Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/323830343a333266303a383030303a3a2f33332d3333203d3e20323635313036.roa
File:                     323830343a333266303a383030303a3a2f33332d3333203d3e20323635313036.roa (raw, json)
Hash identifier:          1gBHcQ77iMnkWbWdz/FICU2KEx3fv/26zo4LKiXKPs4=
Subject key identifier:   54:2C:48:25:61:3A:2E:CC:B1:07:B7:CC:83:D0:A6:A8:63:34:C2:99
Certificate issuer:       /CN=8C7C3CED5BDDCC80C0FCDD46A8287514BB682859
Certificate serial:       687538CCEF32C9AA9C74D540AEBBDC66A407F6B7
Authority key identifier: 8C:7C:3C:ED:5B:DD:CC:80:C0:FC:DD:46:A8:28:75:14:BB:68:28:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C7C3CED5BDDCC80C0FCDD46A8287514BB682859.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/323830343a333266303a383030303a3a2f33332d3333203d3e20323635313036.roa
Signing time:             Tue 30 Apr 2024 13:12:40 +0000
ROA not before:           Tue 30 Apr 2024 13:07:40 +0000
ROA not after:            Tue 29 Apr 2025 13:12:40 +0000
asID:                     265106
IP address blocks:        2804:32f0:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:75:38:cc:ef:32:c9:aa:9c:74:d5:40:ae:bb:dc:66:a4:07:f6:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C7C3CED5BDDCC80C0FCDD46A8287514BB682859
        Validity
            Not Before: Apr 30 13:07:40 2024 GMT
            Not After : Apr 29 13:12:40 2025 GMT
        Subject: CN=542C4825613A2ECCB107B7CC83D0A6A86334C299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:96:07:ca:5c:be:a6:89:b8:bc:de:80:b1:39:
                    00:32:49:bd:9c:37:9a:9c:8b:37:9b:8c:96:4e:78:
                    ef:7e:a3:a8:df:fa:33:79:a8:de:47:3e:c4:46:9c:
                    d5:52:4a:41:0a:cf:f9:9e:c0:7c:07:64:9d:97:23:
                    04:1b:34:1f:58:10:0c:a8:99:7b:1c:f0:e3:01:6c:
                    30:6e:08:c4:d6:e7:74:a1:9f:20:d4:88:9b:92:a4:
                    d5:86:97:99:11:b7:c6:3c:1e:8f:4a:7e:94:dd:f8:
                    44:94:27:a7:8d:f4:46:c1:ef:77:c3:03:84:59:3a:
                    08:33:dc:b1:a9:1b:28:87:eb:fb:10:db:02:e4:bd:
                    8f:11:40:2f:56:4f:9c:cb:b7:99:6e:ce:31:f1:45:
                    38:74:50:36:3a:0d:c0:73:59:63:97:be:9e:e3:c2:
                    64:3a:c3:1a:a4:bd:73:5b:75:f1:24:42:31:35:a7:
                    7f:5d:f9:e5:77:42:87:b9:76:20:f9:e6:aa:bd:b5:
                    6b:0b:7b:f9:fc:74:09:c4:90:50:98:83:96:da:63:
                    52:f2:aa:c8:ea:70:b1:e3:c9:1b:16:28:0b:61:09:
                    cc:c1:5a:49:ad:6a:46:99:ec:b5:42:32:56:f2:11:
                    06:c5:91:cf:0b:d8:95:af:15:34:4d:8c:f4:2e:98:
                    31:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:2C:48:25:61:3A:2E:CC:B1:07:B7:CC:83:D0:A6:A8:63:34:C2:99
            X509v3 Authority Key Identifier:
                keyid:8C:7C:3C:ED:5B:DD:CC:80:C0:FC:DD:46:A8:28:75:14:BB:68:28:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/8C7C3CED5BDDCC80C0FCDD46A8287514BB682859.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C7C3CED5BDDCC80C0FCDD46A8287514BB682859.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/323830343a333266303a383030303a3a2f33332d3333203d3e20323635313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:32f0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         7e:c7:3c:88:e9:bb:10:08:e7:bc:22:05:8a:2d:73:bb:dd:d6:
         e1:02:83:8a:13:11:17:43:3f:75:71:1f:40:c4:06:d9:c9:3f:
         ec:5e:3c:c7:e2:8d:81:f4:3c:59:f7:03:fe:bf:89:cc:de:fd:
         0d:c4:54:4a:b2:ee:18:3f:2b:df:f8:f8:5c:84:7a:0c:f0:42:
         ef:b7:8a:58:fc:58:f3:e3:9d:4d:f7:b1:3d:60:69:f5:31:db:
         d3:bc:74:3d:67:89:d0:8a:30:c8:3a:36:8e:f0:41:11:51:d5:
         d0:da:7a:49:22:e1:fd:fe:d9:99:d5:eb:12:bd:62:95:24:2c:
         54:b6:d9:fb:18:dc:5d:0c:b9:c9:15:13:96:7a:9f:70:6e:00:
         aa:a7:ee:a5:78:4b:0d:fa:f1:ef:ac:a6:e8:5a:04:f7:1a:06:
         b5:b6:24:97:ca:e2:14:63:1e:64:a2:fb:65:6d:f0:e0:b7:a1:
         8d:f5:6a:a7:8f:fe:73:f6:17:4b:37:76:ef:07:8a:04:d4:7f:
         0b:73:1a:48:bf:d1:b5:d3:16:00:8d:d3:78:20:88:0c:56:06:
         e8:84:4f:52:65:97:fa:ff:3f:2e:da:ee:ea:0e:fd:27:30:74:
         f4:40:77:68:f8:a0:69:bb:ac:21:10:bb:b6:04:cf:25:71:93:
         6f:ff:43:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:05:41 2025 by rpki-client