Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/UjU3K8aKYd4HCoELAQW43GTwEaCcanUhrU3XuGoGfNB/0/323830343a383638343a633030303a3a2f33362d3336203d3e20323732363439.roa
File:                     323830343a383638343a633030303a3a2f33362d3336203d3e20323732363439.roa (raw, json)
Hash identifier:          wyfba275VbhM149rS3oJbdpgTPlyw3dQ7pdeLaN2G5c=
Subject key identifier:   B9:67:2D:1C:51:29:95:C9:B6:C6:4A:E8:66:7D:23:CB:C6:F7:72:BD
Certificate issuer:       /CN=70427113C728F653176866A2E47D9746EA86B842
Certificate serial:       79797EADA2635602F0640C71EFE51B9E6F19D273
Authority key identifier: 70:42:71:13:C7:28:F6:53:17:68:66:A2:E4:7D:97:46:EA:86:B8:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70427113C728F653176866A2E47D9746EA86B842.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/UjU3K8aKYd4HCoELAQW43GTwEaCcanUhrU3XuGoGfNB/0/323830343a383638343a633030303a3a2f33362d3336203d3e20323732363439.roa
Signing time:             Tue 21 Nov 2023 15:11:20 +0000
ROA not before:           Tue 21 Nov 2023 15:06:20 +0000
ROA not after:            Tue 19 Nov 2024 15:11:20 +0000
asID:                     272649
IP address blocks:        2804:8684:c000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:79:7e:ad:a2:63:56:02:f0:64:0c:71:ef:e5:1b:9e:6f:19:d2:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70427113C728F653176866A2E47D9746EA86B842
        Validity
            Not Before: Nov 21 15:06:20 2023 GMT
            Not After : Nov 19 15:11:20 2024 GMT
        Subject: CN=B9672D1C512995C9B6C64AE8667D23CBC6F772BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:17:8a:ce:2d:d2:08:cf:98:5f:95:81:79:a0:
                    74:71:71:b2:d7:03:94:23:b3:71:c0:f7:da:5a:fb:
                    18:2d:6e:1f:5a:87:ff:43:51:d5:c9:83:a9:e1:af:
                    94:ba:79:f2:bb:61:71:0b:c8:18:41:9e:97:3b:2d:
                    85:56:ba:ca:84:fd:48:da:c7:46:42:c1:fd:3c:bb:
                    9d:cf:11:6c:15:be:8c:1b:85:c0:77:75:b6:fe:85:
                    89:09:45:88:59:a5:31:77:89:a7:17:3d:dd:5c:0a:
                    b4:55:72:f1:12:1d:f8:2a:3c:d3:cc:cc:56:e2:b6:
                    86:0a:4b:b3:e3:ba:f3:e1:a4:3d:e5:08:b0:90:ca:
                    05:64:8d:0e:9e:c1:ee:d6:b9:4a:ef:fc:f7:8d:25:
                    ef:33:c8:fa:40:76:63:ed:4a:1e:3d:03:8e:b7:b6:
                    46:a4:29:23:70:ae:4a:e5:5f:10:86:cc:aa:92:03:
                    1f:d5:f3:5a:fc:d4:5a:87:77:4d:15:73:71:0e:1f:
                    4f:fa:6f:96:24:f0:e1:d3:1b:c0:2d:c8:ce:21:8a:
                    db:0f:8a:88:df:5e:8c:73:b9:41:5e:a1:13:0c:50:
                    ee:96:65:85:04:7e:77:9c:60:06:4c:8d:51:c7:3f:
                    9a:72:21:48:f0:fc:93:50:cd:a0:d0:1a:a7:ff:c9:
                    b3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:67:2D:1C:51:29:95:C9:B6:C6:4A:E8:66:7D:23:CB:C6:F7:72:BD
            X509v3 Authority Key Identifier:
                keyid:70:42:71:13:C7:28:F6:53:17:68:66:A2:E4:7D:97:46:EA:86:B8:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/UjU3K8aKYd4HCoELAQW43GTwEaCcanUhrU3XuGoGfNB/0/70427113C728F653176866A2E47D9746EA86B842.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70427113C728F653176866A2E47D9746EA86B842.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/UjU3K8aKYd4HCoELAQW43GTwEaCcanUhrU3XuGoGfNB/0/323830343a383638343a633030303a3a2f33362d3336203d3e20323732363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8684:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         0d:f5:5e:21:17:87:56:7a:a1:36:ed:c0:d2:cc:79:06:52:d6:
         25:e6:03:b9:cb:31:4b:ea:bd:f9:b6:53:3c:ce:0a:1b:7b:26:
         cb:48:d2:10:2f:3a:7f:38:1b:55:e3:d4:56:7b:b2:b2:27:1a:
         27:54:86:20:a3:56:44:e5:aa:5a:68:a0:34:02:e7:fc:40:9f:
         29:a3:0c:11:9d:17:e9:da:6f:16:59:2e:41:ee:bb:58:6f:50:
         09:3f:81:a1:fe:bb:97:34:d6:d4:c6:ec:87:f3:ca:ad:08:58:
         a0:34:de:40:fe:84:dd:46:d4:87:a4:e5:fb:7e:6d:31:98:3d:
         17:e5:9e:6e:a9:fa:98:fa:7e:63:69:07:3d:51:21:41:f6:69:
         a5:3c:23:41:05:6d:09:27:5a:ef:92:7d:26:9d:20:49:11:3b:
         1a:f4:9c:89:05:f5:77:5e:2b:ca:9e:62:76:9b:fe:cb:f8:8b:
         3e:fb:01:fe:36:b7:6f:6a:8e:88:fa:3e:3f:5c:df:f6:b5:d7:
         67:d1:af:36:7a:da:a8:06:66:ba:1d:3b:36:7a:4b:fb:9c:20:
         49:8f:75:28:c1:a3:9c:63:f2:91:be:ac:0d:26:c5:f7:08:57:
         a5:fb:1a:0c:aa:d2:24:d4:60:00:93:c7:bb:73:16:a1:07:4e:
         bd:0b:57:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:38:06 2025 by rpki-client