27:
         eb:9f:91:cb:2e:2a:82:0a:ca:c8:97:a5:a0:2a:23:a4:d2:34:
         1a:6c:27:b7:d2:b7:9a:0a:49:b1:eb:cb:f6:0b:a3:ed:ac:1e:
         cb:3d:af:3d:e3:37:23:2b:d1:b3:77:af:9b:6b:4e:bc:b3:0f:
         8b:70:66:a5:3b:ca:30:a6:fa:5b:b7:43:65:e4:58:da:ca:ad:
         48:58:fa:1c:1f:68:d1:a6:f6:cf:6f:65:a3:3d:c3:da:e0:93:
         18:23:ee:18:38:5a:35:70:8c:16:5d:03:63:d4:60:8e:e3:f8:
         06:0a:e9:ec:60:9f:26:01:c6:89:89:58:1a:a9:17:e3:d0:20:
         68:e2:2c:44:8e:aa:6b:cc:74:37:60:a3:93:9e:a3:c0:20:f4:
         bc:08:59:73:85:97:63:b2:9c:78:7d:32:db:d7:d5:f9:70:59:
         33:35:3c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:36:07 2025 by rpki-client