Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GssWMTYyKwJPzK4VHgVxpaaLoPjTEmYgNC95rq9Tbf1i/0/323830343a386335343a3a2f33322d3332203d3e20323733373936.roa
File:                     323830343a386335343a3a2f33322d3332203d3e20323733373936.roa (raw, json)
Hash identifier:          PGg1PFge0sjRSQDEka1dsxvUK249fac0VZfiyCENbXI=
Subject key identifier:   E7:44:B8:3A:E3:A4:C3:84:3E:81:D3:FD:59:31:12:DC:8B:67:B3:8D
Certificate issuer:       /CN=8A67FEA35F6B7A8F572B358C90868F56046743DD
Certificate serial:       24A204138798E8F227B6AB71465A4F402BAF3435
Authority key identifier: 8A:67:FE:A3:5F:6B:7A:8F:57:2B:35:8C:90:86:8F:56:04:67:43:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A67FEA35F6B7A8F572B358C90868F56046743DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GssWMTYyKwJPzK4VHgVxpaaLoPjTEmYgNC95rq9Tbf1i/0/323830343a386335343a3a2f33322d3332203d3e20323733373936.roa
Signing time:             Thu 28 Sep 2023 17:36:33 +0000
ROA not before:           Thu 28 Sep 2023 17:31:33 +0000
ROA not after:            Thu 26 Sep 2024 17:36:33 +0000
asID:                     273796
IP address blocks:        2804:8c54::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:a2:04:13:87:98:e8:f2:27:b6:ab:71:46:5a:4f:40:2b:af:34:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A67FEA35F6B7A8F572B358C90868F56046743DD
        Validity
            Not Before: Sep 28 17:31:33 2023 GMT
            Not After : Sep 26 17:36:33 2024 GMT
        Subject: CN=E744B83AE3A4C3843E81D3FD593112DC8B67B38D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:4c:97:d3:dd:ef:09:05:60:f8:e5:86:75:e6:
                    5f:ad:80:a8:27:e8:95:fe:29:0a:6b:e9:4e:29:9b:
                    c5:90:09:50:8b:f0:0c:2f:41:05:4a:42:c6:cb:a4:
                    e2:0f:52:0d:a1:07:ed:3d:cf:d0:2b:81:03:c0:c1:
                    a5:74:cc:0f:07:7e:64:b9:d6:da:8e:92:86:86:1d:
                    13:5a:86:3a:22:56:5b:d1:82:57:d7:ea:5c:02:da:
                    b7:e3:69:c5:b1:ff:01:9e:29:30:4d:18:e7:1b:ef:
                    1e:46:1a:58:ff:75:48:d7:6f:68:58:ad:40:63:55:
                    42:11:cc:88:cb:fc:89:97:13:3e:54:e4:0c:b0:49:
                    ca:f3:4b:d9:27:43:94:63:fa:19:22:83:01:62:2a:
                    b9:92:1a:4a:6e:49:e8:3f:63:cf:1b:c9:c7:7d:d1:
                    d4:4f:79:3d:32:e6:91:23:ce:ea:c1:2f:94:3d:96:
                    3b:b3:49:62:39:84:73:32:4a:40:2c:88:c4:64:e2:
                    7d:b3:dd:6b:40:89:f6:bf:5c:a4:cd:ac:85:58:a4:
                    3f:6a:b1:1b:53:0d:d0:cc:ac:ca:df:43:ba:10:40:
                    f2:ae:d8:33:1b:52:58:db:f9:6e:3c:5a:4a:ca:a9:
                    dd:47:5d:3f:69:69:d2:1d:96:2b:db:e7:dd:74:2a:
                    58:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:44:B8:3A:E3:A4:C3:84:3E:81:D3:FD:59:31:12:DC:8B:67:B3:8D
            X509v3 Authority Key Identifier:
                keyid:8A:67:FE:A3:5F:6B:7A:8F:57:2B:35:8C:90:86:8F:56:04:67:43:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GssWMTYyKwJPzK4VHgVxpaaLoPjTEmYgNC95rq9Tbf1i/0/8A67FEA35F6B7A8F572B358C90868F56046743DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A67FEA35F6B7A8F572B358C90868F56046743DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GssWMTYyKwJPzK4VHgVxpaaLoPjTEmYgNC95rq9Tbf1i/0/323830343a386335343a3a2f33322d3332203d3e20323733373936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c54::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:21:e1:d7:ef:7c:da:2a:6d:8b:76:7f:ae:67:9d:8e:16:f7:
         d9:d1:7a:ec:e3:25:fc:33:26:8e:b2:2d:5b:ac:b3:23:38:8f:
         99:d7:f9:df:54:16:7b:7e:aa:50:a1:8f:1a:19:29:8d:b3:1b:
         89:a7:69:4e:01:1f:9d:12:ca:18:5d:e3:02:13:e0:a7:e4:94:
         96:ef:c0:68:ee:c3:eb:33:1c:be:37:15:18:14:7d:fb:d2:b9:
         19:62:c5:db:1a:04:52:99:03:ba:84:60:d1:58:07:29:df:84:
         4d:b0:ee:88:b7:f0:ab:ba:69:c7:f7:d7:af:65:ca:91:82:7b:
         87:08:58:f2:4b:8c:78:03:bb:94:88:49:87:3b:94:1b:09:3e:
         00:ad:7d:e9:c5:55:5c:b9:05:73:cf:48:bf:de:32:d9:a4:ba:
         47:5c:d5:7e:43:f6:06:79:84:bb:e5:42:65:3d:67:32:00:e1:
         04:58:97:2d:b0:cb:d7:b2:20:fc:a0:a6:8f:22:6b:83:a1:fe:
         df:23:0d:f1:76:04:64:c9:1b:cc:a6:2f:7f:18:88:01:5f:a5:
         d9:c5:e7:17:10:65:c9:a7:2d:ef:48:83:16:f6:20:09:cf:4b:
         d3:45:72:50:6f:e7:ca:01:3a:97:2f:37:ec:45:d3:5e:01:22:
         39:83:eb:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 03:37:38 2025 by rpki-client