Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HCw6Q9jetNi2v9dF2SWPrV58kXcRh7ot6YKgjjGhNCVh/0/323830343a313931633a3a2f33322d3438203d3e203532363431.roa
File:                     323830343a313931633a3a2f33322d3438203d3e203532363431.roa (raw, json)
Hash identifier:          57Rz/kto7xnN2VtFlrL4GDdYWT9SmfNi++/9iom2ywc=
Subject key identifier:   48:13:20:A2:2A:FE:78:01:6A:EE:A2:34:4E:D8:AB:6A:1A:B7:4B:3F
Certificate issuer:       /CN=B40E0E8364390F2D35C0AFE6006575BE61886B2F
Certificate serial:       19CB509F05EFB582E44F3C851262F220E8DA28E7
Authority key identifier: B4:0E:0E:83:64:39:0F:2D:35:C0:AF:E6:00:65:75:BE:61:88:6B:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B40E0E8364390F2D35C0AFE6006575BE61886B2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HCw6Q9jetNi2v9dF2SWPrV58kXcRh7ot6YKgjjGhNCVh/0/323830343a313931633a3a2f33322d3438203d3e203532363431.roa
Signing time:             Mon 31 Oct 2022 17:47:05 +0000
ROA not before:           Mon 31 Oct 2022 17:42:05 +0000
ROA not after:            Mon 30 Oct 2023 17:47:05 +0000
asID:                     52641
IP address blocks:        2804:191c::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:cb:50:9f:05:ef:b5:82:e4:4f:3c:85:12:62:f2:20:e8:da:28:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B40E0E8364390F2D35C0AFE6006575BE61886B2F
        Validity
            Not Before: Oct 31 17:42:05 2022 GMT
            Not After : Oct 30 17:47:05 2023 GMT
        Subject: CN=481320A22AFE78016AEEA2344ED8AB6A1AB74B3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:03:8b:ea:f2:49:94:6d:da:18:0e:02:40:fe:
                    3c:70:1d:35:80:5c:fa:59:06:92:62:e2:3a:5c:7a:
                    9a:99:96:a0:57:6e:4a:54:1d:2d:a3:a1:77:72:15:
                    20:93:65:71:37:e5:18:71:31:d7:2e:3e:02:2f:d1:
                    34:82:4e:25:1e:90:6d:dd:f2:78:47:b3:44:30:4a:
                    2b:b5:59:fe:8d:3b:e6:15:51:3e:ef:96:ad:7a:4f:
                    ce:8e:93:ec:50:34:5b:3a:df:b8:2c:a5:12:ca:ce:
                    ae:61:66:fa:a7:3f:39:fb:34:f2:32:6d:6a:77:5c:
                    63:5c:d0:15:3c:5b:b4:cb:97:45:27:07:e7:ba:91:
                    38:83:29:b8:bc:26:da:57:9b:87:df:6f:de:4d:36:
                    8d:76:ed:7f:24:50:84:c3:a6:68:bb:71:73:f4:fd:
                    10:68:22:b5:37:d9:40:94:24:f6:88:12:97:fa:8c:
                    fd:98:7b:20:46:cd:ce:87:8d:d2:29:a6:47:d1:6c:
                    e5:1a:ac:d2:a2:20:60:87:b7:90:5f:02:e0:4b:02:
                    d9:c3:70:43:06:57:0b:b0:50:01:4f:8b:81:67:40:
                    7b:0a:02:de:96:2b:dd:44:86:21:9e:d8:b6:5d:4a:
                    7b:45:4a:f8:f9:ab:da:02:f0:9b:68:42:a5:fc:38:
                    62:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:13:20:A2:2A:FE:78:01:6A:EE:A2:34:4E:D8:AB:6A:1A:B7:4B:3F
            X509v3 Authority Key Identifier:
                keyid:B4:0E:0E:83:64:39:0F:2D:35:C0:AF:E6:00:65:75:BE:61:88:6B:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HCw6Q9jetNi2v9dF2SWPrV58kXcRh7ot6YKgjjGhNCVh/0/B40E0E8364390F2D35C0AFE6006575BE61886B2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B40E0E8364390F2D35C0AFE6006575BE61886B2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HCw6Q9jetNi2v9dF2SWPrV58kXcRh7ot6YKgjjGhNCVh/0/323830343a313931633a3a2f33322d3438203d3e203532363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:191c::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:f2:06:36:90:23:5a:e1:14:6e:71:d4:f6:ee:34:70:0f:7b:
         37:c8:2e:7a:7e:cc:38:fa:c8:98:c5:1c:b8:3e:08:1c:95:04:
         6d:9e:d1:40:60:80:ba:02:d2:7d:3a:be:5a:90:4e:ba:8c:96:
         c3:0d:73:5e:ad:db:99:f3:9b:e6:7e:fd:4e:00:e5:06:42:2f:
         ed:c6:44:30:73:fb:2c:3f:e8:bf:19:a7:5a:07:70:a9:e2:a3:
         20:dd:53:68:5c:1d:e6:76:36:66:4b:29:73:97:3f:70:d2:4c:
         8b:53:97:11:d9:48:8b:52:7a:9b:b8:d1:8b:d2:ec:bc:6f:d7:
         15:26:79:61:ea:2d:a8:d8:b7:22:33:02:b0:74:52:48:33:b5:
         69:1f:16:39:1e:e1:c4:dd:c9:bb:c0:13:48:bc:07:df:ec:3a:
         85:87:4f:40:d3:11:fd:a0:b6:44:5b:12:3e:ae:97:d1:3d:dd:
         fd:ae:56:b6:8d:c9:76:c7:55:fe:a9:44:79:31:cd:5f:5b:99:
         1e:3c:fa:df:bf:51:8f:2e:c4:7c:18:b7:05:e1:1c:ab:29:b2:
         91:d5:7b:1b:f1:18:52:a8:fb:f0:7c:d5:5b:fa:9b:17:fd:c7:
         12:31:a9:3c:d8:43:0d:e7:c6:9a:c1:b2:4b:41:63:5d:a1:27:
         67:35:b2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:57 2025 by rpki-client