Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H3DFxouR7EKGTRz3ZbfSBuhy24PPqubYwrXeQT6GURG5/0/323830343a373638303a3a2f33332d3333203d3e20323731313136.roa
File:                     323830343a373638303a3a2f33332d3333203d3e20323731313136.roa (raw, json)
Hash identifier:          MDDRjlno95W+b/vFECYxe+qCSrEOrNkBG7LURSD3lc8=
Subject key identifier:   5F:C9:28:5E:F6:7D:EA:01:60:A9:61:F8:7B:70:95:FE:E1:5D:89:2F
Certificate issuer:       /CN=BFA24157A827C97984C7CAFBEA2076F6E728252D
Certificate serial:       2A702CB36F86523486C4994760BA5C4499CB5D3E
Authority key identifier: BF:A2:41:57:A8:27:C9:79:84:C7:CA:FB:EA:20:76:F6:E7:28:25:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFA24157A827C97984C7CAFBEA2076F6E728252D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3DFxouR7EKGTRz3ZbfSBuhy24PPqubYwrXeQT6GURG5/0/323830343a373638303a3a2f33332d3333203d3e20323731313136.roa
Signing time:             Tue 21 May 2024 17:12:53 +0000
ROA not before:           Tue 21 May 2024 17:07:53 +0000
ROA not after:            Tue 20 May 2025 17:12:53 +0000
asID:                     271116
IP address blocks:        2804:7680::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:70:2c:b3:6f:86:52:34:86:c4:99:47:60:ba:5c:44:99:cb:5d:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BFA24157A827C97984C7CAFBEA2076F6E728252D
        Validity
            Not Before: May 21 17:07:53 2024 GMT
            Not After : May 20 17:12:53 2025 GMT
        Subject: CN=5FC9285EF67DEA0160A961F87B7095FEE15D892F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a3:de:9f:b1:77:2c:ac:4b:c8:4e:ed:ed:b3:
                    1f:78:51:51:15:11:f0:ef:dc:92:e9:cd:9e:79:96:
                    3f:8f:d5:a8:01:ed:5b:c5:2c:15:a3:4a:18:7c:b4:
                    e6:4a:ac:4c:1b:fa:cc:5c:f7:52:59:e1:3c:da:7d:
                    df:c5:74:26:a0:1b:e7:b6:71:ff:3e:de:5b:af:c7:
                    d3:bd:a2:b9:ac:1b:0c:e5:71:29:32:9e:60:29:f6:
                    57:e3:d5:5a:63:40:33:9f:bb:11:97:17:f8:5c:5d:
                    c1:f5:8a:2a:ef:23:70:0b:e5:26:ae:1b:72:19:6b:
                    97:ec:bd:b4:a4:15:58:c1:e3:23:3a:e3:a0:58:ab:
                    a0:6b:35:e1:37:b4:94:35:67:13:29:47:cb:58:d8:
                    07:d4:4f:90:9b:1b:21:5e:a6:b2:42:d9:37:c9:7e:
                    82:26:71:ce:a1:dc:a9:21:ab:00:c4:51:25:f3:c7:
                    ca:ca:30:20:3a:4e:a5:51:4a:61:87:6b:d3:22:c2:
                    33:e5:ce:6b:70:2d:74:4a:69:34:5c:02:27:db:33:
                    e7:6a:b5:4a:dc:64:4a:f7:30:90:17:98:8d:57:7c:
                    98:a1:1e:39:3e:df:fd:18:54:a8:49:3b:3e:dd:43:
                    97:ad:53:22:96:c1:81:d4:49:48:14:76:9e:da:12:
                    a0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:C9:28:5E:F6:7D:EA:01:60:A9:61:F8:7B:70:95:FE:E1:5D:89:2F
            X509v3 Authority Key Identifier:
                keyid:BF:A2:41:57:A8:27:C9:79:84:C7:CA:FB:EA:20:76:F6:E7:28:25:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3DFxouR7EKGTRz3ZbfSBuhy24PPqubYwrXeQT6GURG5/0/BFA24157A827C97984C7CAFBEA2076F6E728252D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFA24157A827C97984C7CAFBEA2076F6E728252D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3DFxouR7EKGTRz3ZbfSBuhy24PPqubYwrXeQT6GURG5/0/323830343a373638303a3a2f33332d3333203d3e20323731313136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7680::/33

    Signature Algorithm: sha256WithRSAEncryption
         76:28:6b:23:f0:05:18:b1:25:f6:72:6a:7b:29:29:36:54:ff:
         c0:e0:55:54:78:d4:82:42:e7:24:b9:d6:86:3b:b5:51:fd:3f:
         99:56:e9:a8:26:66:28:f1:fc:8b:4d:17:d0:cf:51:69:d1:d9:
         9a:97:59:bb:1f:64:f6:84:cc:3f:a6:79:a9:ca:cb:f9:b0:2f:
         6e:76:41:a7:5e:a9:b6:86:b6:2f:46:b5:7d:8f:f9:e8:ea:fe:
         4d:7b:e8:5b:dc:48:4a:26:00:01:b7:13:19:8e:da:22:31:34:
         a1:2e:0c:5e:c7:60:99:8a:25:01:74:4d:89:05:11:54:f7:a6:
         2b:2f:93:84:6f:5b:26:07:16:cd:7b:c0:8c:be:a8:de:6c:d7:
         89:5d:6b:27:82:6b:61:6d:4c:4d:5f:60:59:44:3a:9a:a4:d4:
         df:1f:7c:55:50:ea:2c:c9:cb:5e:52:7c:70:aa:e6:d9:75:67:
         e2:0f:6f:69:91:50:7f:9d:03:f5:11:15:c1:81:9a:e1:cf:00:
         97:85:d1:a0:ea:8f:a5:90:db:b0:06:e2:b8:b7:0e:10:be:32:
         9b:85:21:8a:5d:e8:90:08:6e:3c:69:c0:dc:77:ca:99:61:be:
         4b:aa:44:c4:58:a8:e8:b3:53:b0:87:45:a1:2b:a5:a4:66:46:
         dd:04:90:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:20:41 2025 by rpki-client