Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/323830343a366130303a3a2f33322d3335203d3e20323730333035.roa
File:                     323830343a366130303a3a2f33322d3335203d3e20323730333035.roa (raw, json)
Hash identifier:          olrNfoPcAEPsVrQnxnnLCM3xH3Y8kV+i68DRMh3WRzs=
Subject key identifier:   93:10:79:D3:32:B6:EC:BF:9F:90:37:78:53:8F:9B:F0:71:41:1C:64
Certificate issuer:       /CN=995CA671BCB4BF29859E88524A16F3FB15F9BD0C
Certificate serial:       2A8EDDABBE0F2C77F348AB0EF27EC89D506707
Authority key identifier: 99:5C:A6:71:BC:B4:BF:29:85:9E:88:52:4A:16:F3:FB:15:F9:BD:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/995CA671BCB4BF29859E88524A16F3FB15F9BD0C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/323830343a366130303a3a2f33322d3335203d3e20323730333035.roa
Signing time:             Tue 27 Feb 2024 17:36:41 +0000
ROA not before:           Tue 27 Feb 2024 17:31:41 +0000
ROA not after:            Tue 25 Feb 2025 17:36:41 +0000
asID:                     270305
IP address blocks:        2804:6a00::/32 maxlen: 35
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:8e:dd:ab:be:0f:2c:77:f3:48:ab:0e:f2:7e:c8:9d:50:67:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995CA671BCB4BF29859E88524A16F3FB15F9BD0C
        Validity
            Not Before: Feb 27 17:31:41 2024 GMT
            Not After : Feb 25 17:36:41 2025 GMT
        Subject: CN=931079D332B6ECBF9F903778538F9BF071411C64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:d3:b0:e2:d8:51:29:19:97:ba:22:eb:d2:42:
                    8c:54:29:cf:00:27:2d:9e:56:d9:f0:35:7c:75:74:
                    08:71:ba:5b:a4:c1:82:5f:45:64:5d:95:17:6a:7e:
                    20:d1:85:25:6e:57:20:fb:c4:4f:0c:00:c3:f8:b1:
                    cb:80:83:29:a8:75:a9:ca:33:68:c2:89:ce:ee:e8:
                    e7:c2:a2:92:03:d0:5a:8d:c7:e5:7d:95:01:ed:be:
                    45:e2:06:a9:58:ff:a2:46:2e:1d:08:0b:fa:5f:9f:
                    4f:3c:c8:bf:9e:4b:a8:0d:e8:51:6d:3b:84:bc:7b:
                    d0:a6:3b:bd:84:4e:78:54:a4:4c:f8:30:a6:b6:a4:
                    b7:02:41:3e:c8:b6:51:20:72:98:f3:3b:cd:d7:a7:
                    6e:2c:71:22:f6:2e:cc:b1:88:1f:06:9e:24:c5:65:
                    00:72:06:bc:82:c7:31:3c:a5:2d:c9:65:83:6e:7f:
                    d4:32:f9:03:7b:42:30:a3:30:1a:cd:ce:0c:67:98:
                    d0:a7:c6:93:e2:3f:09:f3:84:9e:d1:79:bc:0a:55:
                    0b:9a:b1:f3:9f:00:92:73:8b:ac:ab:4b:3f:bc:53:
                    a8:80:02:42:4a:6b:76:6f:b2:67:8e:b1:c0:4e:85:
                    bc:78:ea:1b:e1:95:4b:c7:79:b0:96:1a:69:e3:ab:
                    75:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:10:79:D3:32:B6:EC:BF:9F:90:37:78:53:8F:9B:F0:71:41:1C:64
            X509v3 Authority Key Identifier:
                keyid:99:5C:A6:71:BC:B4:BF:29:85:9E:88:52:4A:16:F3:FB:15:F9:BD:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/995CA671BCB4BF29859E88524A16F3FB15F9BD0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/995CA671BCB4BF29859E88524A16F3FB15F9BD0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/323830343a366130303a3a2f33322d3335203d3e20323730333035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6a00::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:d4:18:4a:82:09:71:ac:41:88:61:b9:92:7d:b2:2d:65:10:
         e5:f7:a9:0c:13:ce:e2:e0:93:14:3a:d8:8b:48:4a:8d:9b:2f:
         37:04:45:a0:a3:1e:19:22:fc:a8:5b:a2:33:d3:aa:48:ed:9f:
         b4:d8:8d:be:3a:c7:c8:ca:9e:16:41:7b:0a:6d:22:b9:09:38:
         cd:b3:63:3e:74:8f:bb:ba:24:23:ec:1a:a4:fd:ad:1d:13:09:
         ac:c2:6b:4c:f3:15:98:49:dd:dd:e4:43:40:96:ff:6e:35:e5:
         ec:8c:88:5b:9e:73:3d:d9:04:dc:96:7e:1b:43:a4:39:37:fb:
         6f:32:55:7a:32:8e:03:f9:1e:73:31:91:d6:bb:28:c2:6d:3f:
         e5:92:e8:95:eb:34:61:3f:04:22:27:3a:1e:9d:8c:32:7c:3a:
         5e:ae:16:bd:15:d5:f1:5b:ae:d6:0b:25:01:f6:ce:61:e6:95:
         8b:ea:30:82:c2:8d:34:48:c2:dd:b9:86:f1:21:df:5b:8b:41:
         b7:61:4c:77:b6:80:e6:f9:5b:7e:67:7a:ca:5d:e5:df:b3:4c:
         88:43:bd:fe:44:4d:97:05:8b:ff:80:61:63:3c:9a:b6:e8:61:
         1a:e5:f7:9a:68:dc:5f:13:f9:d9:97:e7:73:7c:12:34:a2:98:
         72:a0:b6:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:22:36 2025 by rpki-client