Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H45i8fNoT2G9yqVJseod1v8NoLvET7gAwkL3Hyg8q182/0/323830343a6264633a3a2f33322d3438203d3e203532383636.roa
File:                     323830343a6264633a3a2f33322d3438203d3e203532383636.roa (raw, json)
Hash identifier:          Pd0TftFpnzBxbWDjRjVRpllKhZr2xZGCZ3ahmOIcRUc=
Subject key identifier:   CC:C4:8E:0D:05:BD:C3:C8:51:AE:0E:94:52:C5:72:32:E8:C0:B1:12
Certificate issuer:       /CN=DA7937B89F3B0861490B3DD6174BE1D51AD2A94C
Certificate serial:       10CB08814500FE71157098E8C5D427737F0DC980
Authority key identifier: DA:79:37:B8:9F:3B:08:61:49:0B:3D:D6:17:4B:E1:D5:1A:D2:A9:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA7937B89F3B0861490B3DD6174BE1D51AD2A94C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H45i8fNoT2G9yqVJseod1v8NoLvET7gAwkL3Hyg8q182/0/323830343a6264633a3a2f33322d3438203d3e203532383636.roa
Signing time:             Wed 12 Jul 2023 20:58:57 +0000
ROA not before:           Wed 12 Jul 2023 20:53:57 +0000
ROA not after:            Wed 10 Jul 2024 20:58:57 +0000
asID:                     52866
IP address blocks:        2804:bdc::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:cb:08:81:45:00:fe:71:15:70:98:e8:c5:d4:27:73:7f:0d:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA7937B89F3B0861490B3DD6174BE1D51AD2A94C
        Validity
            Not Before: Jul 12 20:53:57 2023 GMT
            Not After : Jul 10 20:58:57 2024 GMT
        Subject: CN=CCC48E0D05BDC3C851AE0E9452C57232E8C0B112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:28:37:43:a9:b0:cc:ab:e2:9b:a9:a6:b3:7d:
                    87:37:f5:72:02:cd:20:f9:13:dc:2c:f7:e9:01:31:
                    75:2b:6f:57:4d:39:43:96:a1:76:47:4d:fb:b3:26:
                    69:8e:a0:72:2e:d4:ce:15:dc:e6:2e:c1:e5:d0:d7:
                    c7:83:b5:ca:a8:c3:11:94:ad:10:0b:81:1f:2f:67:
                    9f:26:42:e4:1d:1e:ba:af:04:27:54:27:f4:12:91:
                    1c:57:76:02:04:de:4c:50:ab:df:3a:51:1e:8d:1a:
                    49:f3:7e:b7:84:fd:e0:62:91:a1:be:13:dc:c2:53:
                    56:23:5a:17:4b:42:23:de:4e:c6:1e:24:4d:80:04:
                    79:53:4c:3c:cd:9d:80:e2:8f:7e:a1:be:7a:d4:7a:
                    2d:99:e3:83:f0:e8:28:77:10:5f:32:f0:dc:2e:06:
                    9e:30:98:30:ed:55:cf:7b:19:35:48:ce:48:1e:98:
                    70:06:cb:94:7d:45:2d:86:6b:bd:92:2a:cc:51:b7:
                    2b:70:d1:b2:e6:c9:e7:4f:4c:60:c1:96:1e:bb:11:
                    78:57:b3:75:76:33:b0:2a:b1:b4:49:5b:e7:71:45:
                    e5:00:89:2a:d9:0a:bd:52:d3:87:2d:ff:67:51:02:
                    b5:2d:ae:58:e6:04:2b:10:9e:14:a6:b2:a6:e5:9c:
                    14:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:C4:8E:0D:05:BD:C3:C8:51:AE:0E:94:52:C5:72:32:E8:C0:B1:12
            X509v3 Authority Key Identifier:
                keyid:DA:79:37:B8:9F:3B:08:61:49:0B:3D:D6:17:4B:E1:D5:1A:D2:A9:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H45i8fNoT2G9yqVJseod1v8NoLvET7gAwkL3Hyg8q182/0/DA7937B89F3B0861490B3DD6174BE1D51AD2A94C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA7937B89F3B0861490B3DD6174BE1D51AD2A94C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H45i8fNoT2G9yqVJseod1v8NoLvET7gAwkL3Hyg8q182/0/323830343a6264633a3a2f33322d3438203d3e203532383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:bdc::/32

    Signature Algorithm: sha256WithRSAEncryption
         af:63:19:1a:ef:f8:c3:65:fe:20:8b:4a:09:cd:43:2c:57:4e:
         87:d7:ff:e9:76:3a:21:e1:ae:19:4e:20:f4:04:3a:3d:71:63:
         d8:f5:7e:6b:1c:7e:54:57:0b:94:fc:1f:c0:00:19:9c:4b:83:
         cf:77:6e:68:63:b6:43:bd:b0:c4:18:9b:21:16:c8:0a:d5:a0:
         ff:15:5d:ac:ab:2b:79:e5:14:3e:8f:95:c9:27:b1:1a:7e:f6:
         08:17:18:10:33:9f:b1:c4:62:94:f0:83:b9:7e:19:06:1e:f8:
         8d:9a:9b:19:de:8f:2c:16:8e:c8:d9:e0:5b:48:fb:f5:f2:51:
         7e:ee:0a:49:39:8a:94:28:43:5f:ac:1a:86:c3:ce:e0:dc:21:
         47:c8:ae:bb:17:c9:2f:bc:ea:8f:4d:79:6c:80:2c:15:a9:60:
         eb:9f:b4:58:86:bd:1c:0e:1b:40:d9:ff:2d:01:53:e9:1e:9d:
         4b:8b:f8:cb:35:8e:57:0e:aa:2f:5f:9c:39:38:29:0e:ef:39:
         87:15:81:b0:48:4c:5f:e8:a2:d9:16:44:c9:78:31:9a:7d:5a:
         16:1e:0e:15:29:83:e4:00:04:d5:8e:69:02:de:79:6b:8b:63:
         cf:a5:0c:cf:05:9b:6b:65:8d:6b:f7:1c:e9:ff:75:c1:0c:1b:
         fc:4b:03:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:22:38 2025 by rpki-client