Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ew75CjQS4U9Dr7bAHTmNxYvDQZWK2htiBm5swRz46WsQ/0/323830343a386564303a3a2f33322d3332203d3e20323733343438.roa
File:                     323830343a386564303a3a2f33322d3332203d3e20323733343438.roa (raw, json)
Hash identifier:          c8IOZYpvwUxk087EcyQ3biYhQVokG8UF1Pc98SWkQeE=
Subject key identifier:   C3:29:2A:97:9C:DA:2C:37:2E:0F:C6:04:EF:5A:61:25:21:66:54:5F
Certificate issuer:       /CN=E6BD32C810359859EA58222C5D3203D14CFE3BD8
Certificate serial:       1BE86FD46ACC84926D177EF91281B1FA1CB05AFA
Authority key identifier: E6:BD:32:C8:10:35:98:59:EA:58:22:2C:5D:32:03:D1:4C:FE:3B:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6BD32C810359859EA58222C5D3203D14CFE3BD8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ew75CjQS4U9Dr7bAHTmNxYvDQZWK2htiBm5swRz46WsQ/0/323830343a386564303a3a2f33322d3332203d3e20323733343438.roa
Signing time:             Tue 16 Jul 2024 12:55:14 +0000
ROA not before:           Tue 16 Jul 2024 12:50:14 +0000
ROA not after:            Tue 15 Jul 2025 12:55:14 +0000
asID:                     273448
IP address blocks:        2804:8ed0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:e8:6f:d4:6a:cc:84:92:6d:17:7e:f9:12:81:b1:fa:1c:b0:5a:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6BD32C810359859EA58222C5D3203D14CFE3BD8
        Validity
            Not Before: Jul 16 12:50:14 2024 GMT
            Not After : Jul 15 12:55:14 2025 GMT
        Subject: CN=C3292A979CDA2C372E0FC604EF5A61252166545F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:35:46:d4:42:a9:b5:78:39:c9:7d:d5:88:a0:
                    44:84:90:9e:71:f9:ac:09:d0:57:ac:26:cd:92:0f:
                    33:b9:87:a3:c3:a6:df:f7:1a:1f:c8:44:31:ab:4b:
                    ea:3b:af:21:32:b8:31:78:d1:dd:03:f9:35:81:81:
                    de:49:6a:9c:93:d0:38:81:9b:b7:63:00:25:0e:8a:
                    bf:ef:51:23:0e:4b:9f:36:23:0c:a8:f1:4c:38:ad:
                    14:87:f3:4d:d4:fe:17:60:f0:75:58:38:53:2c:66:
                    a0:25:d8:e4:e0:3d:2b:04:ad:4a:cc:f2:92:9f:e9:
                    24:c6:c2:6c:7c:2f:23:ad:be:d5:6f:b7:69:17:3b:
                    9e:10:aa:be:9c:64:21:34:99:a1:63:28:49:bc:07:
                    4a:2b:f9:15:d0:37:b0:7c:22:31:5b:d9:3d:df:10:
                    68:ae:2a:09:32:05:0a:e5:41:e3:d5:d5:fa:1e:c8:
                    29:28:2e:26:29:57:81:51:da:41:89:a7:0b:c5:04:
                    f9:0a:3e:6e:e0:b6:7a:0e:cf:12:53:bf:85:42:6f:
                    7b:7f:9a:f5:87:ea:66:b6:54:98:8c:bf:cf:db:02:
                    a7:3a:40:5a:87:47:67:40:39:0a:36:74:e8:dc:47:
                    25:bd:50:e5:9c:55:0b:3c:da:11:db:f4:68:e5:37:
                    73:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:29:2A:97:9C:DA:2C:37:2E:0F:C6:04:EF:5A:61:25:21:66:54:5F
            X509v3 Authority Key Identifier:
                keyid:E6:BD:32:C8:10:35:98:59:EA:58:22:2C:5D:32:03:D1:4C:FE:3B:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ew75CjQS4U9Dr7bAHTmNxYvDQZWK2htiBm5swRz46WsQ/0/E6BD32C810359859EA58222C5D3203D14CFE3BD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6BD32C810359859EA58222C5D3203D14CFE3BD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ew75CjQS4U9Dr7bAHTmNxYvDQZWK2htiBm5swRz46WsQ/0/323830343a386564303a3a2f33322d3332203d3e20323733343438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8ed0::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:76:54:74:b3:5a:09:0a:c2:4e:ef:aa:cd:90:2b:f5:bd:3a:
         77:11:ab:8b:2e:14:06:78:28:ff:df:ed:77:3b:7e:fe:61:4f:
         23:33:2a:e3:ab:fa:56:6a:e6:05:c1:3f:63:54:52:5f:26:fd:
         37:7d:a8:71:20:af:f4:e3:25:fa:3c:69:8b:63:01:63:3f:84:
         48:4f:9d:a5:0d:d2:4e:1f:20:71:f5:9d:5c:74:28:94:89:7a:
         41:a9:eb:c8:a9:a0:6d:15:6c:6d:65:80:cd:c8:e3:3b:f7:a8:
         79:1a:af:68:32:14:6d:e6:93:1f:cf:b2:72:38:1a:35:cb:0b:
         de:c4:21:8c:12:ab:fa:b1:57:e0:96:b6:3b:59:d9:ab:21:84:
         9f:7e:65:4f:7a:24:3f:3a:ec:6a:8e:9e:9e:41:72:ac:24:3a:
         ec:fb:5a:c8:4b:2e:dc:47:d6:c2:12:58:49:d3:a6:78:85:80:
         d6:0e:34:62:48:0c:c2:33:d5:57:90:eb:d8:f0:d7:5f:01:46:
         20:fd:5e:f2:34:98:eb:d4:6e:a5:7c:79:8a:cf:db:5f:b2:84:
         8d:0a:2e:a7:5f:21:62:f3:a7:a9:18:02:0f:31:8d:e5:a6:95:
         99:39:c7:f5:12:21:76:e1:be:a9:81:12:3b:57:14:03:c4:c8:
         26:2c:6d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:20:47 2025 by rpki-client