Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/R5Uux39wmqd4u3xaBGhDikspkREWYkTjQLB5oc39rKz/0/323830343a336630633a3330303a3a2f34302d313238203d3e20323636363336.roa
File:                     323830343a336630633a3330303a3a2f34302d313238203d3e20323636363336.roa (raw, json)
Hash identifier:          pruf9jhxq2jdXUm5EXJe4MLSrae6uMsryZscY9YVkx0=
Subject key identifier:   DF:37:A6:45:65:C4:6D:BB:E0:AF:A8:DF:05:0F:73:82:81:F9:C0:8A
Certificate issuer:       /CN=9DF033D14D81024E6D99DAF86E479112805AE3E2
Certificate serial:       01CE7632A0B345B7BFD83FA872E99DDE8D7BDE0A
Authority key identifier: 9D:F0:33:D1:4D:81:02:4E:6D:99:DA:F8:6E:47:91:12:80:5A:E3:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9DF033D14D81024E6D99DAF86E479112805AE3E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/R5Uux39wmqd4u3xaBGhDikspkREWYkTjQLB5oc39rKz/0/323830343a336630633a3330303a3a2f34302d313238203d3e20323636363336.roa
Signing time:             Mon 06 Mar 2023 02:54:18 +0000
ROA not before:           Mon 06 Mar 2023 02:49:18 +0000
ROA not after:            Mon 04 Mar 2024 02:54:18 +0000
asID:                     266636
IP address blocks:        2804:3f0c:300::/40 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:ce:76:32:a0:b3:45:b7:bf:d8:3f:a8:72:e9:9d:de:8d:7b:de:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DF033D14D81024E6D99DAF86E479112805AE3E2
        Validity
            Not Before: Mar  6 02:49:18 2023 GMT
            Not After : Mar  4 02:54:18 2024 GMT
        Subject: CN=DF37A64565C46DBBE0AFA8DF050F738281F9C08A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:12:91:b8:93:d1:1e:86:54:85:64:df:18:fd:
                    e2:0e:82:05:7b:0c:e5:0f:f9:08:9b:7c:64:a1:6f:
                    7f:3d:fe:c5:ed:f9:ad:fe:ab:09:a9:c8:07:b9:58:
                    68:89:a6:9e:a0:aa:40:47:5b:6a:d6:55:9d:4e:c4:
                    6e:0b:e1:49:0e:1a:08:4e:b5:e9:3e:3f:d8:73:e7:
                    f8:8d:ef:18:b0:59:20:05:43:22:83:1e:81:56:23:
                    95:f6:bc:f4:ae:b4:e9:2b:8f:bc:6e:00:ba:4e:f7:
                    ef:29:95:81:c4:42:27:6e:1f:53:a7:11:d9:4e:9a:
                    4f:af:ca:6a:8e:71:51:e6:89:06:ee:c6:03:25:ba:
                    11:1c:34:ad:d2:54:57:4a:7c:aa:9f:ce:79:96:85:
                    81:20:01:06:c2:68:9d:f0:53:f7:f6:86:a6:4d:6a:
                    ce:91:bf:f6:f9:48:b8:92:7d:1a:57:1e:5e:a5:d6:
                    12:51:1f:81:fc:61:7d:3a:a1:67:e5:f4:ed:d7:00:
                    7c:ed:bf:0c:bc:3a:61:3e:82:a5:13:24:a4:26:9f:
                    a2:c8:f9:02:dd:be:ff:71:1a:a7:26:c7:a1:f3:52:
                    e6:e1:9d:5f:96:3d:f2:67:9a:a5:69:91:d1:d6:b3:
                    9b:d9:b7:0c:82:31:00:a2:56:11:a1:3f:3d:56:e7:
                    ef:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:37:A6:45:65:C4:6D:BB:E0:AF:A8:DF:05:0F:73:82:81:F9:C0:8A
            X509v3 Authority Key Identifier:
                keyid:9D:F0:33:D1:4D:81:02:4E:6D:99:DA:F8:6E:47:91:12:80:5A:E3:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/R5Uux39wmqd4u3xaBGhDikspkREWYkTjQLB5oc39rKz/0/9DF033D14D81024E6D99DAF86E479112805AE3E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9DF033D14D81024E6D99DAF86E479112805AE3E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/R5Uux39wmqd4u3xaBGhDikspkREWYkTjQLB5oc39rKz/0/323830343a336630633a3330303a3a2f34302d313238203d3e20323636363336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3f0c:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         1e:e0:2c:5b:62:e5:d1:23:b0:86:db:8a:aa:c2:42:c0:fd:13:
         b5:b6:d6:e0:40:d2:ef:fb:d5:de:5f:e0:ca:a1:7f:77:7f:f6:
         a9:42:c5:13:49:03:94:b8:18:94:1e:2b:21:bc:e5:63:d3:22:
         a8:d8:ff:16:c1:e9:be:4a:12:00:ff:fe:61:34:5f:29:84:50:
         b4:84:dd:c7:02:56:cf:ac:98:01:a0:2b:27:e2:47:4a:af:78:
         81:3f:7b:79:0e:d8:ca:0b:59:6b:66:1b:98:54:05:f9:1d:cf:
         18:0d:7d:c8:ac:43:81:98:ff:5a:92:51:a7:8e:a6:7d:00:74:
         e1:15:d3:06:ba:54:be:13:19:56:56:90:e4:6c:33:a1:14:93:
         c5:8f:d7:ff:ef:ee:11:ce:e5:3f:92:eb:2c:27:7e:f8:fb:25:
         15:3c:69:ae:44:0b:25:d4:c4:b9:7b:88:fb:cd:9d:b1:62:4b:
         ec:cd:27:ed:fd:58:71:c3:bd:29:da:34:25:62:a0:d0:e4:27:
         43:51:76:32:7a:7d:79:55:72:f5:6d:95:fd:57:c3:1d:8a:c0:
         73:dc:d2:1f:eb:5e:c5:19:e7:3f:a4:f2:94:a1:ea:7a:65:11:
         d0:6b:56:67:d3:81:10:7c:94:c2:5d:b1:b2:a1:53:5c:51:aa:
         1c:2d:a0:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:18:40 2025 by rpki-client