Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ETm9SHjuk1Y4e78y5pPtETXRECkjNRi7FB5zX5cv6uNs/1/323830343a333534383a3a2f33322d3334203d3e20323636323739.roa
File:                     323830343a333534383a3a2f33322d3334203d3e20323636323739.roa (raw, json)
Hash identifier:          2gCBONXM91wpzccG3NYJhhFYC0qbn0e+VeSN7OBTLlc=
Subject key identifier:   44:BC:C5:B2:E1:A7:92:7E:20:DB:46:C8:60:E1:8D:FF:A2:2C:BC:E7
Certificate issuer:       /CN=D7777CF78CDF2EE6438090DAD56980390A48B2FD
Certificate serial:       1D17878A6DEB24F14614939146C1050DC388E8BC
Authority key identifier: D7:77:7C:F7:8C:DF:2E:E6:43:80:90:DA:D5:69:80:39:0A:48:B2:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7777CF78CDF2EE6438090DAD56980390A48B2FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ETm9SHjuk1Y4e78y5pPtETXRECkjNRi7FB5zX5cv6uNs/1/323830343a333534383a3a2f33322d3334203d3e20323636323739.roa
Signing time:             Fri 26 Apr 2024 17:12:59 +0000
ROA not before:           Fri 26 Apr 2024 17:07:59 +0000
ROA not after:            Fri 25 Apr 2025 17:12:59 +0000
asID:                     266279
IP address blocks:        2804:3548::/32 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:17:87:8a:6d:eb:24:f1:46:14:93:91:46:c1:05:0d:c3:88:e8:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7777CF78CDF2EE6438090DAD56980390A48B2FD
        Validity
            Not Before: Apr 26 17:07:59 2024 GMT
            Not After : Apr 25 17:12:59 2025 GMT
        Subject: CN=44BCC5B2E1A7927E20DB46C860E18DFFA22CBCE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:33:93:a8:de:f4:09:32:eb:ee:cc:ac:80:5e:
                    f4:81:cc:ed:dd:30:d4:83:48:67:97:38:a9:5c:4e:
                    9e:8d:9d:33:1d:68:39:43:34:44:b6:15:72:86:61:
                    c2:28:33:b6:23:8c:e3:82:44:8b:14:ad:92:2b:6a:
                    c0:65:aa:f6:84:91:6b:dc:ae:07:f6:09:a9:10:c5:
                    9e:ff:cb:f2:d4:ba:f9:53:ea:42:4c:f4:13:d2:fa:
                    c8:b5:0c:00:ef:97:31:b6:f8:5f:2c:92:7c:c6:1c:
                    24:59:f7:4a:b9:da:37:bd:7b:09:a4:f0:50:4f:ae:
                    c5:07:0a:7f:c9:2c:5b:d7:92:6d:d0:19:29:e0:c1:
                    b3:4b:8b:f5:2f:06:d7:43:4f:38:73:6c:48:e4:f7:
                    88:d6:57:02:a8:96:52:17:e8:92:fa:31:67:e0:bf:
                    0a:f6:04:67:e0:f7:24:40:8c:c2:a4:53:99:ac:22:
                    12:79:9b:76:ed:58:de:66:48:35:ba:3b:11:f8:89:
                    74:fe:c8:dd:ca:7a:15:b6:8d:55:22:81:05:af:91:
                    19:94:35:4b:a9:d0:91:29:8f:7e:0d:23:5c:6b:ea:
                    60:71:f5:e4:86:8b:8f:ad:60:78:d4:72:d0:de:0d:
                    d6:b4:c3:1d:40:e2:54:d1:dc:d3:fe:4f:7f:4e:7d:
                    20:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:BC:C5:B2:E1:A7:92:7E:20:DB:46:C8:60:E1:8D:FF:A2:2C:BC:E7
            X509v3 Authority Key Identifier:
                keyid:D7:77:7C:F7:8C:DF:2E:E6:43:80:90:DA:D5:69:80:39:0A:48:B2:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ETm9SHjuk1Y4e78y5pPtETXRECkjNRi7FB5zX5cv6uNs/1/D7777CF78CDF2EE6438090DAD56980390A48B2FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7777CF78CDF2EE6438090DAD56980390A48B2FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ETm9SHjuk1Y4e78y5pPtETXRECkjNRi7FB5zX5cv6uNs/1/323830343a333534383a3a2f33322d3334203d3e20323636323739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3548::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:36:5f:36:c4:c6:9f:de:c9:54:4d:5e:48:1c:24:b3:9b:49:
         03:1d:df:e8:be:bd:d0:de:0e:74:c7:01:d8:ff:6c:ed:0c:6b:
         b4:75:d1:90:a7:f2:41:29:4d:c5:0b:7a:d6:ed:ed:67:6f:aa:
         d3:bd:0e:58:13:17:98:dc:f6:2a:92:c4:e2:e2:9c:af:5a:43:
         04:9b:83:6b:36:3c:4a:a6:94:96:53:bc:1f:bc:a4:9f:50:ba:
         b8:ca:93:3e:66:be:1d:7f:4d:f7:43:49:88:d7:6d:a4:de:7c:
         15:65:be:f0:aa:94:a2:ee:fd:e6:7c:17:1e:46:d5:cb:9a:19:
         0b:e1:c5:94:e9:b9:4c:90:51:9c:34:4e:54:5b:9e:4d:84:88:
         ba:a9:ec:bc:ec:b0:2f:35:d0:d8:d5:38:19:b7:d6:9f:fc:e8:
         52:54:fd:d1:2f:be:29:b6:0d:f0:90:6f:1c:87:d2:45:ed:15:
         cd:f4:94:43:6b:4c:72:7b:f4:a3:fd:7a:75:0a:8a:4f:8c:64:
         57:ee:e3:c3:31:35:72:5a:1d:62:47:3f:c1:1f:f7:a5:0f:31:
         b1:ed:7c:0d:18:72:e3:ba:1c:7a:d1:27:62:55:5b:1b:56:8a:
         22:df:ae:89:65:b6:bf:80:11:52:77:da:15:e5:b9:06:20:8c:
         9f:e0:16:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:01:39 2025 by rpki-client