Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/323830343a353365303a3a2f33322d3438203d3e20323638363133.roa
File:                     323830343a353365303a3a2f33322d3438203d3e20323638363133.roa (raw, json)
Hash identifier:          0xLXYJ72Mbvfh16TlkD7pTIIjnDMy/tqGd1wzu2Yrnc=
Subject key identifier:   A0:70:C9:E9:B3:27:2F:FC:B9:DB:20:14:02:88:E7:1D:D8:67:C0:D8
Certificate issuer:       /CN=416296490F899DB0183C491C69520DEECF540394
Certificate serial:       49E77A420238E537E2A78E52224609C23881ED17
Authority key identifier: 41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/323830343a353365303a3a2f33322d3438203d3e20323638363133.roa
Signing time:             Fri 03 May 2024 21:55:39 +0000
ROA not before:           Fri 03 May 2024 21:50:39 +0000
ROA not after:            Fri 02 May 2025 21:55:39 +0000
asID:                     268613
IP address blocks:        2804:53e0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:e7:7a:42:02:38:e5:37:e2:a7:8e:52:22:46:09:c2:38:81:ed:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=416296490F899DB0183C491C69520DEECF540394
        Validity
            Not Before: May  3 21:50:39 2024 GMT
            Not After : May  2 21:55:39 2025 GMT
        Subject: CN=A070C9E9B3272FFCB9DB20140288E71DD867C0D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:32:66:81:da:8b:1c:0f:41:25:a2:35:20:60:
                    2e:b5:bb:2d:68:c9:47:c4:71:58:31:2b:0a:87:f4:
                    c8:cc:52:fd:da:d4:95:a4:6e:47:3f:8f:32:b1:c6:
                    44:c7:bf:39:33:76:13:63:21:55:5a:ee:1c:14:f1:
                    27:f3:4f:e9:37:39:da:c1:a2:7d:45:a2:a3:82:a0:
                    13:bb:a7:b3:33:84:f4:62:8c:3f:26:c0:fd:ae:67:
                    17:ba:9d:03:e1:d9:63:11:5c:50:af:cd:29:7a:ee:
                    4f:06:c5:34:6e:af:2e:ed:f8:f4:93:f8:3a:f2:0e:
                    73:1c:d0:75:0d:88:f7:45:06:83:90:35:4f:76:bc:
                    ec:41:be:61:d2:d0:5a:f5:02:3a:a6:80:12:20:12:
                    b9:1c:07:ef:98:b7:b8:3f:27:52:75:8e:53:83:bc:
                    9d:fc:f2:58:c6:f0:3b:fb:cf:49:3a:1b:80:a8:ea:
                    00:e9:dd:4e:8d:1f:00:1d:52:f6:7e:e2:d5:08:81:
                    96:ac:9e:d6:32:58:2f:eb:b1:b8:76:41:e0:40:5d:
                    12:b5:aa:e5:0c:96:27:6b:b8:ea:5a:06:f2:94:11:
                    1f:5d:c6:4e:00:94:cf:fe:7b:97:c9:d3:fe:ac:d3:
                    e9:a1:04:5c:8f:84:7f:41:b4:d5:c5:69:64:f8:de:
                    19:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:70:C9:E9:B3:27:2F:FC:B9:DB:20:14:02:88:E7:1D:D8:67:C0:D8
            X509v3 Authority Key Identifier:
                keyid:41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/416296490F899DB0183C491C69520DEECF540394.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/323830343a353365303a3a2f33322d3438203d3e20323638363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:53e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:8c:1b:b6:e2:75:f1:b0:22:98:07:2e:ab:dc:67:84:8f:b5:
         d3:bf:ef:6b:ea:0b:62:46:87:01:f8:9c:54:88:43:32:e7:b8:
         66:aa:60:17:83:35:24:78:80:20:25:8b:85:cb:3b:4f:dc:b9:
         b7:36:ef:e8:15:4f:46:ba:21:32:9b:22:27:7e:11:b4:dc:fd:
         c6:04:a3:14:bb:d9:19:f9:f8:f0:99:91:bd:f3:08:a8:bc:41:
         36:97:03:8a:ae:45:03:9b:e3:a7:32:6f:43:b3:5f:be:5c:ff:
         1d:6c:94:33:0e:9a:41:07:a9:56:8b:b4:4a:94:bf:f7:1d:35:
         c3:3c:e1:ef:53:cc:08:5e:aa:35:cf:4f:6e:9e:20:6a:e9:5b:
         c8:c8:91:be:f4:12:fc:1e:fe:54:99:34:e9:4a:4d:f0:61:1b:
         f3:2d:44:ef:0c:2b:27:b3:48:9c:0b:e0:40:7a:ba:2a:eb:5e:
         33:9d:07:03:6c:3d:29:dc:da:55:cf:3b:43:e5:c1:1d:de:09:
         fc:89:a6:f9:75:19:f7:5b:c9:0b:75:18:4b:7b:01:ff:8c:32:
         4b:61:f1:5e:fc:68:a4:4c:f6:cd:a5:e3:9e:bf:e6:b6:47:d7:
         3f:65:6a:d0:c7:66:98:9c:6d:f2:a6:41:50:18:8d:8c:7d:46:
         6d:0e:4a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 03:40:52 2025 by rpki-client