Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/dzWiTAiUb9G52z73jHFc7eSGrHoyWbqzkivTEwrMn39/0/323830343a3563303a353a3a2f34382d3438203d3e20323632353337.roa
File:                     323830343a3563303a353a3a2f34382d3438203d3e20323632353337.roa (raw, json)
Hash identifier:          qbwcD493h2Z9w8KPY3DfRIjBl+3AfV8kFv2wOvFGsKk=
Subject key identifier:   06:21:27:49:9F:E8:DA:7F:E0:5A:CD:25:60:AE:B2:4F:A9:59:99:F8
Certificate issuer:       /CN=2E8490418D7254F06B90EC2FC14B1102C4A069AD
Certificate serial:       70AE8B942217DD33B4012BF135394355BC787C3A
Authority key identifier: 2E:84:90:41:8D:72:54:F0:6B:90:EC:2F:C1:4B:11:02:C4:A0:69:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2E8490418D7254F06B90EC2FC14B1102C4A069AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/dzWiTAiUb9G52z73jHFc7eSGrHoyWbqzkivTEwrMn39/0/323830343a3563303a353a3a2f34382d3438203d3e20323632353337.roa
Signing time:             Fri 06 Oct 2023 18:52:35 +0000
ROA not before:           Fri 06 Oct 2023 18:47:35 +0000
ROA not after:            Fri 04 Oct 2024 18:52:35 +0000
asID:                     262537
IP address blocks:        2804:5c0:5::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:ae:8b:94:22:17:dd:33:b4:01:2b:f1:35:39:43:55:bc:78:7c:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E8490418D7254F06B90EC2FC14B1102C4A069AD
        Validity
            Not Before: Oct  6 18:47:35 2023 GMT
            Not After : Oct  4 18:52:35 2024 GMT
        Subject: CN=062127499FE8DA7FE05ACD2560AEB24FA95999F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:5a:f4:99:5b:40:d2:66:03:3e:72:e5:7f:57:
                    7b:9a:76:09:0f:ce:1b:2e:a6:4c:75:b7:36:c3:24:
                    85:e8:ff:a1:cc:de:ea:f8:0b:c9:d2:bd:84:12:db:
                    15:bc:f0:8f:44:d0:cb:4b:3d:59:2f:88:2d:ec:a1:
                    54:bf:d9:96:d9:34:f2:6e:ff:e4:e2:3f:22:e1:d5:
                    44:ff:4d:90:90:52:c8:e6:78:07:fe:fd:f1:4f:3e:
                    90:3c:52:bf:18:bf:d3:f7:36:af:9e:06:3c:af:b3:
                    06:66:74:d3:f5:91:1d:2e:ba:c8:31:fb:e9:fc:ae:
                    46:30:32:65:e0:de:6e:a5:71:5e:47:53:5f:03:aa:
                    90:55:49:34:b3:df:44:e4:26:0d:53:86:ef:8a:f1:
                    a0:08:18:11:c4:71:0a:c2:e5:f1:22:9a:6c:c1:af:
                    cf:33:00:1f:8d:ba:6f:45:2d:b1:fd:4a:97:d7:91:
                    eb:52:9a:2a:1e:92:8c:af:2c:76:a0:50:e9:5a:9f:
                    7b:f6:c7:8b:0d:ea:3a:75:cd:51:a4:5a:48:12:6e:
                    54:e8:dc:c1:3c:9c:63:11:44:cb:e2:9e:d6:77:7c:
                    f7:c4:63:6f:55:86:aa:87:4f:36:d9:f8:03:ff:ff:
                    34:d4:42:2f:7b:78:ab:b0:7b:e5:87:4b:d4:78:f6:
                    38:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:21:27:49:9F:E8:DA:7F:E0:5A:CD:25:60:AE:B2:4F:A9:59:99:F8
            X509v3 Authority Key Identifier:
                keyid:2E:84:90:41:8D:72:54:F0:6B:90:EC:2F:C1:4B:11:02:C4:A0:69:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/dzWiTAiUb9G52z73jHFc7eSGrHoyWbqzkivTEwrMn39/0/2E8490418D7254F06B90EC2FC14B1102C4A069AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2E8490418D7254F06B90EC2FC14B1102C4A069AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/dzWiTAiUb9G52z73jHFc7eSGrHoyWbqzkivTEwrMn39/0/323830343a3563303a353a3a2f34382d3438203d3e20323632353337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5c0:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:bb:e1:6d:e1:a0:25:5f:23:54:68:8b:62:df:53:c5:d3:c4:
         23:d1:18:11:f8:fa:d3:a0:2e:76:b7:cd:9c:99:8f:a6:a7:ee:
         2a:a5:94:f5:98:60:02:6c:d2:ce:68:7c:bb:99:c9:4d:c4:a4:
         a9:6f:ec:d1:23:0d:43:bf:fa:1e:a1:a1:7b:a6:8b:fe:79:eb:
         f3:4d:9c:a7:7c:fc:10:28:72:79:7d:55:39:a5:ad:f8:e4:cd:
         d8:bf:c5:6d:47:18:85:13:c9:e2:9a:1d:a1:02:9b:a7:af:a0:
         1f:05:cb:0f:e6:d4:d1:49:af:4a:84:e5:36:8e:56:0d:c8:eb:
         10:1c:10:9a:7e:e4:ce:d3:2d:1c:ed:86:72:28:cb:87:6b:96:
         a5:47:c1:69:2a:9e:a4:75:40:b4:50:5d:a8:df:38:05:f8:ab:
         d0:06:01:0f:6a:0a:79:f6:c3:a9:68:0d:6f:65:6d:46:3b:72:
         75:83:31:05:f2:b5:0e:f9:57:16:c9:40:5b:fd:1c:cb:60:cf:
         63:de:03:ec:16:3e:bb:03:d3:97:f7:db:51:d4:b7:1c:d8:c7:
         20:4f:e3:67:f1:9e:17:bf:8d:50:a8:9a:1b:5f:a7:80:68:39:
         fb:9f:e7:11:4b:12:15:04:c2:33:78:7e:79:e0:84:59:a1:bd:
         9d:3d:75:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:29:42 2025 by rpki-client