Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G95uSNd8BkHkySnrATJFJPReknHsWLmJiF9Ne6RLTe4U/0/323830343a333966343a3a2f33322d3438203d3e20323636303631.roa
File:                     323830343a333966343a3a2f33322d3438203d3e20323636303631.roa (raw, json)
Hash identifier:          ZIy9F9XedbJxlhfvUMqcxc3DRwgspsYFvvUgrBjoA4w=
Subject key identifier:   1B:A0:9A:70:23:05:ED:18:63:58:A6:C7:D0:35:C7:72:82:1E:EB:00
Certificate issuer:       /CN=59CC8F0C68CB634537DB6EDA4400DDA648E25E81
Certificate serial:       10A8D1375DC52C3AEBF0B5B6F46D60AC1C676C05
Authority key identifier: 59:CC:8F:0C:68:CB:63:45:37:DB:6E:DA:44:00:DD:A6:48:E2:5E:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59CC8F0C68CB634537DB6EDA4400DDA648E25E81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G95uSNd8BkHkySnrATJFJPReknHsWLmJiF9Ne6RLTe4U/0/323830343a333966343a3a2f33322d3438203d3e20323636303631.roa
Signing time:             Fri 22 Jul 2022 14:59:03 +0000
ROA not before:           Fri 22 Jul 2022 14:54:03 +0000
ROA not after:            Fri 21 Jul 2023 14:59:03 +0000
asID:                     266061
IP address blocks:        2804:39f4::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:a8:d1:37:5d:c5:2c:3a:eb:f0:b5:b6:f4:6d:60:ac:1c:67:6c:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59CC8F0C68CB634537DB6EDA4400DDA648E25E81
        Validity
            Not Before: Jul 22 14:54:03 2022 GMT
            Not After : Jul 21 14:59:03 2023 GMT
        Subject: CN=1BA09A702305ED186358A6C7D035C772821EEB00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:09:94:72:04:1a:25:6f:6b:f1:32:95:38:2e:
                    84:f7:ac:0d:c2:85:40:e9:7a:87:ae:20:27:48:a2:
                    b8:a0:02:27:7c:13:61:1b:6c:1b:99:a9:63:a4:31:
                    4e:40:70:4a:13:ef:85:4d:6a:8c:ba:cb:39:7d:4e:
                    f2:cd:c8:2b:c6:a8:0e:d3:a0:04:e6:16:d5:41:13:
                    ac:84:c1:c8:37:9e:a4:c9:5e:d8:ea:86:72:55:40:
                    98:ce:c6:6c:5c:5f:39:0c:a8:31:cd:6c:ad:ab:79:
                    e0:cc:80:f0:ad:07:0d:00:52:1b:9a:41:03:b9:bf:
                    3a:3a:89:b7:79:d0:79:d4:70:4b:dc:ee:e5:33:52:
                    0f:38:da:78:20:2a:8b:31:fc:8c:12:8e:77:dc:61:
                    e6:e6:db:75:b2:66:f4:84:a2:b1:e9:75:62:7d:1c:
                    82:03:92:a2:57:fb:3f:a3:79:4f:7f:77:21:49:ca:
                    05:3a:66:e8:8b:c2:2d:ae:bb:c8:8d:56:0f:9c:65:
                    d2:25:8e:57:2a:6a:98:37:7a:c3:6f:9e:8e:1c:d9:
                    36:64:ac:fc:f1:e9:01:45:dd:19:fe:46:b3:28:9f:
                    43:64:fd:e1:7c:fb:e2:1e:3e:c3:ac:25:24:0a:ba:
                    47:01:a3:44:78:77:47:df:40:8b:72:62:6c:21:0c:
                    a1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:A0:9A:70:23:05:ED:18:63:58:A6:C7:D0:35:C7:72:82:1E:EB:00
            X509v3 Authority Key Identifier:
                keyid:59:CC:8F:0C:68:CB:63:45:37:DB:6E:DA:44:00:DD:A6:48:E2:5E:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G95uSNd8BkHkySnrATJFJPReknHsWLmJiF9Ne6RLTe4U/0/59CC8F0C68CB634537DB6EDA4400DDA648E25E81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59CC8F0C68CB634537DB6EDA4400DDA648E25E81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G95uSNd8BkHkySnrATJFJPReknHsWLmJiF9Ne6RLTe4U/0/323830343a333966343a3a2f33322d3438203d3e20323636303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:39f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:21:9f:1b:13:4a:70:1c:b6:51:a3:22:01:53:ee:47:91:96:
         fe:f2:96:d7:fd:18:09:e9:bb:bd:91:b6:4a:91:00:e9:49:0d:
         47:8e:e0:82:7a:09:1d:46:10:95:3a:a5:b2:16:42:6c:60:35:
         aa:4b:89:56:38:90:28:7d:f2:37:90:f4:4e:6b:65:37:2f:55:
         19:f5:04:ba:2e:e9:e8:1b:41:2f:a3:55:f4:40:9f:77:c4:62:
         0c:dc:6a:30:cd:4b:7c:1d:47:e6:01:43:d7:78:22:88:fa:73:
         73:dc:8c:0c:bb:0b:bf:67:cf:79:49:51:0d:82:8b:4d:b7:61:
         0f:a9:64:b7:24:81:70:00:dc:f0:e9:5e:d2:a8:0e:e8:cc:66:
         86:54:0e:18:c4:f5:fe:d2:c3:bc:fa:2e:c6:bc:34:dc:c4:3a:
         7a:6f:ae:d8:6d:bb:c5:64:9e:6f:a8:c4:bc:fa:0b:73:99:1e:
         9f:40:73:91:86:bb:e1:93:81:86:05:80:7e:0c:38:ee:91:5b:
         17:39:5e:31:86:94:fa:7a:e0:48:97:08:08:ab:10:78:fc:6b:
         5c:21:95:6e:8a:f9:4c:01:63:c8:fa:8a:34:58:c8:29:38:bf:
         22:af:6f:d2:61:a6:c5:b2:91:1a:d2:78:15:b9:c3:b7:3f:73:
         39:d3:c5:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:47:19 2025 by rpki-client