Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/323830343a333765383a3a2f33322d3438203d3e20323632363731.roa
File:                     323830343a333765383a3a2f33322d3438203d3e20323632363731.roa (raw, json)
Hash identifier:          jVB5nQpMu+1ieITu8hdI6CWbt0aFeRJ50RikPjQXyXg=
Subject key identifier:   A6:9E:FF:0D:68:EC:03:F9:FB:EB:F5:5B:3F:DC:9F:82:26:ED:7B:B7
Certificate issuer:       /CN=416296490F899DB0183C491C69520DEECF540394
Certificate serial:       02E08776FBBEFE228B0BCFC7100937CF0B1AED51
Authority key identifier: 41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/323830343a333765383a3a2f33322d3438203d3e20323632363731.roa
Signing time:             Fri 03 May 2024 21:40:24 +0000
ROA not before:           Fri 03 May 2024 21:35:24 +0000
ROA not after:            Fri 02 May 2025 21:40:24 +0000
asID:                     262671
IP address blocks:        2804:37e8::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:e0:87:76:fb:be:fe:22:8b:0b:cf:c7:10:09:37:cf:0b:1a:ed:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=416296490F899DB0183C491C69520DEECF540394
        Validity
            Not Before: May  3 21:35:24 2024 GMT
            Not After : May  2 21:40:24 2025 GMT
        Subject: CN=A69EFF0D68EC03F9FBEBF55B3FDC9F8226ED7BB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b7:9f:9c:53:71:3a:90:a0:d4:cc:6a:b9:a7:
                    54:61:bf:05:8f:69:8b:77:d4:2a:9c:b7:3a:08:b9:
                    1a:90:23:16:ce:dd:e8:a2:c3:34:10:45:aa:78:94:
                    20:5d:ae:fe:87:ef:82:92:02:3a:ed:3b:9c:21:58:
                    4e:73:e4:1a:af:63:09:5b:e3:df:8c:d1:a7:ba:a0:
                    b9:75:a0:cc:46:75:d6:89:ce:e4:5b:8c:87:19:53:
                    23:a4:f6:5a:96:f2:1d:be:73:55:0e:07:a5:cf:86:
                    21:30:f9:2f:a3:18:62:29:af:d4:c1:5c:6a:9d:7c:
                    14:6d:a9:76:8d:2d:2f:4f:c9:35:28:48:51:7a:d8:
                    fc:74:64:62:89:fc:83:11:07:6e:10:3f:26:eb:6d:
                    5e:9b:07:aa:ac:c8:72:dd:91:58:89:fe:10:5e:40:
                    9f:1b:58:28:d8:c8:56:7a:42:72:ec:26:6c:18:6d:
                    80:01:9d:2a:cc:9f:4c:8f:c0:9d:ae:02:7c:29:ee:
                    e4:ac:26:fc:f0:93:28:df:50:1d:4f:60:50:8f:d3:
                    21:90:89:de:2e:ae:84:41:ae:b9:9a:5e:9d:69:74:
                    25:39:a6:a3:7a:62:55:6b:9a:46:a8:5e:39:16:1b:
                    ec:0f:60:39:77:db:ec:5d:cd:5c:3b:1c:e8:64:6b:
                    ec:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:9E:FF:0D:68:EC:03:F9:FB:EB:F5:5B:3F:DC:9F:82:26:ED:7B:B7
            X509v3 Authority Key Identifier:
                keyid:41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/416296490F899DB0183C491C69520DEECF540394.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/323830343a333765383a3a2f33322d3438203d3e20323632363731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:3f:51:6a:a9:fb:0f:d0:d2:ba:0a:48:b3:cf:88:db:9e:c8:
         69:6b:fe:9a:18:d5:f2:47:e6:0e:ff:32:d4:8e:09:ae:d8:0e:
         4c:0f:f7:1d:a7:86:8c:a9:27:ad:c0:03:97:82:0d:d4:24:e8:
         e6:f2:a3:07:54:f0:6f:19:75:b9:da:54:bd:3f:e8:5f:22:95:
         0d:2e:3c:06:e2:ab:c4:aa:8f:d8:9c:00:2e:9c:bd:42:4d:dc:
         19:2b:f5:3d:54:0c:7f:dd:e8:3b:10:a7:49:0e:d6:f2:74:52:
         99:3f:e7:79:87:27:5f:42:b7:b8:fa:e5:ab:89:3d:16:2b:64:
         77:f9:b0:79:8e:db:c2:71:9c:a1:22:27:61:67:cc:d3:18:dc:
         3a:df:75:93:2d:c8:81:39:79:a4:5b:68:a4:1a:ce:eb:27:b1:
         3f:59:db:87:e0:93:44:b5:4a:f0:b6:a4:df:3b:03:da:a9:55:
         c9:d4:b8:da:7a:02:07:29:1b:9d:68:58:75:42:b6:d5:a2:d7:
         c0:36:bb:e3:68:00:a0:81:60:fd:94:6f:e7:da:33:62:e8:f7:
         fe:b6:58:cd:a9:3b:ba:aa:76:0b:a4:df:68:15:f5:ae:ce:a7:
         c3:b1:f3:e3:de:69:77:f7:98:be:fc:1d:4e:0d:bc:e8:42:c9:
         f8:e3:ec:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 04:03:36 2025 by rpki-client