Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/0/323830343a373232303a3a2f33322d313238203d3e20323730383334.roa
File:                     323830343a373232303a3a2f33322d313238203d3e20323730383334.roa (raw, json)
Hash identifier:          odEDqsszeKXbulkHb7u1h7eJbYslaEX/1WruBww7mS4=
Subject key identifier:   36:57:7A:17:06:6A:64:80:50:BE:86:69:66:56:30:36:DE:9E:95:B3
Certificate issuer:       /CN=1714E24A15B85867FF793EB1A49B70A167B00FA1
Certificate serial:       023E458EE73C50D5812631D15741839A406E35ED
Authority key identifier: 17:14:E2:4A:15:B8:58:67:FF:79:3E:B1:A4:9B:70:A1:67:B0:0F:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1714E24A15B85867FF793EB1A49B70A167B00FA1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/0/323830343a373232303a3a2f33322d313238203d3e20323730383334.roa
Signing time:             Tue 08 Oct 2024 15:16:11 +0000
ROA not before:           Tue 08 Oct 2024 15:11:11 +0000
ROA not after:            Tue 07 Oct 2025 15:16:11 +0000
asID:                     270834
IP address blocks:        2804:7220::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:3e:45:8e:e7:3c:50:d5:81:26:31:d1:57:41:83:9a:40:6e:35:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1714E24A15B85867FF793EB1A49B70A167B00FA1
        Validity
            Not Before: Oct  8 15:11:11 2024 GMT
            Not After : Oct  7 15:16:11 2025 GMT
        Subject: CN=36577A17066A648050BE866966563036DE9E95B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:68:61:16:13:ef:0d:91:d1:dc:ea:23:c0:f6:
                    7a:eb:f1:24:f0:86:9a:ca:9e:3a:c0:b2:c1:f3:3e:
                    7f:ca:e0:37:09:d9:e3:ca:0f:79:5e:62:3c:d2:df:
                    11:bc:9a:ed:7d:7e:3e:75:10:9b:86:c2:5d:1e:4d:
                    5b:33:13:01:c6:cc:7a:2b:39:14:90:b1:b8:ec:0c:
                    da:ea:b9:d1:9a:4f:77:2d:61:ad:31:31:45:97:6a:
                    c1:32:02:7f:9e:0a:2a:22:06:1c:d3:0a:31:0e:72:
                    b2:6a:7e:0e:a0:df:c8:61:8f:aa:d4:65:cb:66:f7:
                    4f:cb:78:06:c6:39:ce:17:09:0b:76:ef:24:ee:ea:
                    0b:41:45:63:74:d4:0a:ec:29:4b:0d:5e:f5:be:9b:
                    4f:b6:32:d9:a0:57:0e:4a:85:2c:2e:e7:af:f2:9f:
                    b8:9e:4c:57:5e:4d:53:79:bf:a8:39:28:28:6b:c3:
                    a7:2e:de:ee:42:91:09:ed:06:84:45:97:a8:db:84:
                    19:27:5f:8a:d3:a7:b2:d3:bf:bf:eb:b6:55:63:7e:
                    33:5e:16:f2:af:8f:fd:fc:8e:bb:fd:93:d8:29:7b:
                    c4:c8:2b:82:71:2a:23:2c:74:35:61:02:da:8a:c8:
                    ab:3a:c7:63:9c:5f:7e:17:23:03:50:91:a0:f0:87:
                    37:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:57:7A:17:06:6A:64:80:50:BE:86:69:66:56:30:36:DE:9E:95:B3
            X509v3 Authority Key Identifier:
                keyid:17:14:E2:4A:15:B8:58:67:FF:79:3E:B1:A4:9B:70:A1:67:B0:0F:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/0/1714E24A15B85867FF793EB1A49B70A167B00FA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1714E24A15B85867FF793EB1A49B70A167B00FA1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/0/323830343a373232303a3a2f33322d313238203d3e20323730383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7220::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:eb:31:65:58:bf:10:24:96:45:37:d2:4f:d8:58:ef:15:d9:
         20:ca:75:cd:5b:71:6f:7e:6d:22:de:d0:54:75:78:86:30:8b:
         e6:9a:e3:26:31:57:d3:a8:31:63:37:23:e8:6f:45:a9:42:e7:
         11:55:08:c8:fe:b5:1c:fd:e5:eb:09:f3:83:e8:ae:6c:d3:30:
         bc:b5:a4:9c:83:9d:d6:a4:0c:d2:b5:3f:22:57:ed:be:3f:8b:
         d4:5e:58:c5:52:e1:80:fc:5d:75:cb:68:80:2f:ef:42:74:08:
         4f:17:fc:ca:b3:6f:34:75:b1:3c:bb:74:95:94:ea:72:26:80:
         6e:94:b6:07:88:50:80:0d:12:7f:63:42:83:63:4c:c1:4c:e4:
         9c:14:52:5a:4f:56:f1:0e:cd:61:86:06:ad:1e:25:8f:78:64:
         df:36:b1:8d:dc:e3:13:39:ea:0a:3c:d1:77:7e:58:0a:7d:8f:
         59:f1:31:cf:70:f9:25:78:bd:c2:48:0f:5a:c0:1a:f1:ce:51:
         31:09:9a:54:62:3e:d6:35:10:15:2e:86:7c:58:e5:ea:ee:9c:
         c9:08:56:69:b2:1c:45:f1:07:bb:19:08:34:e7:5c:b9:4c:7f:
         f3:56:db:5e:a4:73:7f:7a:ab:fa:95:72:59:9d:1a:90:e6:c6:
         bf:ac:3a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:01:17 2025 by rpki-client