Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/323830343a3564633a3238303a3a2f34392d3439203d3e203533303139.roa
File:                     323830343a3564633a3238303a3a2f34392d3439203d3e203533303139.roa (raw, json)
Hash identifier:          FV+cfuzxKf949CeXhVZPXF36xURSMom5hSHnyI5TLHY=
Subject key identifier:   47:8F:20:50:52:7D:C4:2C:81:15:99:8D:9C:9A:D5:AC:4D:F2:16:88
Certificate issuer:       /CN=E64C7BA3061B5F4E05BCEE186C2E72826CACBD74
Certificate serial:       72122F564415345DFDBA9B5A1FC459284444C682
Authority key identifier: E6:4C:7B:A3:06:1B:5F:4E:05:BC:EE:18:6C:2E:72:82:6C:AC:BD:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E64C7BA3061B5F4E05BCEE186C2E72826CACBD74.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/323830343a3564633a3238303a3a2f34392d3439203d3e203533303139.roa
Signing time:             Wed 15 Jan 2025 10:30:26 +0000
ROA not before:           Wed 15 Jan 2025 10:25:26 +0000
ROA not after:            Wed 14 Jan 2026 10:30:26 +0000
asID:                     53019
IP address blocks:        2804:5dc:280::/49 maxlen: 49
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:12:2f:56:44:15:34:5d:fd:ba:9b:5a:1f:c4:59:28:44:44:c6:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E64C7BA3061B5F4E05BCEE186C2E72826CACBD74
        Validity
            Not Before: Jan 15 10:25:26 2025 GMT
            Not After : Jan 14 10:30:26 2026 GMT
        Subject: CN=478F2050527DC42C8115998D9C9AD5AC4DF21688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:09:e5:48:53:cc:1d:95:8a:b7:58:84:ad:27:
                    4a:a0:11:e4:cc:31:8e:a6:0a:a1:ba:7d:24:7b:fc:
                    bb:b9:6b:c6:e8:e4:8c:a0:15:05:d7:c2:8d:78:bf:
                    c3:13:41:1a:41:18:b5:8a:60:a2:3a:1a:03:84:4c:
                    63:a6:4d:1c:a5:c9:21:3e:32:aa:0f:bc:29:87:df:
                    ba:9e:a2:e4:a6:aa:d6:bd:4f:e6:1a:f9:79:8d:fd:
                    3f:a7:2a:83:d6:2a:3d:88:dc:c7:64:97:0f:d7:1c:
                    b8:92:4e:00:a5:de:cf:11:d6:0f:c1:55:56:d6:52:
                    12:dd:23:5a:10:36:a9:68:93:e3:d4:1f:bd:7f:e5:
                    5f:f4:dc:70:44:2e:3d:4e:cd:a8:53:84:df:e5:36:
                    65:3f:ce:71:0b:3a:66:71:92:bc:8c:50:7c:2f:7d:
                    cf:3b:72:b6:32:72:87:13:b9:6b:5d:d8:44:21:7a:
                    26:f5:52:f5:b0:fa:a9:a0:39:b5:17:6d:ef:25:c6:
                    2c:c5:20:ba:9e:3d:da:33:38:b5:f8:ff:9f:f0:a5:
                    f6:e5:ef:02:1c:6a:8c:98:53:8b:04:3f:8b:d0:2a:
                    26:d0:4b:10:4f:df:6c:3b:d1:ab:16:b2:79:1d:17:
                    1a:8c:26:38:97:5b:e1:2a:14:dd:3b:77:8e:ef:73:
                    9b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:8F:20:50:52:7D:C4:2C:81:15:99:8D:9C:9A:D5:AC:4D:F2:16:88
            X509v3 Authority Key Identifier:
                keyid:E6:4C:7B:A3:06:1B:5F:4E:05:BC:EE:18:6C:2E:72:82:6C:AC:BD:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/E64C7BA3061B5F4E05BCEE186C2E72826CACBD74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E64C7BA3061B5F4E05BCEE186C2E72826CACBD74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/323830343a3564633a3238303a3a2f34392d3439203d3e203533303139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5dc:280::/49

    Signature Algorithm: sha256WithRSAEncryption
         66:2b:d2:39:b5:cb:c3:9e:c7:de:49:1d:43:f3:23:66:80:a6:
         67:86:10:8a:8d:9a:b5:3b:e0:15:89:be:10:0b:d3:e4:62:74:
         4a:7c:aa:97:49:c5:36:25:49:20:c5:1e:04:22:5c:85:8e:fd:
         1c:b7:b0:79:33:8d:2d:34:f5:f2:a7:8d:67:12:00:38:1e:32:
         67:fc:19:b4:1d:7e:d3:4f:5c:90:a8:fd:f9:7d:75:5b:f9:f6:
         11:50:5a:e8:b9:bf:24:d0:a0:61:84:b6:0b:65:a6:30:c0:06:
         5d:33:71:2c:e3:78:fd:8d:13:99:a4:e8:c5:0f:69:bf:3d:ae:
         80:23:66:38:2a:64:27:80:74:f0:d5:8c:18:60:79:ff:8e:ad:
         d1:9b:84:bd:c4:10:62:ea:de:4f:04:2c:e8:ea:28:f9:3a:62:
         59:3f:6a:ed:11:5a:b8:de:d8:57:6b:53:3e:55:ed:bd:0c:d7:
         17:2c:60:54:1f:99:b9:35:d2:7a:c1:70:48:58:7d:22:7e:24:
         77:f3:7d:0d:5b:b5:7d:6f:db:9a:6c:66:29:54:6c:1d:0d:49:
         5d:7b:ff:3e:6f:15:00:f3:da:af:0d:4d:df:46:52:63:8d:b6:
         ef:60:9b:02:79:f4:01:23:b0:ec:f2:0d:a2:39:2b:5e:a0:19:
         9b:cf:14:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 08:33:53 2025 by rpki-client