Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/3/323830343a386235633a343030303a3a2f33342d3334203d3e20323733373238.roa
File:                     323830343a386235633a343030303a3a2f33342d3334203d3e20323733373238.roa (raw, json)
Hash identifier:          yKG5aBpWVQAx1p8VSEcLSpZE8bkuzjW0UQvGgoQWJtk=
Subject key identifier:   81:85:A3:CF:50:BF:55:AE:4A:E5:38:1B:91:BF:72:8A:6C:BA:B2:F6
Certificate issuer:       /CN=49FFAF88F9E3352C5D66D4196264FC0F7B911B27
Certificate serial:       54373346A68ABB39AFEE491452F26174FEB5E489
Authority key identifier: 49:FF:AF:88:F9:E3:35:2C:5D:66:D4:19:62:64:FC:0F:7B:91:1B:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49FFAF88F9E3352C5D66D4196264FC0F7B911B27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/3/323830343a386235633a343030303a3a2f33342d3334203d3e20323733373238.roa
Signing time:             Mon 02 Dec 2024 14:06:28 +0000
ROA not before:           Mon 02 Dec 2024 14:01:28 +0000
ROA not after:            Mon 01 Dec 2025 14:06:28 +0000
asID:                     273728
IP address blocks:        2804:8b5c:4000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:37:33:46:a6:8a:bb:39:af:ee:49:14:52:f2:61:74:fe:b5:e4:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49FFAF88F9E3352C5D66D4196264FC0F7B911B27
        Validity
            Not Before: Dec  2 14:01:28 2024 GMT
            Not After : Dec  1 14:06:28 2025 GMT
        Subject: CN=8185A3CF50BF55AE4AE5381B91BF728A6CBAB2F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c9:44:56:ea:bb:54:2a:72:99:1d:fb:0b:65:
                    c0:1e:de:c4:66:f8:23:2d:49:37:6a:44:52:53:9e:
                    13:b4:1d:6c:d1:58:5e:d9:10:d0:a1:2b:f3:2c:8f:
                    b4:b9:14:11:f3:c8:06:51:43:b0:38:b0:da:b1:04:
                    a4:24:af:97:a7:fc:91:1f:8f:a3:ba:28:0c:4c:ba:
                    b3:76:24:51:70:05:ae:19:d3:7c:09:50:c9:a1:ec:
                    44:e2:25:f5:2b:80:78:d4:a3:1e:6b:60:82:24:42:
                    3f:35:69:d0:fd:61:94:d2:f3:36:3f:c6:9f:dc:bd:
                    6a:a1:d5:d6:24:3b:4b:f8:70:84:21:73:4e:c3:64:
                    61:a5:a6:a3:7b:8c:32:79:8d:ee:fd:ca:ec:a3:ae:
                    45:19:b0:52:74:12:9e:da:d8:10:c1:39:3f:61:24:
                    55:4d:ac:e8:8e:b4:57:73:88:71:84:c1:7e:0b:89:
                    d2:20:28:a8:67:75:93:9c:85:9f:8d:76:59:8a:0c:
                    ec:11:f0:e1:c3:fe:fc:e4:b8:0d:db:cb:ab:b5:cf:
                    84:0f:30:9e:6f:f6:9c:e1:b9:cf:07:6e:e0:dd:cb:
                    ae:a8:5e:c3:6d:dc:45:89:c0:0d:4c:eb:cf:69:1f:
                    bc:fe:5d:18:40:90:5a:1f:47:36:41:78:54:d6:6e:
                    6b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:85:A3:CF:50:BF:55:AE:4A:E5:38:1B:91:BF:72:8A:6C:BA:B2:F6
            X509v3 Authority Key Identifier:
                keyid:49:FF:AF:88:F9:E3:35:2C:5D:66:D4:19:62:64:FC:0F:7B:91:1B:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/3/49FFAF88F9E3352C5D66D4196264FC0F7B911B27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49FFAF88F9E3352C5D66D4196264FC0F7B911B27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/3/323830343a386235633a343030303a3a2f33342d3334203d3e20323733373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b5c:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         c5:2d:3f:f4:44:46:2f:13:8c:f3:34:b4:1d:56:e0:75:b9:c9:
         b4:fd:e0:dc:6e:fa:c1:5d:84:ba:6f:bc:95:54:7e:ef:80:48:
         91:97:fe:a2:b5:66:81:c8:1c:e1:ef:c9:00:0c:5f:42:5c:9e:
         19:60:58:8c:e3:13:65:6b:aa:29:bd:61:77:f7:9c:62:05:d3:
         a9:a4:31:a4:fb:81:18:ee:77:e9:dd:53:30:0d:2c:d5:b8:a8:
         71:fb:68:1d:44:d7:16:9d:6d:e6:3d:ef:2f:77:3d:00:71:00:
         80:2f:25:99:d0:47:e6:9e:e1:a8:e2:8e:ff:93:83:17:b5:bd:
         f9:43:45:b5:03:48:63:80:27:67:42:fa:4a:7f:8a:f5:1e:da:
         59:75:02:a7:d6:db:8e:f7:95:9d:af:0f:26:a8:ef:10:9f:cd:
         8a:60:a3:74:2a:ef:5e:ed:88:83:23:b6:36:4c:66:c2:ec:8d:
         c9:1a:17:37:af:60:3c:bf:a1:5f:20:e9:8a:9e:7c:75:bc:97:
         a2:f1:d2:1f:64:b3:4d:e9:02:4f:fe:cc:5f:38:bc:52:72:34:
         c1:8a:94:64:8a:7c:b2:94:b0:96:41:3f:30:ef:18:36:c8:18:
         4b:5c:88:a2:2a:49:cf:e4:94:2a:60:a2:17:99:08:c1:71:b8:
         32:6e:43:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:07:56 2025 by rpki-client