Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fsnw7MZca5xA5VKa7YapUL7Cp6xVP3Eu3LYjeGDgRos7/0/323830343a376632303a3230303a3a2f34382d3438203d3e20323731363638.roa
File:                     323830343a376632303a3230303a3a2f34382d3438203d3e20323731363638.roa (raw, json)
Hash identifier:          yYxRe3IY0gU7iIgZoowGP1JnW5eetxLMZlF2zOoVJfo=
Subject key identifier:   5A:B3:37:0D:A5:C8:3B:DF:FC:BC:89:33:93:65:CF:9F:2E:05:2E:78
Certificate issuer:       /CN=C74AEBC5DF5BF97E5EC064C76EC4191E39EF56E2
Certificate serial:       0D9A8B224BAE2C7F21DA9D7C67FBB5FCD538E866
Authority key identifier: C7:4A:EB:C5:DF:5B:F9:7E:5E:C0:64:C7:6E:C4:19:1E:39:EF:56:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C74AEBC5DF5BF97E5EC064C76EC4191E39EF56E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fsnw7MZca5xA5VKa7YapUL7Cp6xVP3Eu3LYjeGDgRos7/0/323830343a376632303a3230303a3a2f34382d3438203d3e20323731363638.roa
Signing time:             Thu 11 Jul 2024 19:00:46 +0000
ROA not before:           Thu 11 Jul 2024 18:55:46 +0000
ROA not after:            Thu 10 Jul 2025 19:00:46 +0000
asID:                     271668
IP address blocks:        2804:7f20:200::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:9a:8b:22:4b:ae:2c:7f:21:da:9d:7c:67:fb:b5:fc:d5:38:e8:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C74AEBC5DF5BF97E5EC064C76EC4191E39EF56E2
        Validity
            Not Before: Jul 11 18:55:46 2024 GMT
            Not After : Jul 10 19:00:46 2025 GMT
        Subject: CN=5AB3370DA5C83BDFFCBC89339365CF9F2E052E78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b0:c7:45:d9:ed:28:5d:28:5e:69:1f:dd:1c:
                    e0:c2:02:d7:2f:f9:b0:ff:15:12:8d:b6:d6:2f:a0:
                    44:0b:5d:d0:1d:e2:81:f5:74:14:a4:64:1d:83:92:
                    19:bc:e6:68:69:48:62:92:72:4c:07:77:3e:99:33:
                    26:81:d6:12:84:5b:61:65:00:e2:c3:92:e9:ef:bd:
                    0c:2c:7b:d8:85:cb:8e:86:ce:ba:b5:3f:9b:92:69:
                    1e:31:7c:19:99:c6:5e:60:fe:a5:54:45:75:a2:3b:
                    39:a9:62:ad:e7:15:f9:4a:af:58:04:a8:b6:7b:a0:
                    56:fa:bd:ef:f7:00:af:11:1d:1e:5e:11:0c:c0:a5:
                    fa:32:78:19:62:75:e6:1b:d0:12:30:89:18:93:e0:
                    ab:0e:1f:3f:40:84:67:44:bf:0f:30:7c:f0:fd:d1:
                    26:95:45:f4:50:54:cc:79:91:7a:72:6c:a7:03:08:
                    ca:71:fe:e0:ec:50:ad:60:01:3c:ef:d3:26:cd:5e:
                    b0:64:d8:03:fc:66:cb:77:1f:49:0d:0c:79:3c:c6:
                    c4:d8:f4:3e:08:8d:b4:32:db:b2:c8:3b:64:f5:35:
                    5f:c5:3f:75:f6:54:78:e9:09:2b:5b:92:ab:ea:74:
                    41:54:a4:a7:e7:bc:8b:76:f6:49:ab:c1:35:10:67:
                    38:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:B3:37:0D:A5:C8:3B:DF:FC:BC:89:33:93:65:CF:9F:2E:05:2E:78
            X509v3 Authority Key Identifier:
                keyid:C7:4A:EB:C5:DF:5B:F9:7E:5E:C0:64:C7:6E:C4:19:1E:39:EF:56:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fsnw7MZca5xA5VKa7YapUL7Cp6xVP3Eu3LYjeGDgRos7/0/C74AEBC5DF5BF97E5EC064C76EC4191E39EF56E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C74AEBC5DF5BF97E5EC064C76EC4191E39EF56E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fsnw7MZca5xA5VKa7YapUL7Cp6xVP3Eu3LYjeGDgRos7/0/323830343a376632303a3230303a3a2f34382d3438203d3e20323731363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7f20:200::/48

    Signature Algorithm: sha256WithRSAEncryption
         15:e5:9b:45:70:bd:37:17:0a:c3:e5:3f:33:e7:4d:90:a1:a7:
         04:6e:95:9e:f3:0d:f4:8d:a4:b3:0e:5a:02:60:fa:b2:c7:a0:
         b7:f2:dc:e1:81:64:30:ac:e3:58:e6:bd:ed:79:98:41:70:44:
         29:e5:86:f4:02:49:a2:cb:55:49:29:40:29:26:2b:16:d0:02:
         f8:1e:e2:74:96:e3:b3:1b:1c:16:f6:53:fc:7f:4e:30:44:50:
         be:2a:33:c5:62:dc:9a:31:3a:50:b7:23:20:ab:bd:55:21:d1:
         81:80:2c:18:df:ae:d1:63:51:95:9c:e7:e8:2b:da:d5:7a:96:
         0a:dd:fb:39:b3:29:96:f9:ad:f2:56:e8:10:e6:23:9a:64:1d:
         bd:67:b9:95:ef:f2:c2:66:00:53:bf:4e:55:ea:2f:33:65:38:
         72:aa:4e:3d:1e:f5:e5:27:a1:74:f4:8f:05:1f:5f:56:79:62:
         7a:8d:4d:f9:19:c6:60:f9:05:9e:29:5a:69:f9:58:43:ed:fd:
         3f:e8:fd:f6:0e:0e:3c:21:d6:1d:c7:90:19:bb:4b:27:55:18:
         53:73:18:d5:60:50:0d:b8:7a:8c:22:21:9e:19:c0:c4:4b:14:
         84:dd:60:ad:e9:e5:79:7b:f7:57:72:93:7c:2d:da:29:66:68:
         21:b4:a7:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:17:48 2025 by rpki-client