Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FRQrYnt7LbTo9ijxMQ7hVQL6xkCy9dD7qArQ1BJ1N76d/0/323830343a336162383a3a2f33322d313238203d3e20323636313035.roa
File:                     323830343a336162383a3a2f33322d313238203d3e20323636313035.roa (raw, json)
Hash identifier:          e7eWMAxnnPg8OGCB0zcheuVs08fr0YivB591xcJ3bvA=
Subject key identifier:   29:4D:F2:AD:B5:F9:09:2C:AF:10:18:E5:06:D2:1A:1C:41:6D:55:FD
Certificate issuer:       /CN=D7F8A8230BE2C0158081FA4A43712D5B68AD3215
Certificate serial:       7A36FFAF68C2F2E3B6802A164554725D2D833392
Authority key identifier: D7:F8:A8:23:0B:E2:C0:15:80:81:FA:4A:43:71:2D:5B:68:AD:32:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7F8A8230BE2C0158081FA4A43712D5B68AD3215.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FRQrYnt7LbTo9ijxMQ7hVQL6xkCy9dD7qArQ1BJ1N76d/0/323830343a336162383a3a2f33322d313238203d3e20323636313035.roa
Signing time:             Thu 02 May 2024 16:49:58 +0000
ROA not before:           Thu 02 May 2024 16:44:58 +0000
ROA not after:            Thu 01 May 2025 16:49:58 +0000
asID:                     266105
IP address blocks:        2804:3ab8::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:36:ff:af:68:c2:f2:e3:b6:80:2a:16:45:54:72:5d:2d:83:33:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7F8A8230BE2C0158081FA4A43712D5B68AD3215
        Validity
            Not Before: May  2 16:44:58 2024 GMT
            Not After : May  1 16:49:58 2025 GMT
        Subject: CN=294DF2ADB5F9092CAF1018E506D21A1C416D55FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:04:63:6c:91:ec:bd:0d:9c:23:a6:c7:b3:01:
                    55:f0:08:d2:a4:dd:88:45:0d:6e:88:2c:d8:d0:e1:
                    ba:1c:58:3c:24:10:42:a0:6c:7a:c3:9d:a6:35:a5:
                    92:69:2f:3d:1d:80:1a:a1:01:16:d2:54:a6:fc:8d:
                    68:50:43:db:b7:7b:fa:c1:21:b3:67:d5:46:d7:5f:
                    18:a9:1b:5d:0a:ce:d9:7b:ed:77:f3:f3:a0:a3:21:
                    44:2d:1b:26:51:26:af:97:c3:18:92:4c:9c:09:ba:
                    9e:33:11:47:5c:fa:28:5f:58:00:fa:d7:20:5d:36:
                    ee:7d:7f:ac:59:8d:e2:6b:db:6a:ff:38:eb:b0:45:
                    7c:17:99:e8:85:7f:36:76:0e:c2:ad:16:df:a1:23:
                    13:2d:9b:66:a5:c2:c6:56:02:26:af:44:ec:a5:05:
                    2d:5b:66:ff:b1:33:88:b6:04:93:9b:9b:01:d7:d4:
                    0d:51:cc:c4:98:2d:3d:83:f0:58:4b:f2:08:82:b7:
                    67:1c:92:da:71:8c:d5:85:df:29:78:6c:bd:69:98:
                    2c:6d:ef:a8:c3:52:1c:ec:69:a9:31:98:7e:65:72:
                    99:fe:ab:12:1e:46:52:83:2f:cf:0b:bf:37:71:09:
                    7c:0c:b1:bd:82:fd:f3:8d:6d:f0:73:df:8f:90:a6:
                    44:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:4D:F2:AD:B5:F9:09:2C:AF:10:18:E5:06:D2:1A:1C:41:6D:55:FD
            X509v3 Authority Key Identifier:
                keyid:D7:F8:A8:23:0B:E2:C0:15:80:81:FA:4A:43:71:2D:5B:68:AD:32:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FRQrYnt7LbTo9ijxMQ7hVQL6xkCy9dD7qArQ1BJ1N76d/0/D7F8A8230BE2C0158081FA4A43712D5B68AD3215.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7F8A8230BE2C0158081FA4A43712D5B68AD3215.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FRQrYnt7LbTo9ijxMQ7hVQL6xkCy9dD7qArQ1BJ1N76d/0/323830343a336162383a3a2f33322d313238203d3e20323636313035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ab8::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:97:59:0f:8a:8b:1d:44:b9:f8:6a:84:51:a3:e8:0b:c1:d4:
         e8:66:eb:bf:bb:65:25:9d:29:11:f5:35:2c:4c:cb:fb:c8:29:
         c3:0c:5e:f2:a1:b1:58:2b:88:09:70:f0:20:53:52:7a:da:09:
         73:53:06:1a:63:54:f9:f6:dc:ec:a3:66:81:be:3e:c9:6c:c3:
         f9:3a:34:87:ba:54:da:86:88:80:d1:12:5c:67:2e:25:47:7e:
         a5:8b:4f:19:33:4d:12:af:53:c8:72:28:8f:3a:a1:65:8c:8d:
         04:06:cd:a3:a6:6c:63:a7:16:9b:c2:a1:a0:f9:cb:f8:87:32:
         51:29:68:3e:d9:70:67:34:7b:0d:53:8e:85:4e:78:d6:72:1a:
         9a:6e:51:3e:39:ce:9a:1a:b4:ac:5c:e3:19:8b:4f:70:2b:bb:
         05:58:0a:2e:94:53:be:3b:2b:60:2e:07:69:54:55:f3:64:7d:
         61:f8:1c:96:a0:f0:7c:5d:11:2e:b5:39:34:e1:1d:60:94:b8:
         02:95:2d:1c:89:75:31:be:72:9c:60:6a:ee:66:61:99:80:24:
         dd:b9:07:97:b6:60:6e:e8:26:48:14:e4:b5:a6:d8:4b:15:07:
         8b:37:35:81:2b:5b:95:89:e7:d3:b5:9a:73:67:3d:35:3f:c4:
         9a:52:75:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:16:56 2025 by rpki-client