Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/323830343a323836383a3a2f33322d3332203d3e20323633393631.roa
File:                     323830343a323836383a3a2f33322d3332203d3e20323633393631.roa (raw, json)
Hash identifier:          FlqMEevKYs0LILGNv7GxwMJyCMR0SSe/wSqSr+fXCdg=
Subject key identifier:   B3:68:BC:0D:61:9F:45:58:BD:BA:A4:73:EC:B5:95:16:45:5F:6F:4A
Certificate issuer:       /CN=0839492B6227EABB7726A5A064BEBE04E53C824A
Certificate serial:       0E03D984961E860ECB6BA59E334E4A3D307F18FB
Authority key identifier: 08:39:49:2B:62:27:EA:BB:77:26:A5:A0:64:BE:BE:04:E5:3C:82:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0839492B6227EABB7726A5A064BEBE04E53C824A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/323830343a323836383a3a2f33322d3332203d3e20323633393631.roa
Signing time:             Wed 18 Dec 2024 00:33:17 +0000
ROA not before:           Wed 18 Dec 2024 00:28:17 +0000
ROA not after:            Wed 17 Dec 2025 00:33:17 +0000
asID:                     263961
IP address blocks:        2804:2868::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:03:d9:84:96:1e:86:0e:cb:6b:a5:9e:33:4e:4a:3d:30:7f:18:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0839492B6227EABB7726A5A064BEBE04E53C824A
        Validity
            Not Before: Dec 18 00:28:17 2024 GMT
            Not After : Dec 17 00:33:17 2025 GMT
        Subject: CN=B368BC0D619F4558BDBAA473ECB59516455F6F4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:1a:05:ee:7b:1c:bd:7f:ba:26:6d:59:41:84:
                    7c:aa:f2:ea:12:c8:de:11:37:69:d9:8c:ac:7c:27:
                    53:b5:92:74:b5:15:03:21:f0:46:d7:a7:96:6c:90:
                    04:28:c3:de:8c:e2:e2:8f:67:b2:5d:e1:29:77:da:
                    fd:13:e5:b9:9e:63:20:43:fc:b6:70:51:86:90:32:
                    41:44:e1:b0:97:7f:6f:ac:83:21:f5:b0:48:27:fa:
                    0e:79:e8:6b:dc:a4:f0:a4:6d:88:d7:96:ee:b1:56:
                    36:b8:6c:7b:0a:0a:36:e8:9f:81:a4:5c:e0:50:ee:
                    c4:bf:b6:ce:74:9c:ee:90:b9:65:06:3d:e4:bd:f1:
                    9a:df:42:d8:eb:e6:6f:d5:7d:b1:f2:58:37:62:6e:
                    15:23:57:65:9d:d2:0d:c4:31:f1:f4:88:e3:9e:28:
                    d3:09:0f:a6:40:54:ff:92:33:f9:72:02:37:e3:51:
                    12:44:7f:d2:b5:03:30:67:93:fe:8a:02:32:2d:9e:
                    9f:da:b2:c8:55:5e:a5:1d:95:f8:9e:ff:06:6d:22:
                    cc:c4:33:3e:b6:f9:1f:c3:0b:a6:be:f0:50:72:ed:
                    26:4f:9d:de:e2:6b:4b:90:44:1e:29:c2:bc:03:00:
                    d7:30:e8:00:2e:71:f2:8c:50:8b:a3:cd:b1:02:8b:
                    46:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:68:BC:0D:61:9F:45:58:BD:BA:A4:73:EC:B5:95:16:45:5F:6F:4A
            X509v3 Authority Key Identifier:
                keyid:08:39:49:2B:62:27:EA:BB:77:26:A5:A0:64:BE:BE:04:E5:3C:82:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/0839492B6227EABB7726A5A064BEBE04E53C824A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0839492B6227EABB7726A5A064BEBE04E53C824A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/323830343a323836383a3a2f33322d3332203d3e20323633393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2868::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:58:d0:bf:3f:e4:e8:09:d4:94:d9:73:e5:91:f7:12:32:ab:
         07:1b:37:95:57:04:a9:1c:07:a2:a4:bb:e0:96:f9:f9:4a:8d:
         43:77:c4:62:ff:3f:c9:c1:75:23:b3:94:12:29:d3:97:fd:ea:
         4a:0e:9d:43:77:7e:89:20:ef:cc:d6:48:a1:d3:69:e2:88:ed:
         2d:4b:de:e1:39:c9:33:fe:10:33:b6:2a:9f:c6:8b:1e:ad:61:
         aa:85:d8:3f:17:65:4a:3d:a4:58:3a:29:47:a1:5b:53:25:09:
         b0:7a:fe:bf:c2:f7:ec:50:95:67:e7:9b:77:69:24:27:4a:d3:
         6f:c5:cf:80:de:11:f9:4a:d4:81:b4:6b:29:51:0d:78:af:d1:
         20:4b:b5:27:0d:d9:24:35:68:04:c9:b8:27:f0:3d:e8:7c:0f:
         6b:67:e3:c9:e4:43:35:aa:5a:30:cc:f5:47:fc:52:ee:ec:af:
         c0:70:9e:13:27:a5:66:a2:92:f8:fc:be:2a:f5:f2:fc:86:ff:
         df:3f:f8:c3:a0:83:63:0b:03:d6:3b:a8:f6:70:46:2a:3c:62:
         8b:2c:81:29:69:3a:06:22:5a:9f:54:29:a3:da:b8:38:02:b8:
         4f:bc:b5:70:9f:1c:e4:1a:4e:be:3c:95:b1:4e:32:da:25:d2:
         bd:88:a0:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:23:45 2025 by rpki-client