Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/323830343a363933303a3a2f33322d313238203d3e20323730323534.roa
File:                     323830343a363933303a3a2f33322d313238203d3e20323730323534.roa (raw, json)
Hash identifier:          CLA8IjJOlAIf7xUZClkWxJDyS5o1IH3elTTHdcyDG+o=
Subject key identifier:   1E:70:1C:F9:88:36:89:05:66:22:9D:B1:D9:78:41:68:C9:5C:C0:B4
Certificate issuer:       /CN=02C5820CBF468581E6A98EFA0E6A0BAE60536F0C
Certificate serial:       0BE290DDAE51ADC882F1D4F26BE0D60DCCD767C6
Authority key identifier: 02:C5:82:0C:BF:46:85:81:E6:A9:8E:FA:0E:6A:0B:AE:60:53:6F:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/02C5820CBF468581E6A98EFA0E6A0BAE60536F0C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/323830343a363933303a3a2f33322d313238203d3e20323730323534.roa
Signing time:             Tue 26 Dec 2023 12:19:41 +0000
ROA not before:           Tue 26 Dec 2023 12:14:41 +0000
ROA not after:            Tue 24 Dec 2024 12:19:41 +0000
asID:                     270254
IP address blocks:        2804:6930::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:e2:90:dd:ae:51:ad:c8:82:f1:d4:f2:6b:e0:d6:0d:cc:d7:67:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02C5820CBF468581E6A98EFA0E6A0BAE60536F0C
        Validity
            Not Before: Dec 26 12:14:41 2023 GMT
            Not After : Dec 24 12:19:41 2024 GMT
        Subject: CN=1E701CF98836890566229DB1D9784168C95CC0B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:24:ba:cb:47:38:b2:a5:6d:3e:ca:b0:7e:da:
                    72:ac:86:b0:56:fb:52:50:a4:86:e0:ed:b2:45:de:
                    c5:6b:89:03:ae:81:fe:06:12:3f:ce:d9:8f:92:7a:
                    3e:25:aa:65:28:09:84:63:92:3b:3e:78:fd:b8:31:
                    01:eb:98:08:6d:ac:8a:f1:71:f7:dd:ac:a5:a4:d1:
                    43:d1:19:17:11:3e:37:ec:7e:24:fb:e2:72:7b:4f:
                    5f:1a:3b:3f:41:d3:df:6c:b4:e5:68:ba:ba:68:6e:
                    2f:c4:38:b1:6b:4c:40:93:42:54:a5:7d:bd:d0:30:
                    80:09:b7:c7:4a:f1:ed:41:62:36:00:69:c9:26:20:
                    42:31:49:2e:08:c4:c5:27:7f:9b:7f:09:3e:d9:f6:
                    9f:ec:6f:ac:75:38:7e:d9:be:92:7b:78:f0:09:62:
                    19:8a:d8:92:6d:46:c6:ab:12:69:6a:12:55:f6:30:
                    85:ef:2a:66:41:1c:94:c3:cc:a0:63:8e:24:b4:3c:
                    aa:d3:7d:2e:8d:82:9d:3f:53:e5:62:85:f3:74:9d:
                    7f:e0:c7:a9:3e:20:6f:9b:d6:63:9d:43:f3:9c:2c:
                    81:6d:fd:26:20:1e:81:a4:7c:25:bd:3d:23:01:a2:
                    b2:f1:ab:b2:55:32:a0:54:94:ee:31:65:34:25:0c:
                    d7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:70:1C:F9:88:36:89:05:66:22:9D:B1:D9:78:41:68:C9:5C:C0:B4
            X509v3 Authority Key Identifier:
                keyid:02:C5:82:0C:BF:46:85:81:E6:A9:8E:FA:0E:6A:0B:AE:60:53:6F:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/02C5820CBF468581E6A98EFA0E6A0BAE60536F0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/02C5820CBF468581E6A98EFA0E6A0BAE60536F0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/323830343a363933303a3a2f33322d313238203d3e20323730323534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6930::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:14:4e:6f:a0:15:52:78:b3:be:0a:7a:13:40:23:4d:91:8a:
         07:4f:ce:53:10:1a:af:15:22:dc:16:3f:a1:b6:ef:a9:ec:09:
         11:a0:75:c1:4f:84:1e:07:05:35:2c:64:96:df:68:84:83:79:
         c8:0b:c9:99:ef:85:30:a9:7a:d2:08:37:bf:7e:5a:fa:b5:3c:
         37:37:67:ec:7f:e5:17:72:ab:d4:fc:b9:a0:5c:06:e5:6d:22:
         c9:48:73:89:1c:30:20:c3:38:d5:ea:b3:b9:cf:a8:43:f5:71:
         06:34:58:7f:79:e3:31:40:76:89:d4:4a:78:6f:de:a2:68:48:
         23:c1:ba:2f:29:93:6e:12:ab:4e:85:8b:9e:8d:a2:44:ee:5a:
         48:40:b8:db:02:6d:d5:bb:d6:95:94:19:f7:bb:fa:63:25:2e:
         86:87:92:49:6b:84:be:f0:78:62:af:f5:a0:76:ea:59:ad:7f:
         89:ea:bb:0e:82:1a:63:50:92:65:17:e9:1b:35:54:2e:30:3e:
         d1:44:86:5b:c6:ef:ad:53:e7:2d:fa:af:83:93:26:17:26:de:
         d4:57:54:1e:fe:d4:4c:c0:d7:c2:b4:2d:ab:a2:7b:a4:45:af:
         b6:85:dd:62:b6:e3:3f:2e:78:23:1a:03:e2:7d:b8:e8:da:72:
         cb:e3:dd:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 22:49:27 2025 by rpki-client