Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/0/323830343a363062303a3a2f33322d3430203d3e20323639313834.roa
File:                     323830343a363062303a3a2f33322d3430203d3e20323639313834.roa (raw, json)
Hash identifier:          jLNaO+msf0pELM4fGb7TYUXFZc9nJxBq03Sb8ahS/nw=
Subject key identifier:   E9:17:9D:CC:D5:CF:45:05:04:53:DB:04:C5:C8:EA:F3:98:1B:19:7C
Certificate issuer:       /CN=CB88008D20CA6B3AC84FD57A80D969AB8769A5AB
Certificate serial:       0346A51A0680AC5FB9997563A40070CE3B83C9C5
Authority key identifier: CB:88:00:8D:20:CA:6B:3A:C8:4F:D5:7A:80:D9:69:AB:87:69:A5:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CB88008D20CA6B3AC84FD57A80D969AB8769A5AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/0/323830343a363062303a3a2f33322d3430203d3e20323639313834.roa
Signing time:             Wed 17 May 2023 14:28:00 +0000
ROA not before:           Wed 17 May 2023 14:23:00 +0000
ROA not after:            Wed 15 May 2024 14:28:00 +0000
asID:                     269184
IP address blocks:        2804:60b0::/32 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:46:a5:1a:06:80:ac:5f:b9:99:75:63:a4:00:70:ce:3b:83:c9:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB88008D20CA6B3AC84FD57A80D969AB8769A5AB
        Validity
            Not Before: May 17 14:23:00 2023 GMT
            Not After : May 15 14:28:00 2024 GMT
        Subject: CN=E9179DCCD5CF45050453DB04C5C8EAF3981B197C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:15:03:8c:dd:da:35:b0:22:0a:a1:36:50:10:
                    58:08:b1:f2:77:de:90:0b:6c:60:9e:58:3e:fe:29:
                    d7:24:7e:ad:4d:63:0e:c6:2a:72:94:26:b6:55:b7:
                    8a:45:57:e3:0a:89:d8:c1:29:fc:15:eb:41:90:0c:
                    ef:bf:00:a4:3b:2e:80:65:6f:a1:73:9c:e3:ea:57:
                    5f:21:b5:d3:81:ad:32:62:a3:f7:f2:2e:d5:d4:45:
                    35:5a:79:b3:05:62:97:db:39:49:46:a9:e5:bd:35:
                    81:13:8a:07:52:35:b5:d3:e0:25:e4:55:d3:34:57:
                    b2:c9:00:fd:e4:06:4f:88:96:80:a0:97:21:bf:8c:
                    0b:f8:8b:10:67:12:bb:d5:f1:11:3e:18:5c:0a:de:
                    7e:9f:3d:86:d2:bf:9f:6a:13:02:49:db:59:ed:43:
                    ec:5e:75:32:5f:0f:cb:28:c5:bb:47:33:c0:e8:6c:
                    96:35:4c:0c:2c:92:0b:c5:b6:21:f7:81:9d:bd:71:
                    c6:8f:49:ec:ca:4e:23:36:e2:a0:01:a2:8c:6b:3e:
                    22:97:94:20:d5:e9:be:b2:b7:b4:47:b0:86:98:ef:
                    73:07:59:68:df:a3:80:05:41:06:8c:fc:73:cb:ab:
                    0a:ba:10:c6:18:3d:db:64:b8:1d:ea:8e:3a:34:ce:
                    84:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:17:9D:CC:D5:CF:45:05:04:53:DB:04:C5:C8:EA:F3:98:1B:19:7C
            X509v3 Authority Key Identifier:
                keyid:CB:88:00:8D:20:CA:6B:3A:C8:4F:D5:7A:80:D9:69:AB:87:69:A5:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/0/CB88008D20CA6B3AC84FD57A80D969AB8769A5AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CB88008D20CA6B3AC84FD57A80D969AB8769A5AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/0/323830343a363062303a3a2f33322d3430203d3e20323639313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:35:c6:3d:f0:a3:8c:40:2c:11:df:04:29:21:5d:0c:2e:5e:
         c7:bb:a1:72:aa:40:c0:0e:ac:e4:ce:59:0d:94:07:3f:d8:e1:
         69:b7:fb:51:b9:25:64:af:5e:89:45:bf:c3:9a:c5:dd:e0:6d:
         8a:ce:16:b3:6b:35:aa:dd:2b:6d:48:74:ad:50:69:e0:28:c9:
         78:9c:f7:cf:71:c8:37:c7:ff:c6:07:1a:e4:b0:52:50:c8:6b:
         2d:a9:f6:98:61:78:1a:86:cc:f9:01:60:8f:b8:75:24:52:4b:
         59:35:51:f6:b2:18:ee:c8:72:bc:1a:f2:c0:6a:dc:bd:7d:64:
         65:1f:71:b6:2d:a5:0c:94:9b:ba:e4:45:68:c9:91:76:45:54:
         d4:7e:3a:32:ff:52:c5:cc:e2:19:10:67:0f:68:2c:4c:6f:8f:
         a2:b9:33:a7:23:14:4b:eb:21:d3:20:8d:4e:f1:53:9f:04:10:
         fb:51:4f:b8:d5:43:a6:fb:91:03:fe:c3:bd:e9:62:b4:86:7a:
         db:ea:e9:29:7d:35:05:6a:55:e0:50:36:87:b6:cb:66:87:c9:
         ba:a8:31:58:8d:fc:02:1c:30:63:9e:a5:df:c0:65:2e:9c:a0:
         92:ec:16:ad:93:0f:78:53:82:0d:ff:6f:90:e1:88:c8:8e:60:
         f2:ea:71:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:08:52 2025 by rpki-client