Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/0/323830343a373361343a383030303a3a2f33332d3333203d3e20323730393238.roa
File:                     323830343a373361343a383030303a3a2f33332d3333203d3e20323730393238.roa (raw, json)
Hash identifier:          R+UXqEATmiztj2tNe92s9Zh3V7ozuzuWPAAdq7vLFSI=
Subject key identifier:   26:D0:69:96:40:1C:3B:3B:73:72:CA:B1:C7:C0:90:E5:B7:CE:44:1F
Certificate issuer:       /CN=AFEAB3420D1A3845A0B35D7E0CE54116A0EA8A70
Certificate serial:       4D09BF8F13BCFBC7FBE8F87A9C9C95FFBE5A3A6D
Authority key identifier: AF:EA:B3:42:0D:1A:38:45:A0:B3:5D:7E:0C:E5:41:16:A0:EA:8A:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFEAB3420D1A3845A0B35D7E0CE54116A0EA8A70.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/0/323830343a373361343a383030303a3a2f33332d3333203d3e20323730393238.roa
Signing time:             Fri 09 Sep 2022 12:26:38 +0000
ROA not before:           Fri 09 Sep 2022 12:21:38 +0000
ROA not after:            Fri 08 Sep 2023 12:26:38 +0000
asID:                     270928
IP address blocks:        2804:73a4:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:09:bf:8f:13:bc:fb:c7:fb:e8:f8:7a:9c:9c:95:ff:be:5a:3a:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFEAB3420D1A3845A0B35D7E0CE54116A0EA8A70
        Validity
            Not Before: Sep  9 12:21:38 2022 GMT
            Not After : Sep  8 12:26:38 2023 GMT
        Subject: CN=26D06996401C3B3B7372CAB1C7C090E5B7CE441F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7d:b1:ba:7b:76:e9:a5:85:41:4d:b9:5d:ed:
                    5a:5b:75:8b:06:1d:16:7d:64:50:59:c6:a2:d9:01:
                    33:cf:4d:35:d8:ce:cd:f3:75:a3:dd:2b:17:cd:a8:
                    50:d5:12:60:9b:e2:aa:4a:5e:a4:85:d6:ac:b6:7c:
                    ca:26:27:9b:3b:b0:4f:73:1c:d4:15:72:35:2a:e1:
                    b0:64:d7:c8:16:3b:be:00:05:f3:ad:41:72:80:30:
                    51:93:7f:74:b7:e4:0f:4f:ca:08:d2:22:fd:6b:17:
                    29:2d:84:44:e8:5a:43:31:65:19:2f:47:14:b0:e4:
                    7d:bc:14:5b:98:ef:48:1c:10:cb:e9:dc:25:c6:bb:
                    5a:8c:3c:83:73:83:f5:81:70:d5:19:07:89:a1:1a:
                    9b:c1:75:88:8d:73:4d:62:5c:a7:e1:ad:f3:f1:67:
                    15:02:f0:1f:71:cc:29:a2:37:6c:d5:2f:db:83:29:
                    a3:2b:df:63:42:9a:9e:dc:6e:79:b4:05:3a:4c:c7:
                    d6:05:11:ff:b3:cb:d1:b1:93:ea:c8:06:65:1f:26:
                    a7:e3:41:28:3f:1a:86:93:47:94:c4:5e:2a:07:25:
                    1b:f1:81:3d:06:59:e8:47:98:da:f6:f0:0f:1d:77:
                    3d:13:db:de:3c:b8:05:99:cc:d6:fa:6b:99:bf:68:
                    46:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:D0:69:96:40:1C:3B:3B:73:72:CA:B1:C7:C0:90:E5:B7:CE:44:1F
            X509v3 Authority Key Identifier:
                keyid:AF:EA:B3:42:0D:1A:38:45:A0:B3:5D:7E:0C:E5:41:16:A0:EA:8A:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/0/AFEAB3420D1A3845A0B35D7E0CE54116A0EA8A70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFEAB3420D1A3845A0B35D7E0CE54116A0EA8A70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/0/323830343a373361343a383030303a3a2f33332d3333203d3e20323730393238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:73a4:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         7e:b0:28:28:4b:93:db:81:9b:2e:16:47:4e:b6:7b:1f:75:e9:
         71:60:75:32:9a:1c:52:85:a1:88:61:e3:d1:a0:80:44:aa:58:
         a5:1e:e1:89:ec:f9:b8:90:0c:7c:40:98:3e:a6:4c:cd:18:90:
         39:cc:bf:8d:37:c4:f7:17:8b:1b:69:d0:4b:2c:6e:01:e3:fc:
         aa:2c:9e:3f:a9:60:63:1b:c7:1e:6a:fa:34:93:35:7f:52:dc:
         17:20:2a:cb:dd:89:67:b0:10:72:1f:80:a9:13:5f:fa:0f:1d:
         a6:10:f3:2f:ba:34:c9:32:16:26:62:6f:81:a6:12:51:14:dd:
         cb:cf:2d:ba:70:3c:37:b0:d2:72:87:f3:2e:7d:be:a6:c6:36:
         8d:ac:50:a3:4b:95:cf:38:1e:a1:88:63:f7:19:07:ce:b5:27:
         d3:18:51:8d:f6:84:9e:a9:c8:83:54:8b:ef:59:32:d4:c3:7b:
         78:7a:60:c2:03:37:31:44:9e:00:6c:2d:e0:ea:de:f1:a4:ba:
         50:ad:dc:94:96:b0:34:82:54:04:9d:ad:6f:4b:cb:ba:ed:9e:
         0a:1b:11:75:f8:30:b8:08:1f:fc:5b:ee:00:ee:51:a6:74:ee:
         47:7a:66:e1:dd:d5:52:25:75:69:74:f8:b4:2b:5e:65:a1:9e:
         e6:d6:70:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:48 2025 by rpki-client