Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/0/323830343a333137383a3a2f33322d3332203d3e20323635303137.roa
File:                     323830343a333137383a3a2f33322d3332203d3e20323635303137.roa (raw, json)
Hash identifier:          90ithaf/5Zk7Zt9uGwA/DQpWOIdFYkARfjSHAjngxzY=
Subject key identifier:   17:C9:6E:17:AC:2F:1F:2F:78:5C:02:16:05:75:34:24:44:C8:4B:3F
Certificate issuer:       /CN=DC222A62D59E22735410EC6F4D5BD74D575FAD95
Certificate serial:       09E8A3DE716EE75C367202EA746BC6E4E3250B99
Authority key identifier: DC:22:2A:62:D5:9E:22:73:54:10:EC:6F:4D:5B:D7:4D:57:5F:AD:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC222A62D59E22735410EC6F4D5BD74D575FAD95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/0/323830343a333137383a3a2f33322d3332203d3e20323635303137.roa
Signing time:             Tue 12 Nov 2024 14:14:42 +0000
ROA not before:           Tue 12 Nov 2024 14:09:42 +0000
ROA not after:            Tue 11 Nov 2025 14:14:42 +0000
asID:                     265017
IP address blocks:        2804:3178::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:e8:a3:de:71:6e:e7:5c:36:72:02:ea:74:6b:c6:e4:e3:25:0b:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC222A62D59E22735410EC6F4D5BD74D575FAD95
        Validity
            Not Before: Nov 12 14:09:42 2024 GMT
            Not After : Nov 11 14:14:42 2025 GMT
        Subject: CN=17C96E17AC2F1F2F785C02160575342444C84B3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:20:5c:b1:71:ba:26:33:d1:53:f6:0e:18:3a:
                    3a:df:24:84:52:7e:76:f5:fd:84:af:be:70:87:10:
                    0a:d2:8e:98:89:83:b8:41:e7:73:ec:58:69:5e:91:
                    40:5c:24:e7:11:f9:8e:c8:0d:95:ab:78:b1:b4:f2:
                    a2:fc:fb:a3:ae:44:fb:b6:e0:f6:9c:93:f4:9f:65:
                    ac:8f:b7:ed:eb:54:fa:3d:57:c4:b0:9f:fb:db:ef:
                    b6:08:49:4f:ff:5f:80:c6:94:79:11:e1:d2:5a:0d:
                    d6:a9:ce:74:9f:26:06:b7:e2:1b:d4:3b:bf:4b:50:
                    c4:68:dd:94:74:20:06:a5:27:38:ef:70:d8:a8:b7:
                    46:bd:2d:3d:7b:27:4b:8e:bf:cd:28:78:c2:17:bd:
                    18:c1:a5:68:3c:58:7e:14:1a:5b:72:32:f3:21:60:
                    61:80:dd:42:17:59:90:5c:bb:ac:b1:6e:4e:42:1d:
                    56:27:5f:de:8f:07:ed:9f:4e:3f:e9:93:69:b3:28:
                    dd:ec:ab:10:cf:1f:74:8e:0d:c6:fb:19:01:6b:6f:
                    a2:d5:76:cb:fb:9b:b8:56:e4:19:b6:81:09:1f:79:
                    e3:25:6d:e1:54:b8:1e:c4:b1:90:3b:02:6b:ed:d7:
                    bb:84:05:77:03:bf:72:20:39:9c:84:f6:54:62:eb:
                    8a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:C9:6E:17:AC:2F:1F:2F:78:5C:02:16:05:75:34:24:44:C8:4B:3F
            X509v3 Authority Key Identifier:
                keyid:DC:22:2A:62:D5:9E:22:73:54:10:EC:6F:4D:5B:D7:4D:57:5F:AD:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/0/DC222A62D59E22735410EC6F4D5BD74D575FAD95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC222A62D59E22735410EC6F4D5BD74D575FAD95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/0/323830343a333137383a3a2f33322d3332203d3e20323635303137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3178::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:ef:9a:63:4c:8a:4f:af:1c:00:07:5e:05:39:63:02:b8:df:
         ff:86:d8:5a:40:ea:4b:6c:f9:8f:be:4d:d7:e5:b4:12:90:d8:
         bd:78:e8:ad:9b:86:59:44:19:37:ab:6f:3e:7d:68:80:d1:53:
         a1:06:86:83:7d:d7:f8:62:c2:0d:4b:57:05:f0:db:f9:46:04:
         e4:1d:80:1f:2e:5a:66:64:c4:c2:bb:90:f9:36:b1:77:24:c4:
         ed:f9:9e:67:e5:57:ae:25:11:de:b1:19:12:6f:1f:51:ae:2f:
         26:3b:62:22:44:48:95:b9:78:6c:86:db:6b:b4:0d:44:9c:ef:
         0f:23:fd:4a:f2:07:c0:ea:8c:7c:a2:bf:3a:5b:26:b8:b6:4b:
         73:e4:5b:03:93:b0:27:55:92:78:d5:5e:e9:db:48:c7:1e:0c:
         7a:02:0b:4b:16:c1:8f:65:2b:2e:25:e8:ae:e6:a2:d1:51:0b:
         98:86:61:e0:1d:4c:ca:fd:a0:5a:db:be:b1:48:d6:f5:17:90:
         10:ee:52:06:e1:ea:2c:e5:d7:e7:fc:0f:27:30:7d:37:da:4f:
         4a:35:f8:72:8d:04:34:42:b7:76:89:9a:7b:5c:6a:a7:b5:b3:
         5d:ef:94:d1:92:2d:87:7a:a6:66:18:e1:6a:f7:dd:2e:b5:7a:
         77:eb:b9:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:02:23 2025 by rpki-client