Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eb4drTVKnMn6jVfkMcXRhCSniHrp3TBQ8e6gKgw7obtr/0/323830343a333737343a323230303a3a2f34302d3430203d3e20323636343136.roa
File:                     323830343a333737343a323230303a3a2f34302d3430203d3e20323636343136.roa (raw, json)
Hash identifier:          HKjE/vK9tZaPVxs3hKY44aKoAQBdWx4/N8x8/x+rBIM=
Subject key identifier:   54:C1:19:A5:86:82:EC:C9:EE:D3:D7:16:FA:72:0E:4F:B0:9F:9B:E8
Certificate issuer:       /CN=3F9C724B8A4D384BB0BC626E0279F0491D983BB2
Certificate serial:       103E5E623AC93E298853B9E54DDC37A4C00C241D
Authority key identifier: 3F:9C:72:4B:8A:4D:38:4B:B0:BC:62:6E:02:79:F0:49:1D:98:3B:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F9C724B8A4D384BB0BC626E0279F0491D983BB2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eb4drTVKnMn6jVfkMcXRhCSniHrp3TBQ8e6gKgw7obtr/0/323830343a333737343a323230303a3a2f34302d3430203d3e20323636343136.roa
Signing time:             Sun 26 May 2024 20:57:21 +0000
ROA not before:           Sun 26 May 2024 20:52:21 +0000
ROA not after:            Sun 25 May 2025 20:57:21 +0000
asID:                     266416
IP address blocks:        2804:3774:2200::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:3e:5e:62:3a:c9:3e:29:88:53:b9:e5:4d:dc:37:a4:c0:0c:24:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F9C724B8A4D384BB0BC626E0279F0491D983BB2
        Validity
            Not Before: May 26 20:52:21 2024 GMT
            Not After : May 25 20:57:21 2025 GMT
        Subject: CN=54C119A58682ECC9EED3D716FA720E4FB09F9BE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8e:07:61:50:23:1c:cb:c5:d6:43:bd:2b:a7:
                    45:42:8d:49:ca:13:c1:5c:13:07:68:ac:cf:9e:ba:
                    75:5b:29:78:36:6c:d0:0d:2d:d7:e0:03:f2:b6:1d:
                    67:08:f9:29:79:4e:81:3a:1b:0d:f8:49:ad:7e:43:
                    db:85:ac:14:15:ff:66:2c:dd:6a:99:e8:77:31:70:
                    0e:92:90:55:69:bf:c5:36:6e:d3:8f:25:da:a0:3b:
                    65:10:1f:56:4e:a7:c4:6b:bb:21:e1:18:e0:45:fd:
                    b0:76:2a:4c:60:5e:10:1e:3c:5f:7e:c4:f4:a2:51:
                    08:ae:2e:e1:06:e9:87:e2:62:52:eb:4c:eb:45:2f:
                    d2:6d:81:e5:5d:df:5b:5d:ed:79:4f:45:b1:58:2c:
                    d1:8f:75:d8:2f:17:14:d7:3a:a0:82:ba:ec:1a:69:
                    52:2e:7c:30:e0:cb:d9:5c:dc:6e:4f:eb:11:fa:ec:
                    59:3f:8d:b9:4c:cf:b6:9a:27:82:7f:b4:c5:a6:dd:
                    df:59:1f:a9:66:ea:86:1b:14:cd:fe:c2:2e:84:8b:
                    1c:16:64:af:00:1f:12:89:6c:a9:b1:98:41:7d:db:
                    9b:d5:75:83:04:7a:80:34:a6:4c:8a:36:b1:9c:ce:
                    b4:2e:e3:54:a6:0f:9c:76:5b:d6:36:9a:73:dd:ff:
                    ad:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:C1:19:A5:86:82:EC:C9:EE:D3:D7:16:FA:72:0E:4F:B0:9F:9B:E8
            X509v3 Authority Key Identifier:
                keyid:3F:9C:72:4B:8A:4D:38:4B:B0:BC:62:6E:02:79:F0:49:1D:98:3B:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eb4drTVKnMn6jVfkMcXRhCSniHrp3TBQ8e6gKgw7obtr/0/3F9C724B8A4D384BB0BC626E0279F0491D983BB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F9C724B8A4D384BB0BC626E0279F0491D983BB2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eb4drTVKnMn6jVfkMcXRhCSniHrp3TBQ8e6gKgw7obtr/0/323830343a333737343a323230303a3a2f34302d3430203d3e20323636343136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3774:2200::/40

    Signature Algorithm: sha256WithRSAEncryption
         69:91:ba:97:09:1a:77:a7:f6:38:c5:c1:db:65:81:7e:bf:ff:
         9d:20:b9:bc:f4:9c:64:55:77:6c:45:a3:6a:30:be:be:1f:b0:
         3d:44:2f:87:51:34:84:f9:16:42:2b:28:f9:0a:cc:31:e4:39:
         59:ae:64:a8:44:26:99:2b:24:0a:29:eb:15:52:46:b6:7d:b4:
         46:67:de:3f:be:76:55:66:9b:99:fe:95:15:67:0d:ab:b7:37:
         b7:e7:88:d6:a2:cf:62:0d:c8:b9:94:91:4d:54:e3:aa:fc:7e:
         c5:38:55:86:e9:e1:d3:b7:19:ee:5c:de:6d:e5:5e:37:eb:bc:
         9c:8f:b1:59:11:78:2b:a9:ab:93:de:86:f1:2a:d3:89:5a:d0:
         fb:be:97:cb:32:15:f3:82:8e:db:67:76:a9:6e:13:83:25:66:
         20:e4:92:19:d6:ae:b4:db:47:0c:3b:ec:6b:b2:59:1d:f9:57:
         1d:aa:76:a6:38:dd:74:7a:2c:56:fe:ed:e2:85:4e:d6:18:d8:
         05:30:b3:04:65:d6:2b:c0:c1:05:85:cd:e5:be:ca:7a:40:e8:
         aa:47:10:3f:ca:f6:f3:dd:39:fe:c1:74:f1:e1:cb:d9:0e:b0:
         34:b0:05:88:98:1c:14:13:d5:7b:74:45:3a:b3:b7:a0:54:5f:
         63:f2:4d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:35:39 2025 by rpki-client