Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a383130303a3a2f34382d3438203d3e20323733333039.roa
File:                     323830343a386337633a383130303a3a2f34382d3438203d3e20323733333039.roa (raw, json)
Hash identifier:          LBXZjIKFMwAdPh3EWNpOBF+PH8D1qrweEPtirH23C5E=
Subject key identifier:   53:3B:43:0D:52:BD:A2:78:0C:AF:E0:27:61:A5:5D:2F:FA:45:03:16
Certificate issuer:       /CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
Certificate serial:       2A08FDD703BA7D80A0D1F3D1FEC379765433F6DD
Authority key identifier: 11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a383130303a3a2f34382d3438203d3e20323733333039.roa
Signing time:             Thu 05 Dec 2024 19:11:57 +0000
ROA not before:           Thu 05 Dec 2024 19:06:57 +0000
ROA not after:            Thu 04 Dec 2025 19:11:57 +0000
asID:                     273309
IP address blocks:        2804:8c7c:8100::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:08:fd:d7:03:ba:7d:80:a0:d1:f3:d1:fe:c3:79:76:54:33:f6:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
        Validity
            Not Before: Dec  5 19:06:57 2024 GMT
            Not After : Dec  4 19:11:57 2025 GMT
        Subject: CN=533B430D52BDA2780CAFE02761A55D2FFA450316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:71:02:b9:2e:fb:5e:96:ca:30:ab:79:8d:ad:
                    06:5f:35:83:d6:cf:f7:b8:24:ac:06:6b:e9:e6:02:
                    ae:cd:2e:24:57:af:91:9d:e6:ed:c8:f1:bf:73:c1:
                    0c:7b:f3:ef:7b:6c:85:a8:99:9c:8e:37:53:66:e1:
                    4d:f2:91:f2:21:d2:67:99:b6:96:a6:d2:e8:15:9d:
                    e2:d0:20:07:2b:9e:b4:41:92:36:10:de:89:77:a5:
                    59:87:e8:65:bd:40:78:35:e4:53:1e:0d:67:6c:4c:
                    a1:16:82:46:82:e9:65:10:21:e8:1a:1c:66:70:29:
                    d4:93:33:39:52:d8:11:a0:cb:45:1c:2b:d8:81:83:
                    16:c2:0f:10:cd:55:af:10:f1:9d:89:0f:4b:56:72:
                    cf:c4:25:ff:39:92:33:d3:52:f9:10:58:5a:ba:cb:
                    3a:f9:a4:4c:24:0b:23:ed:bf:6f:de:4c:ab:d8:00:
                    03:03:83:56:b3:e3:31:a1:d9:0e:2d:91:92:43:28:
                    22:39:cb:a8:c7:88:ea:9a:fd:15:21:5f:72:68:1c:
                    1c:ee:84:bd:33:91:da:0a:2a:35:93:c3:49:e2:2e:
                    a4:57:99:13:01:7d:d4:2b:63:70:fc:ab:3e:75:b8:
                    01:99:8f:2f:de:49:c4:9d:fb:86:8b:91:fb:17:64:
                    eb:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:3B:43:0D:52:BD:A2:78:0C:AF:E0:27:61:A5:5D:2F:FA:45:03:16
            X509v3 Authority Key Identifier:
                keyid:11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a383130303a3a2f34382d3438203d3e20323733333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c7c:8100::/48

    Signature Algorithm: sha256WithRSAEncryption
         b0:0d:89:29:86:79:65:b2:c5:1c:40:8b:17:80:71:db:dc:a4:
         2c:31:46:b9:9b:1c:a9:4e:41:87:96:6e:cb:94:76:7e:27:d9:
         9b:2b:59:38:23:51:8a:c8:d0:37:3a:d6:32:35:8a:e7:66:18:
         99:42:ce:29:92:4c:d3:c3:6f:af:08:10:a4:90:29:63:21:2c:
         4a:e9:05:99:77:39:23:8f:ed:85:1c:ae:f9:b3:1f:54:a1:b1:
         82:4f:dc:b5:6a:55:ad:5d:1f:63:15:b7:31:7a:60:69:89:1a:
         81:51:c4:c2:3b:03:b6:61:bf:e4:39:b9:5f:9f:2d:d6:27:8a:
         d3:1a:10:4f:33:64:8d:52:d3:ea:30:64:a2:c6:ed:3d:0f:19:
         b0:ff:a9:2c:eb:00:18:39:7d:ae:5c:3b:00:38:8c:fd:67:c6:
         ca:dc:c8:de:f3:da:a0:9a:c3:c0:1e:f5:fb:7e:8d:1e:49:b6:
         c3:9d:29:d3:53:ee:37:61:68:5a:32:f5:d6:02:ed:52:08:61:
         6c:ec:55:ae:f5:ee:cc:7b:99:38:5e:bb:3c:ee:0c:1d:00:70:
         eb:ec:e0:59:fb:f5:6a:6e:08:4c:84:a6:38:14:22:c5:83:13:
         53:b2:13:95:fc:3b:af:2d:66:f3:70:4a:92:05:68:16:5e:b5:
         d5:b3:82:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:49:30 2025 by rpki-client