Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/0/323830343a366231303a3a2f33332d3333203d3e20323730333735.roa
File:                     323830343a366231303a3a2f33332d3333203d3e20323730333735.roa (raw, json)
Hash identifier:          X2hQzkY6U9vY1C/498ZCVQtYW56VFQlN6eOMJGqh4+E=
Subject key identifier:   48:3C:4F:DD:1D:D4:56:E3:2A:8C:34:73:99:20:23:B1:00:69:1A:6B
Certificate issuer:       /CN=4D4CF41437C0AC8743EF8679C360277C7497ABFC
Certificate serial:       305FEF13BC0762D40C301C0B9FD7104C0352BB83
Authority key identifier: 4D:4C:F4:14:37:C0:AC:87:43:EF:86:79:C3:60:27:7C:74:97:AB:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D4CF41437C0AC8743EF8679C360277C7497ABFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/0/323830343a366231303a3a2f33332d3333203d3e20323730333735.roa
Signing time:             Tue 05 Mar 2024 19:53:08 +0000
ROA not before:           Tue 05 Mar 2024 19:48:08 +0000
ROA not after:            Tue 04 Mar 2025 19:53:08 +0000
asID:                     270375
IP address blocks:        2804:6b10::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:5f:ef:13:bc:07:62:d4:0c:30:1c:0b:9f:d7:10:4c:03:52:bb:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D4CF41437C0AC8743EF8679C360277C7497ABFC
        Validity
            Not Before: Mar  5 19:48:08 2024 GMT
            Not After : Mar  4 19:53:08 2025 GMT
        Subject: CN=483C4FDD1DD456E32A8C3473992023B100691A6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:43:6d:c8:93:c4:0f:8f:4c:cd:3d:87:47:22:
                    07:64:78:35:05:c9:3f:c5:df:69:08:fe:17:f9:09:
                    7e:c8:0f:a8:c7:d3:3a:f9:57:88:77:26:45:88:f6:
                    f0:b5:dc:c9:dc:12:65:af:4d:15:a3:95:b3:c9:c1:
                    30:2f:56:02:9a:08:2d:46:cb:c3:98:83:7a:92:17:
                    71:47:4f:68:9d:f0:94:0a:47:dd:00:51:a0:45:9f:
                    64:1f:84:e6:5b:41:5c:02:29:f7:67:ae:0a:e4:cc:
                    37:ce:b3:6c:9e:85:59:83:d4:80:c3:41:e8:31:59:
                    bd:11:d8:a1:e5:9d:47:b4:2a:14:e8:88:86:15:c8:
                    b1:f0:e2:86:20:24:f3:7c:b1:13:c2:f5:b9:8d:e8:
                    29:68:cc:b6:a3:69:68:98:6e:83:d1:d8:5b:da:67:
                    49:78:6b:f5:4c:0a:d2:59:e2:97:78:bf:e5:00:eb:
                    28:d5:e0:2e:74:4d:66:13:20:92:a9:93:aa:39:3d:
                    ec:b0:c3:32:6a:89:fb:cf:1a:b6:b4:3d:2d:d0:15:
                    c7:1f:0f:4a:71:24:8e:66:bb:65:80:bc:af:6a:3f:
                    28:7f:f4:ed:bc:8a:c8:68:7e:e2:0e:6e:1e:e4:25:
                    16:3e:0f:68:49:aa:83:97:f5:3e:37:f2:44:63:8d:
                    44:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:3C:4F:DD:1D:D4:56:E3:2A:8C:34:73:99:20:23:B1:00:69:1A:6B
            X509v3 Authority Key Identifier:
                keyid:4D:4C:F4:14:37:C0:AC:87:43:EF:86:79:C3:60:27:7C:74:97:AB:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/0/4D4CF41437C0AC8743EF8679C360277C7497ABFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D4CF41437C0AC8743EF8679C360277C7497ABFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/0/323830343a366231303a3a2f33332d3333203d3e20323730333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6b10::/33

    Signature Algorithm: sha256WithRSAEncryption
         6b:ae:6e:77:2b:6e:09:58:5d:40:5f:08:4e:73:5c:78:39:da:
         32:8b:61:64:cb:95:42:73:af:79:5b:48:44:82:35:4e:08:b4:
         a0:de:bb:81:d8:b1:19:b3:a0:67:e7:da:23:7e:8c:2b:28:09:
         6c:11:ae:a1:38:4e:35:22:f2:59:38:7f:cc:33:47:14:42:50:
         f3:a4:c2:74:6c:45:28:41:a3:b9:0d:72:a1:12:d8:fd:72:23:
         ec:17:da:87:3b:d5:b3:32:2a:2a:a7:ce:32:14:52:8c:40:b7:
         d4:ab:c2:7d:ed:b3:6f:65:02:73:89:f0:eb:f5:47:f8:5a:e7:
         98:1c:04:56:62:4e:a9:24:b4:ee:d2:ac:a4:75:9c:ce:1f:bc:
         d9:4c:3e:ba:10:b1:91:bc:29:5d:bc:cf:6e:a1:09:f9:ff:65:
         d6:a0:12:01:3c:37:c5:d1:75:f7:6f:80:bc:5d:cb:f3:6e:76:
         ee:80:f4:1c:d7:f3:ab:c0:d2:34:2b:d9:a4:e9:55:f3:bc:df:
         3b:b5:39:0b:cb:23:0d:f9:19:9e:e4:dc:7b:ac:d9:ad:cd:b3:
         98:2e:cf:ae:34:1f:89:12:96:11:85:4d:4c:1a:02:32:64:c6:
         f8:86:5d:0e:84:f9:f0:06:ab:e2:b0:15:dc:11:e2:64:0d:f7:
         4e:f6:fe:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:06 2025 by rpki-client