Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/323830343a333731383a3a2f33342d3334203d3e20323636333839.roa
File:                     323830343a333731383a3a2f33342d3334203d3e20323636333839.roa (raw, json)
Hash identifier:          CxDD2+yr90wGpmJJacrIXn9hpTZyiMvWtUmYs8w2ofc=
Subject key identifier:   56:EC:89:B0:B6:6E:9B:5C:0C:AE:D6:B3:8E:B5:D2:15:B2:D7:D4:E2
Certificate issuer:       /CN=B8BB7F90C1C5136709248077244EA66BB1F4F64E
Certificate serial:       76CBC8BD69F72E07ABF9FD57BCD0B27EA2E537C8
Authority key identifier: B8:BB:7F:90:C1:C5:13:67:09:24:80:77:24:4E:A6:6B:B1:F4:F6:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8BB7F90C1C5136709248077244EA66BB1F4F64E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/323830343a333731383a3a2f33342d3334203d3e20323636333839.roa
Signing time:             Wed 29 Mar 2023 16:07:59 +0000
ROA not before:           Wed 29 Mar 2023 16:02:59 +0000
ROA not after:            Wed 27 Mar 2024 16:07:59 +0000
asID:                     266389
IP address blocks:        2804:3718::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:cb:c8:bd:69:f7:2e:07:ab:f9:fd:57:bc:d0:b2:7e:a2:e5:37:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8BB7F90C1C5136709248077244EA66BB1F4F64E
        Validity
            Not Before: Mar 29 16:02:59 2023 GMT
            Not After : Mar 27 16:07:59 2024 GMT
        Subject: CN=56EC89B0B66E9B5C0CAED6B38EB5D215B2D7D4E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:56:39:38:41:0f:d1:d9:62:c2:92:25:d2:7c:
                    0e:81:5d:17:24:87:dc:ca:fd:ec:1f:b1:50:93:0e:
                    70:f7:7b:1c:ac:41:69:9b:91:16:e0:06:ec:cb:f4:
                    74:9a:07:c6:64:8a:9f:98:1f:80:2c:bf:56:8c:e0:
                    c2:f0:37:97:c2:18:9b:d2:c7:00:9c:a3:f8:ff:6f:
                    6b:c8:5c:21:40:36:9c:7a:ec:25:d1:32:05:f4:c9:
                    4d:e6:9d:0f:0a:a5:6f:f2:ee:8e:42:5c:a0:5a:26:
                    a6:dc:9d:f4:de:66:20:5e:b6:9a:88:4d:be:b1:98:
                    b8:d0:70:fd:61:5b:08:e5:4a:27:5f:15:0d:70:a0:
                    4a:41:cd:1f:25:30:f2:9b:df:11:90:19:bc:9e:e4:
                    e5:96:1f:63:eb:51:98:35:83:43:2f:d4:47:df:0e:
                    75:c2:c9:25:e7:29:80:eb:72:05:fb:4b:59:43:c7:
                    3a:41:05:10:30:4f:18:aa:a6:5f:ca:57:7b:11:19:
                    98:98:46:3d:9f:ab:31:fe:60:35:a4:d0:62:10:6a:
                    2b:a9:a3:09:b6:ad:31:ee:ab:ee:15:13:f6:a4:1b:
                    03:c9:9d:15:96:e3:b6:3b:b3:9b:4f:e8:d3:de:c1:
                    b5:42:9b:a1:a8:05:0e:f3:a9:ef:2b:d1:f5:c0:57:
                    7c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:EC:89:B0:B6:6E:9B:5C:0C:AE:D6:B3:8E:B5:D2:15:B2:D7:D4:E2
            X509v3 Authority Key Identifier:
                keyid:B8:BB:7F:90:C1:C5:13:67:09:24:80:77:24:4E:A6:6B:B1:F4:F6:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/B8BB7F90C1C5136709248077244EA66BB1F4F64E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8BB7F90C1C5136709248077244EA66BB1F4F64E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/323830343a333731383a3a2f33342d3334203d3e20323636333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3718::/34

    Signature Algorithm: sha256WithRSAEncryption
         62:20:28:e3:8e:7c:b6:7a:a6:17:b6:5d:13:e5:7d:6c:a3:2d:
         db:23:d1:35:77:49:9d:b0:cc:7b:97:ba:92:44:b2:bf:de:36:
         a6:cc:83:4b:97:f6:d9:15:10:3e:13:9c:56:71:e8:8e:c4:96:
         b7:94:32:cb:a8:42:3e:5e:89:10:46:e5:cb:3a:7e:26:a1:ec:
         8f:7d:f9:72:17:31:9c:35:8c:45:25:4a:aa:e2:20:c4:85:83:
         26:e0:c2:76:fa:a0:3c:56:f5:f7:9c:08:fc:3c:3b:ce:7e:6b:
         fd:b4:8c:a5:aa:ef:10:e2:1d:38:fa:b2:dd:9b:3c:25:ab:0a:
         0d:77:01:f2:c8:cf:38:8a:36:28:d5:b2:56:07:a6:25:48:60:
         9d:32:58:65:46:c2:eb:a8:c9:33:6d:3b:6c:57:5a:c2:5f:42:
         c4:43:a0:49:78:b6:a8:32:5e:fb:8d:e8:2b:8c:c0:4b:57:ec:
         65:1f:4a:6f:d0:3d:21:93:9c:fe:f0:ee:9e:2d:15:3c:4f:02:
         23:89:56:e5:3c:e3:59:6d:41:a9:36:42:fe:02:bb:e4:8a:c0:
         9c:e7:1e:1f:c6:7e:ec:68:53:8a:48:0a:cc:dc:37:5f:55:6e:
         1a:72:aa:1c:90:ab:8e:26:46:49:b7:19:a2:4a:d3:92:0e:7a:
         99:22:81:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:39:10 2025 by rpki-client