Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J4Eg9KnE3bCK82WrBusNbH9wd6Pe8QZVaACByEWhXQqG/0/323830343a356238633a383030303a3a2f33342d3334203d3e20323638383534.roa
File:                     323830343a356238633a383030303a3a2f33342d3334203d3e20323638383534.roa (raw, json)
Hash identifier:          qZ3lRmu3KFPqVAvzdCtHPSmZ28Bm1j78WrWE4z30Rdg=
Subject key identifier:   3B:D7:97:49:FB:D0:7D:A2:EB:B0:37:65:53:73:F9:78:49:50:82:E6
Certificate issuer:       /CN=7BB6A1BE9B83789D0AA4CEA6F7BA3F6623DB841F
Certificate serial:       4A9ABDBB2BFC91F118326DF7B9131B7840F9D99A
Authority key identifier: 7B:B6:A1:BE:9B:83:78:9D:0A:A4:CE:A6:F7:BA:3F:66:23:DB:84:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7BB6A1BE9B83789D0AA4CEA6F7BA3F6623DB841F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4Eg9KnE3bCK82WrBusNbH9wd6Pe8QZVaACByEWhXQqG/0/323830343a356238633a383030303a3a2f33342d3334203d3e20323638383534.roa
Signing time:             Fri 10 Nov 2023 19:17:25 +0000
ROA not before:           Fri 10 Nov 2023 19:12:25 +0000
ROA not after:            Fri 08 Nov 2024 19:17:25 +0000
asID:                     268854
IP address blocks:        2804:5b8c:8000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:9a:bd:bb:2b:fc:91:f1:18:32:6d:f7:b9:13:1b:78:40:f9:d9:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BB6A1BE9B83789D0AA4CEA6F7BA3F6623DB841F
        Validity
            Not Before: Nov 10 19:12:25 2023 GMT
            Not After : Nov  8 19:17:25 2024 GMT
        Subject: CN=3BD79749FBD07DA2EBB037655373F978495082E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:fc:d1:d3:ff:08:33:17:67:e2:5a:f6:ec:b5:
                    4b:59:a2:44:5a:3b:f9:93:d9:8d:2f:01:b1:05:ea:
                    f5:5e:72:24:94:9c:19:e8:92:7f:ea:0c:a6:02:ab:
                    99:69:30:a5:83:06:bd:a4:35:5f:4d:9e:0f:88:9d:
                    98:c6:fd:2c:ea:af:d6:44:43:e0:58:eb:29:34:36:
                    3f:30:38:4d:f9:71:46:ba:7c:23:1f:f1:9b:72:40:
                    93:4d:bd:c1:84:12:0b:04:f1:f6:29:de:10:63:c8:
                    da:f9:9c:bf:9d:71:e8:f7:70:7d:c3:de:bc:d8:3b:
                    7c:67:86:88:a1:42:44:0c:70:af:7c:c2:a0:24:37:
                    db:a3:82:bc:7a:c5:bd:d9:d9:56:9a:fb:9b:53:ab:
                    3c:2f:81:26:51:a5:19:9a:b9:05:3f:93:c1:41:5e:
                    e9:50:e9:e6:e9:33:f4:fa:e9:54:9a:32:ae:97:19:
                    23:ce:f4:6c:7e:84:eb:97:ef:92:7f:97:5a:17:b0:
                    f5:d0:87:a7:0b:1c:74:9d:2e:bc:9d:d8:e7:20:ef:
                    9f:53:d3:ce:33:11:db:c2:89:67:54:d1:41:83:fa:
                    e0:0c:2e:64:2f:85:b0:ef:08:f9:e5:26:7c:49:1a:
                    21:d3:60:02:89:6d:2b:84:03:32:2f:11:22:b7:cb:
                    e7:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:D7:97:49:FB:D0:7D:A2:EB:B0:37:65:53:73:F9:78:49:50:82:E6
            X509v3 Authority Key Identifier:
                keyid:7B:B6:A1:BE:9B:83:78:9D:0A:A4:CE:A6:F7:BA:3F:66:23:DB:84:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4Eg9KnE3bCK82WrBusNbH9wd6Pe8QZVaACByEWhXQqG/0/7BB6A1BE9B83789D0AA4CEA6F7BA3F6623DB841F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7BB6A1BE9B83789D0AA4CEA6F7BA3F6623DB841F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4Eg9KnE3bCK82WrBusNbH9wd6Pe8QZVaACByEWhXQqG/0/323830343a356238633a383030303a3a2f33342d3334203d3e20323638383534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5b8c:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         34:4a:8f:cc:89:f1:7e:f1:ee:70:65:c0:44:98:92:0f:be:6d:
         4d:b0:2c:d6:ae:83:23:11:19:e7:60:4a:6e:bd:21:25:9b:06:
         d4:da:9e:53:b4:4d:a1:a1:1a:b3:cf:25:29:d7:84:4d:da:ca:
         2d:21:07:02:5c:76:77:59:47:ce:d7:ef:4c:13:04:96:7d:0a:
         22:c3:8a:81:af:d0:dd:90:78:fa:05:62:e4:b4:67:ad:4d:3e:
         82:a4:00:f2:c0:15:e2:b9:92:12:92:04:bf:2a:c5:8c:e2:1b:
         e1:3b:ce:12:ed:48:58:52:d3:6f:84:4c:38:85:09:80:46:79:
         d7:30:44:d8:1b:bf:c8:5e:3c:b0:d4:1f:fe:aa:4f:2b:f9:80:
         31:13:81:cb:b1:7c:b7:df:cd:2f:ce:29:36:0a:13:fe:7d:28:
         0b:d3:c0:8b:94:53:71:65:d2:d8:1f:d7:e2:29:3e:9f:77:7a:
         32:02:63:7c:38:a8:80:e8:6a:35:82:5d:38:c4:8a:d0:9a:3f:
         56:38:38:87:31:68:b4:bd:fe:38:3e:d4:bc:fa:6e:6a:5f:57:
         5e:81:49:51:1c:20:ee:37:89:1d:cf:9d:e2:2f:a5:3f:bd:eb:
         e5:27:93:11:b6:ff:ab:a2:b9:3d:e9:12:bb:2b:a1:b9:88:98:
         67:ff:b6:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:24:17 2025 by rpki-client