Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a333330303a613030303a3a2f33352d3335203d3e203631353837.roa
File:                     323830343a333330303a613030303a3a2f33352d3335203d3e203631353837.roa (raw, json)
Hash identifier:          DXB0B935KUGg8IRL0ovftfgeEB6opMMq5ueA22XWoDQ=
Subject key identifier:   86:37:96:8E:88:52:12:67:7F:40:21:FC:FC:2B:03:E7:88:1D:D9:69
Certificate issuer:       /CN=B8011591E1548C11D84F9CA27D54AEC1DCD4901D
Certificate serial:       7CC6F3B1E8B7E61326C6F51BDF59E3EFC94A49A8
Authority key identifier: B8:01:15:91:E1:54:8C:11:D8:4F:9C:A2:7D:54:AE:C1:DC:D4:90:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a333330303a613030303a3a2f33352d3335203d3e203631353837.roa
Signing time:             Wed 10 Jan 2024 13:02:03 +0000
ROA not before:           Wed 10 Jan 2024 12:57:03 +0000
ROA not after:            Wed 08 Jan 2025 13:02:03 +0000
asID:                     61587
IP address blocks:        2804:3300:a000::/35 maxlen: 35
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:c6:f3:b1:e8:b7:e6:13:26:c6:f5:1b:df:59:e3:ef:c9:4a:49:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8011591E1548C11D84F9CA27D54AEC1DCD4901D
        Validity
            Not Before: Jan 10 12:57:03 2024 GMT
            Not After : Jan  8 13:02:03 2025 GMT
        Subject: CN=8637968E885212677F4021FCFC2B03E7881DD969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:10:5e:69:74:8c:fc:d1:8e:0e:db:58:0b:96:
                    4d:ba:be:ff:ab:be:d0:89:e7:5f:e6:52:1c:cd:1d:
                    a0:16:f2:29:0f:9b:19:0c:0f:3f:24:7c:69:04:11:
                    25:5e:d0:90:7d:50:80:08:7d:26:81:de:4c:85:1a:
                    0c:85:4a:5e:d6:58:c6:b0:4a:72:a5:55:8f:71:87:
                    a0:cb:a6:50:f1:39:36:a8:67:2a:4d:3a:42:23:e5:
                    15:71:36:8b:67:f2:40:0f:cf:77:fc:17:fc:02:c1:
                    b9:bb:2b:79:0c:11:e9:35:ce:3f:0b:80:be:64:04:
                    6c:b5:1b:21:7b:47:aa:10:8a:95:a0:0a:c4:f7:fb:
                    c9:dc:93:97:98:62:1b:bf:2f:9b:88:f9:3f:08:4d:
                    d7:b5:2f:2c:a6:d1:1c:26:52:7e:c4:93:f9:0f:46:
                    9a:33:10:e7:e2:5d:9e:26:03:af:79:4b:5d:85:2a:
                    3c:bf:51:3b:ab:e0:c3:43:7c:c7:1d:18:69:6c:67:
                    ec:ce:3d:88:a9:e8:1e:50:96:cc:87:82:ab:7b:12:
                    60:e4:c3:aa:a3:a9:fd:07:b8:99:f7:48:df:fb:3c:
                    ff:34:38:a7:46:33:72:13:70:c0:5c:8e:15:4d:1f:
                    70:79:79:ac:9d:88:76:50:0a:75:66:c3:40:53:12:
                    79:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:37:96:8E:88:52:12:67:7F:40:21:FC:FC:2B:03:E7:88:1D:D9:69
            X509v3 Authority Key Identifier:
                keyid:B8:01:15:91:E1:54:8C:11:D8:4F:9C:A2:7D:54:AE:C1:DC:D4:90:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a333330303a613030303a3a2f33352d3335203d3e203631353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3300:a000::/35

    Signature Algorithm: sha256WithRSAEncryption
         be:8a:27:d7:4a:c0:b9:ff:7d:fc:b4:e6:65:12:44:80:bb:24:
         50:3b:e7:c3:d9:4e:b7:72:a7:14:0f:cc:a2:98:60:3a:b6:3a:
         10:b2:10:f4:fb:52:54:e6:b9:20:90:c5:1e:92:38:3b:1d:84:
         c4:23:43:43:21:1c:2d:87:ce:3a:67:fb:14:f8:07:74:5f:a9:
         40:7a:48:a8:21:e2:7e:43:ab:eb:cf:5e:28:75:26:56:7d:ba:
         84:fa:71:70:32:54:36:f1:e1:a8:5e:5a:b4:13:d1:61:52:fe:
         b0:34:3f:ea:f4:af:ac:38:03:be:1c:30:67:61:98:e7:45:ea:
         32:ce:06:79:18:df:86:f8:5e:1a:96:21:58:ea:af:64:af:45:
         b1:93:fa:04:54:73:82:bd:38:9d:95:8a:ac:82:30:31:d1:eb:
         8e:6c:16:35:88:0a:ca:b2:97:89:3e:16:33:b1:65:18:b6:19:
         79:eb:2a:9c:ab:c3:ba:92:a5:7a:d2:08:4d:9e:c9:05:e0:2c:
         f0:91:b4:4e:78:82:f4:91:6d:8b:5c:c5:90:bb:44:f5:8d:ae:
         55:3e:52:b5:e9:6c:03:ff:b5:ca:cc:a4:6c:3f:f4:16:3e:ed:
         48:63:0e:44:47:a9:c5:00:23:d0:85:30:fd:ee:fd:f0:d8:0e:
         8a:74:fa:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:21 2025 by rpki-client