Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hg1Mn8SJ2PxjG7cehRwwQkLsNe9cRFybtjUdoByiDv36/0/323830343a346638383a313030303a3a2f33362d3336203d3e20323638333332.roa
File:                     323830343a346638383a313030303a3a2f33362d3336203d3e20323638333332.roa (raw, json)
Hash identifier:          Ujac3P9xqMz9gZRZijQMMRTpDfh4rzpcACTsfE0WZs4=
Subject key identifier:   88:EA:CD:E2:13:AE:D7:EE:AA:43:B0:00:10:D8:28:F8:A3:CA:E9:CD
Certificate issuer:       /CN=7C19C22F731585C7724C9B00FC1C4A09184909FF
Certificate serial:       30630049F85E0440F92D95D4B80C239A77B79A20
Authority key identifier: 7C:19:C2:2F:73:15:85:C7:72:4C:9B:00:FC:1C:4A:09:18:49:09:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C19C22F731585C7724C9B00FC1C4A09184909FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hg1Mn8SJ2PxjG7cehRwwQkLsNe9cRFybtjUdoByiDv36/0/323830343a346638383a313030303a3a2f33362d3336203d3e20323638333332.roa
Signing time:             Mon 27 May 2024 18:46:18 +0000
ROA not before:           Mon 27 May 2024 18:41:18 +0000
ROA not after:            Mon 26 May 2025 18:46:18 +0000
asID:                     268332
IP address blocks:        2804:4f88:1000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:63:00:49:f8:5e:04:40:f9:2d:95:d4:b8:0c:23:9a:77:b7:9a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C19C22F731585C7724C9B00FC1C4A09184909FF
        Validity
            Not Before: May 27 18:41:18 2024 GMT
            Not After : May 26 18:46:18 2025 GMT
        Subject: CN=88EACDE213AED7EEAA43B00010D828F8A3CAE9CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:2b:7a:9e:eb:47:47:c8:6c:71:c3:00:bc:53:
                    7b:16:73:2d:9b:9f:ad:01:59:ea:92:11:f1:e0:26:
                    45:1e:ec:e0:97:43:a3:71:8d:0d:1a:5f:af:05:7e:
                    16:90:bd:2c:3d:0e:4d:8b:9e:ea:04:37:73:e9:02:
                    55:80:69:d3:58:e2:a2:a5:af:1f:ff:e4:39:b3:de:
                    9d:06:fc:df:30:91:80:f1:46:58:a3:68:c9:bf:62:
                    a9:98:62:19:bd:f0:36:6f:43:e6:c6:52:73:04:d5:
                    df:08:e9:00:a9:36:6e:23:19:45:ac:00:a1:cd:8b:
                    04:af:80:61:09:a1:25:91:38:87:e0:6f:ef:78:3c:
                    ed:77:ae:63:07:32:e4:1a:71:dc:9f:fc:d5:dc:af:
                    57:f8:53:02:dc:d1:ee:92:f2:de:24:eb:eb:ba:f0:
                    8d:b0:72:ba:e0:e1:2d:c3:d2:7c:50:59:59:c2:3d:
                    dc:e1:2d:35:e4:fd:03:6b:5d:cb:9d:41:be:9f:09:
                    cd:45:a1:9f:18:4c:1b:03:6c:d4:fb:05:82:70:b4:
                    04:a2:01:e3:04:1c:04:d8:5a:b1:93:a4:3b:11:3d:
                    a5:a9:df:16:3b:f9:a7:db:6f:6d:51:d9:8e:f8:34:
                    44:ce:7c:fd:74:ad:f3:e9:f6:f0:80:03:8d:34:6c:
                    87:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:EA:CD:E2:13:AE:D7:EE:AA:43:B0:00:10:D8:28:F8:A3:CA:E9:CD
            X509v3 Authority Key Identifier:
                keyid:7C:19:C2:2F:73:15:85:C7:72:4C:9B:00:FC:1C:4A:09:18:49:09:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hg1Mn8SJ2PxjG7cehRwwQkLsNe9cRFybtjUdoByiDv36/0/7C19C22F731585C7724C9B00FC1C4A09184909FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C19C22F731585C7724C9B00FC1C4A09184909FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hg1Mn8SJ2PxjG7cehRwwQkLsNe9cRFybtjUdoByiDv36/0/323830343a346638383a313030303a3a2f33362d3336203d3e20323638333332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4f88:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         18:ab:25:b6:cb:0b:e9:e2:d6:3c:98:9a:bc:f9:7c:31:73:89:
         9b:ed:1f:81:fc:d8:77:6d:4e:7a:a5:ba:04:44:7d:06:63:b0:
         73:55:26:2d:a4:40:07:1d:ff:67:ae:fb:29:f5:84:cc:1e:fb:
         a2:38:be:df:17:ef:ce:3e:f3:25:37:02:56:fd:b1:70:b4:c4:
         9f:9a:93:78:07:a0:e9:d0:7f:1c:12:43:57:96:7f:a9:23:71:
         4d:e5:f9:c3:62:12:88:49:7c:d2:f6:2f:62:fa:1c:bd:54:00:
         f0:5e:da:04:25:74:d3:a5:0c:be:d1:16:76:62:91:00:1e:9f:
         c9:8a:54:12:97:66:27:65:03:be:5d:95:9d:6d:1a:fa:26:10:
         77:ae:4c:53:d9:e5:cf:ae:d6:90:04:d9:02:91:41:b9:b5:45:
         04:e0:83:4c:d6:ac:aa:5d:ac:0a:49:52:c2:3f:c8:ce:0f:47:
         aa:d5:16:f2:5f:06:41:31:01:8b:56:ab:58:30:28:f1:e8:78:
         c6:54:9a:b7:a9:fa:aa:bd:62:36:72:ff:0d:41:f9:44:b1:0b:
         9d:d2:b5:a7:48:e9:48:ad:09:64:c1:94:e9:33:75:10:b3:f1:
         a6:62:81:42:c1:a8:31:43:29:08:e2:d3:c1:26:94:f7:60:28:
         fd:bc:32:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 06:07:49 2025 by rpki-client