Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JBXUKuzKFkeJpR3HwR8Ce1ihExPfK26dcUdz3BseFgFw/0/323830343a353562303a3a2f33322d313238203d3e20323637393530.roa
File:                     323830343a353562303a3a2f33322d313238203d3e20323637393530.roa (raw, json)
Hash identifier:          8M9OUOOnWSEZGzlXsMloUU7cfKWbtR8DXRw0yRgDs0o=
Subject key identifier:   D3:3D:9E:CB:2B:02:BC:B2:5A:0A:54:78:4C:1A:07:C1:18:C8:A5:26
Certificate issuer:       /CN=4DD43D290C6B438D838E22B1B66200783B627EC5
Certificate serial:       61841A2BB103E50EF11B00FC3B43A88DA6FA57FD
Authority key identifier: 4D:D4:3D:29:0C:6B:43:8D:83:8E:22:B1:B6:62:00:78:3B:62:7E:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4DD43D290C6B438D838E22B1B66200783B627EC5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JBXUKuzKFkeJpR3HwR8Ce1ihExPfK26dcUdz3BseFgFw/0/323830343a353562303a3a2f33322d313238203d3e20323637393530.roa
Signing time:             Wed 20 Mar 2024 14:16:30 +0000
ROA not before:           Wed 20 Mar 2024 14:11:30 +0000
ROA not after:            Wed 19 Mar 2025 14:16:30 +0000
asID:                     267950
IP address blocks:        2804:55b0::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:84:1a:2b:b1:03:e5:0e:f1:1b:00:fc:3b:43:a8:8d:a6:fa:57:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DD43D290C6B438D838E22B1B66200783B627EC5
        Validity
            Not Before: Mar 20 14:11:30 2024 GMT
            Not After : Mar 19 14:16:30 2025 GMT
        Subject: CN=D33D9ECB2B02BCB25A0A54784C1A07C118C8A526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b5:7e:5d:6f:92:74:c6:f4:50:ec:e4:ed:6c:
                    30:f9:e9:d7:d6:1d:39:0e:ca:0e:8a:35:03:08:d5:
                    e7:bc:3d:2a:be:f1:6e:24:04:8b:6c:b7:9c:a0:bf:
                    d2:12:86:e2:fd:ca:11:a5:ef:59:17:63:5d:bc:1b:
                    e8:d2:6f:a2:84:18:16:59:02:94:d6:1c:55:63:0c:
                    b4:a4:e9:bd:7f:93:51:07:c5:6d:5a:07:74:5e:ec:
                    59:aa:dc:aa:95:d7:56:40:70:2f:12:fe:62:3b:70:
                    8a:c9:19:19:31:91:da:d4:58:cd:79:75:ac:3e:90:
                    5a:f6:a7:c0:21:8a:cc:a4:59:78:ef:57:74:c8:82:
                    52:9d:d3:c1:0b:6f:14:57:50:e4:34:c3:90:72:f3:
                    65:0e:27:ef:2a:f4:fd:98:67:3a:c6:1c:e8:37:96:
                    e2:70:8b:2f:fb:a3:01:46:72:f1:25:81:ba:0d:6e:
                    c1:e1:f3:06:26:f4:4f:ac:1d:f7:f4:59:5b:5a:ca:
                    08:a7:88:0d:2b:e5:7a:eb:aa:58:67:87:7a:41:37:
                    42:e6:4f:1c:1b:b7:80:78:91:3f:88:78:33:93:0a:
                    9e:5e:d5:3c:ad:62:09:87:7f:c2:9d:01:17:6c:f3:
                    d7:aa:8a:2e:10:2f:c8:d0:75:91:33:30:08:f6:d3:
                    b8:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:3D:9E:CB:2B:02:BC:B2:5A:0A:54:78:4C:1A:07:C1:18:C8:A5:26
            X509v3 Authority Key Identifier:
                keyid:4D:D4:3D:29:0C:6B:43:8D:83:8E:22:B1:B6:62:00:78:3B:62:7E:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JBXUKuzKFkeJpR3HwR8Ce1ihExPfK26dcUdz3BseFgFw/0/4DD43D290C6B438D838E22B1B66200783B627EC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4DD43D290C6B438D838E22B1B66200783B627EC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JBXUKuzKFkeJpR3HwR8Ce1ihExPfK26dcUdz3BseFgFw/0/323830343a353562303a3a2f33322d313238203d3e20323637393530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:55b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:71:b9:bc:52:71:3a:2a:7c:21:01:46:d4:53:47:fd:2a:42:
         b4:48:55:89:94:f4:a3:b1:cc:0d:8b:67:cd:44:c5:c9:49:76:
         ef:55:c4:15:aa:24:8f:b8:d5:c3:d1:b1:e6:eb:68:25:3b:29:
         88:14:6e:57:23:c1:38:e0:30:c0:39:4e:bb:ca:d5:e2:b9:c2:
         22:fa:d2:bb:96:e6:cf:2c:e8:88:01:22:2d:9d:65:b4:8f:64:
         ed:12:e1:b7:34:52:ef:6f:d8:8f:ac:40:8b:73:e4:26:bb:06:
         ba:85:81:82:be:c5:6e:21:35:3c:12:8c:6f:43:9e:a5:af:0e:
         ff:96:72:ff:6a:41:b2:10:90:5d:e9:ee:0e:5a:d7:a9:19:7f:
         cd:10:b3:ab:0d:15:01:4b:d4:31:31:79:71:93:ac:f4:3f:9d:
         f5:b1:7f:88:c1:07:4f:79:72:ea:e2:52:d1:a5:27:f3:e8:c0:
         0f:30:95:38:3c:ed:f6:cf:52:15:89:a5:83:46:b9:c0:45:59:
         b6:40:af:f1:8c:a5:6d:de:c7:f5:ce:95:c6:32:c0:d8:88:98:
         77:69:ce:7d:87:78:36:2e:dc:a8:df:20:86:62:6f:98:ca:a3:
         ea:2a:1c:79:4c:bf:11:0e:92:73:1a:00:d9:42:47:71:78:b0:
         66:d7:4e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:01:17 2025 by rpki-client