Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GjfAKQd5YBhYAMm3bNmcAPUwSMPsZqS6PyJF3mpAckrU/0/323830343a6533343a3a2f33322d3438203d3e203631383839.roa
File:                     323830343a6533343a3a2f33322d3438203d3e203631383839.roa (raw, json)
Hash identifier:          ktCTambRPjIPAPm4JV85O//yi5owrWvciTS8cHYD/lM=
Subject key identifier:   EB:05:3B:FF:F8:69:A8:2B:60:54:79:AC:0E:EC:6D:0B:E2:0E:D2:AB
Certificate issuer:       /CN=E8134C8A69EE3FB2D502265D0E168A4AAB262B92
Certificate serial:       135552EACB68C366DCFC9902AFC4391FB267961A
Authority key identifier: E8:13:4C:8A:69:EE:3F:B2:D5:02:26:5D:0E:16:8A:4A:AB:26:2B:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E8134C8A69EE3FB2D502265D0E168A4AAB262B92.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GjfAKQd5YBhYAMm3bNmcAPUwSMPsZqS6PyJF3mpAckrU/0/323830343a6533343a3a2f33322d3438203d3e203631383839.roa
Signing time:             Thu 03 Nov 2022 21:48:10 +0000
ROA not before:           Thu 03 Nov 2022 21:43:10 +0000
ROA not after:            Thu 02 Nov 2023 21:48:10 +0000
asID:                     61889
IP address blocks:        2804:e34::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:55:52:ea:cb:68:c3:66:dc:fc:99:02:af:c4:39:1f:b2:67:96:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8134C8A69EE3FB2D502265D0E168A4AAB262B92
        Validity
            Not Before: Nov  3 21:43:10 2022 GMT
            Not After : Nov  2 21:48:10 2023 GMT
        Subject: CN=EB053BFFF869A82B605479AC0EEC6D0BE20ED2AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:93:6f:0f:a8:43:94:2c:a4:db:75:aa:77:2a:
                    ee:bc:87:3c:07:c3:9e:53:61:d2:fa:b7:1d:8f:49:
                    de:9d:e4:f4:e2:a1:eb:3d:2f:cd:cc:98:50:36:36:
                    1e:d6:16:5d:4a:56:0b:b3:49:a4:fc:8f:64:56:50:
                    b1:91:82:cf:a3:50:3b:b7:f3:30:e8:36:3b:dd:f4:
                    dc:c9:bf:63:c4:91:84:a7:2b:30:75:8e:f4:60:dd:
                    48:1a:31:b0:38:26:a9:91:d9:c5:90:4d:14:87:7e:
                    cf:58:03:c1:80:95:e1:8b:37:34:26:14:ac:51:03:
                    bf:82:55:20:48:16:f6:10:80:f7:c5:77:ac:52:be:
                    57:77:16:c3:63:69:41:61:c7:f7:47:98:c2:4c:80:
                    f0:f1:f5:7c:64:08:1f:65:ae:23:30:8f:ea:f3:2b:
                    18:09:8c:15:52:f8:ee:1b:b7:d5:5d:bd:42:4d:51:
                    e7:db:d7:e6:ac:cc:d1:61:d1:1b:39:46:1e:29:ff:
                    2d:99:73:88:85:d3:85:16:68:cc:46:77:77:aa:0f:
                    d6:08:11:5f:53:75:31:6b:06:c7:eb:89:b6:2f:78:
                    e0:ef:c0:f9:77:3d:d0:52:60:67:8e:e0:57:d9:53:
                    40:bc:ec:53:36:b7:b2:56:52:1f:39:71:00:de:65:
                    62:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:05:3B:FF:F8:69:A8:2B:60:54:79:AC:0E:EC:6D:0B:E2:0E:D2:AB
            X509v3 Authority Key Identifier:
                keyid:E8:13:4C:8A:69:EE:3F:B2:D5:02:26:5D:0E:16:8A:4A:AB:26:2B:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GjfAKQd5YBhYAMm3bNmcAPUwSMPsZqS6PyJF3mpAckrU/0/E8134C8A69EE3FB2D502265D0E168A4AAB262B92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E8134C8A69EE3FB2D502265D0E168A4AAB262B92.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GjfAKQd5YBhYAMm3bNmcAPUwSMPsZqS6PyJF3mpAckrU/0/323830343a6533343a3a2f33322d3438203d3e203631383839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e34::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:f9:31:48:2d:ab:b7:3a:67:c0:44:9c:56:e9:b5:49:5d:80:
         76:28:9c:b9:11:d3:f8:e3:fa:0a:ba:16:62:d8:5d:95:8f:89:
         56:4a:8a:43:93:85:22:27:bb:e9:d7:52:d4:6a:0a:db:2b:ce:
         27:08:23:99:7b:56:10:55:de:e2:6b:73:77:c7:99:c4:73:ae:
         48:49:a7:a2:19:69:28:77:a7:d3:89:b0:f4:23:22:e0:d5:27:
         64:e6:2d:0b:f9:52:f9:85:67:d2:69:2b:57:9a:87:f4:0d:59:
         89:e2:1e:fc:0b:69:ae:59:0e:1f:e4:9b:9d:32:8c:56:1b:49:
         18:71:72:1e:98:be:4c:48:9a:d7:ae:35:df:81:90:0b:ad:27:
         51:e1:82:d9:04:6e:e0:01:ce:0e:78:87:22:7d:7a:60:c1:4c:
         1b:69:83:ca:07:6d:79:a7:d3:05:a5:9a:b9:41:9e:df:eb:73:
         a2:3e:c0:94:38:c8:80:20:d9:df:62:77:01:a7:4c:15:d6:c9:
         18:76:dc:b5:a1:50:96:4f:94:36:4b:71:b2:44:d1:0f:50:a6:
         2e:ee:4e:50:f6:48:43:fe:47:f4:e2:b9:8a:5d:0f:4c:f0:26:
         a3:55:da:a7:6f:fc:e0:4b:4b:a5:76:66:49:d9:40:bf:8a:5e:
         70:84:f4:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:34:36 2025 by rpki-client