Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GJ8tJLeRc5b6UG1gqm8b3YprPp61Fo9WKEHMXzSRcGjw/0/323830343a323634343a383030303a3a2f33332d3333203d3e20323634333336.roa
File:                     323830343a323634343a383030303a3a2f33332d3333203d3e20323634333336.roa (raw, json)
Hash identifier:          /BPsTZBi9uGIIM2DaSLqA7ji32Ku3N8PAvgNDfR3FeQ=
Subject key identifier:   2F:B6:C6:F2:2D:08:65:5C:24:61:7A:AA:13:D7:DF:8E:2E:EB:1C:25
Certificate issuer:       /CN=CC5AC06C8FC350ED701A22DE52B4D59A57B6A2BC
Certificate serial:       39F14CF933445D27966E1EFE7048292AF7C1CFAE
Authority key identifier: CC:5A:C0:6C:8F:C3:50:ED:70:1A:22:DE:52:B4:D5:9A:57:B6:A2:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CC5AC06C8FC350ED701A22DE52B4D59A57B6A2BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GJ8tJLeRc5b6UG1gqm8b3YprPp61Fo9WKEHMXzSRcGjw/0/323830343a323634343a383030303a3a2f33332d3333203d3e20323634333336.roa
Signing time:             Tue 11 Apr 2023 10:33:13 +0000
ROA not before:           Tue 11 Apr 2023 10:28:13 +0000
ROA not after:            Tue 09 Apr 2024 10:33:13 +0000
asID:                     264336
IP address blocks:        2804:2644:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:f1:4c:f9:33:44:5d:27:96:6e:1e:fe:70:48:29:2a:f7:c1:cf:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC5AC06C8FC350ED701A22DE52B4D59A57B6A2BC
        Validity
            Not Before: Apr 11 10:28:13 2023 GMT
            Not After : Apr  9 10:33:13 2024 GMT
        Subject: CN=2FB6C6F22D08655C24617AAA13D7DF8E2EEB1C25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c0:ba:f1:5c:4b:e5:e5:2f:92:38:aa:aa:63:
                    1d:99:6f:0e:cc:81:49:4c:6d:ea:59:e4:0a:5d:b7:
                    8d:ad:d2:8a:2f:fb:0d:bb:69:65:cb:43:f1:ae:be:
                    07:7a:32:2f:cf:67:e9:e5:97:35:d0:e0:a5:55:6e:
                    b6:d3:fb:93:4f:11:75:7c:37:40:52:df:f0:50:8e:
                    6c:62:16:7a:73:5f:d0:de:a7:02:d3:f9:c8:9b:c9:
                    01:c5:e8:15:c4:9e:69:44:ca:f1:9d:de:a5:12:59:
                    da:cb:e0:72:49:8d:45:bf:4b:0d:3f:71:c7:10:3f:
                    0c:9d:1d:2b:13:8e:79:b7:be:58:98:a5:89:e7:a5:
                    62:4e:f4:cb:94:68:29:0b:4e:00:1a:8b:6a:ca:74:
                    39:24:6c:a2:22:79:63:ea:dd:c8:fb:26:59:71:1e:
                    5b:5b:47:96:06:6c:31:11:83:ca:e5:4e:31:c5:d2:
                    43:07:8c:09:3d:d6:64:06:74:b5:e3:f7:77:f8:e7:
                    94:b0:77:1d:f4:e8:66:a3:d3:1e:9c:c6:fb:d8:66:
                    2a:5d:a4:7e:f2:3a:51:f7:15:f8:ff:0b:5a:74:cd:
                    b5:95:77:01:35:e5:69:33:15:8d:39:f2:34:f9:9e:
                    b8:41:99:29:39:d9:41:a9:82:fc:e8:bc:3b:56:b6:
                    5f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:B6:C6:F2:2D:08:65:5C:24:61:7A:AA:13:D7:DF:8E:2E:EB:1C:25
            X509v3 Authority Key Identifier:
                keyid:CC:5A:C0:6C:8F:C3:50:ED:70:1A:22:DE:52:B4:D5:9A:57:B6:A2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GJ8tJLeRc5b6UG1gqm8b3YprPp61Fo9WKEHMXzSRcGjw/0/CC5AC06C8FC350ED701A22DE52B4D59A57B6A2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CC5AC06C8FC350ED701A22DE52B4D59A57B6A2BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GJ8tJLeRc5b6UG1gqm8b3YprPp61Fo9WKEHMXzSRcGjw/0/323830343a323634343a383030303a3a2f33332d3333203d3e20323634333336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2644:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         ca:8a:28:5d:f4:0a:f7:b8:ba:5c:43:b0:68:64:26:18:91:f2:
         a0:23:50:ad:82:f2:fd:0f:0d:72:8b:91:8c:5b:be:b6:d9:23:
         3f:38:a3:84:86:de:c5:81:a4:cd:4c:de:ab:3e:a5:db:18:14:
         3b:82:bd:b6:3a:7a:2d:3c:50:45:d4:3e:9e:bb:03:90:e1:d6:
         b5:fd:d3:8e:5c:f4:0a:c3:d5:2d:84:50:ac:22:64:37:61:46:
         96:bc:0a:ef:1f:f4:b0:ca:df:0f:94:f4:98:0c:fc:03:0e:87:
         15:a9:28:f4:3e:a2:a8:91:6c:5f:35:8c:9b:eb:e1:4e:76:27:
         e4:8a:f6:16:f2:6e:84:fd:d6:71:e0:80:32:73:1a:74:26:0d:
         43:35:a3:4f:2b:db:a7:e3:eb:95:a1:0c:bc:62:7b:63:69:2a:
         ac:4a:7d:aa:c4:9a:01:47:1e:b1:4c:c5:9e:d3:a8:c4:ae:c5:
         ae:48:04:33:5e:d5:d7:93:01:6d:95:a0:53:62:0c:f7:47:48:
         bf:e7:11:96:78:39:d3:37:8b:10:7c:22:45:35:20:e5:f4:0f:
         4c:fa:8d:0e:8e:55:5b:73:85:b9:fd:32:cc:ec:1b:44:43:a1:
         c1:45:02:3d:5a:4b:3e:10:14:0d:08:0d:d7:c6:11:62:fe:51:
         e8:9e:62:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:39:20 2025 by rpki-client