Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a3934303a3a2f34352d3435203d3e20323637343230.roa
File:                     323830343a346433633a3934303a3a2f34352d3435203d3e20323637343230.roa (raw, json)
Hash identifier:          iUh6c2CYyQ+3rwGHD3BbCbBZaUYR+mn+LHmGdBPosMk=
Subject key identifier:   4A:DB:16:6D:CF:5F:0C:27:BC:81:FB:E8:2B:AB:89:48:18:29:01:62
Certificate issuer:       /CN=C9993E4E7A469482F48DE6C557C1BE415E192A34
Certificate serial:       0A12790BA089B109BB39C590ED7869D218129080
Authority key identifier: C9:99:3E:4E:7A:46:94:82:F4:8D:E6:C5:57:C1:BE:41:5E:19:2A:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9993E4E7A469482F48DE6C557C1BE415E192A34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a3934303a3a2f34352d3435203d3e20323637343230.roa
Signing time:             Wed 28 Feb 2024 13:53:15 +0000
ROA not before:           Wed 28 Feb 2024 13:48:15 +0000
ROA not after:            Wed 26 Feb 2025 13:53:15 +0000
asID:                     267420
IP address blocks:        2804:4d3c:940::/45 maxlen: 45
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:12:79:0b:a0:89:b1:09:bb:39:c5:90:ed:78:69:d2:18:12:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9993E4E7A469482F48DE6C557C1BE415E192A34
        Validity
            Not Before: Feb 28 13:48:15 2024 GMT
            Not After : Feb 26 13:53:15 2025 GMT
        Subject: CN=4ADB166DCF5F0C27BC81FBE82BAB894818290162
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a2:68:93:5c:8c:62:44:22:e9:1c:44:85:32:
                    45:a8:54:9f:b9:df:f7:4b:95:c3:7a:12:db:44:ce:
                    0f:04:1a:0e:b6:e2:4a:07:5e:d9:cf:89:af:c9:3d:
                    62:a4:6a:32:d4:db:cf:03:19:9e:91:2a:10:9e:d3:
                    6b:49:3e:4d:ef:c6:3e:87:25:a5:31:d0:b3:69:38:
                    4e:a2:dd:5a:19:48:39:39:68:80:4c:96:4c:84:df:
                    66:b2:6f:ee:4c:ae:5c:b0:da:7b:5d:da:e3:22:65:
                    b6:1c:95:d7:c0:61:49:9f:89:ac:dc:44:81:79:7f:
                    b1:33:b5:ab:95:79:67:52:6e:fb:c0:54:fc:dc:a2:
                    42:e0:42:ab:9f:63:9a:c1:30:dc:66:f5:a3:24:5f:
                    c1:40:9e:55:f4:5b:1d:51:64:c5:6e:ca:42:f0:02:
                    9c:e2:3e:85:af:ce:db:f0:b0:94:8e:d1:11:eb:e4:
                    b0:49:6b:21:ec:76:c7:d4:68:88:e3:67:8e:43:f7:
                    15:7e:00:cf:86:17:92:dc:f6:99:e8:e4:0a:5a:ba:
                    d4:89:32:b5:98:3f:b6:37:1a:ed:12:3b:61:3f:42:
                    89:85:61:3a:0a:5f:9a:bc:ce:78:e6:d8:7d:a6:b7:
                    0d:47:7a:48:a9:1d:9c:77:c4:26:49:70:6b:1f:59:
                    ae:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:DB:16:6D:CF:5F:0C:27:BC:81:FB:E8:2B:AB:89:48:18:29:01:62
            X509v3 Authority Key Identifier:
                keyid:C9:99:3E:4E:7A:46:94:82:F4:8D:E6:C5:57:C1:BE:41:5E:19:2A:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/C9993E4E7A469482F48DE6C557C1BE415E192A34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9993E4E7A469482F48DE6C557C1BE415E192A34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a3934303a3a2f34352d3435203d3e20323637343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d3c:940::/45

    Signature Algorithm: sha256WithRSAEncryption
         6f:1f:a7:ea:a4:f5:91:55:44:0a:2d:26:ad:20:9f:d6:70:77:
         93:06:c0:d6:68:61:83:b3:3b:46:fb:44:ee:98:ec:33:6d:9c:
         05:5c:bd:a4:a7:12:e2:e9:d8:e0:5e:d7:8f:80:3e:57:ac:09:
         23:75:66:eb:a5:cd:48:74:67:1e:49:c6:27:da:be:79:3d:e5:
         6c:3f:56:5a:ea:e4:d0:ab:74:c3:6b:92:50:38:76:d4:7f:0e:
         1e:c6:b8:24:ed:14:78:1a:f1:f6:82:24:6d:ac:12:2b:37:c5:
         2d:5f:e5:db:c6:99:ee:6b:5b:62:42:1a:f0:8c:4e:90:8e:ea:
         d1:be:6c:37:b6:70:2a:d8:44:57:fc:ad:71:5b:66:93:c6:8f:
         03:41:79:34:72:9a:4e:88:a7:12:9b:5b:5f:6e:8f:69:0a:c2:
         ed:7a:60:6c:57:a0:9d:55:54:af:21:72:fa:d9:12:a2:8a:2b:
         a0:df:46:69:d7:c6:4f:8f:38:99:bf:3f:9d:c4:93:41:95:27:
         b3:36:cb:71:06:12:f4:bf:30:64:88:fd:78:15:03:b5:a9:2f:
         ec:7e:23:cb:28:a6:0c:89:e5:6f:53:43:81:05:19:c1:cf:d7:
         3f:52:5e:3f:a0:3d:a5:90:66:64:6a:ca:90:ae:6c:66:a4:1f:
         27:0b:0c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:49:14 2025 by rpki-client