Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/27hAC1SmsFLNA6MiFDwXGjouYh8oCmmcsfapvSpz1aMu/0/323830343a343137633a3a2f33322d3438203d3e20323637343336.roa
File:                     323830343a343137633a3a2f33322d3438203d3e20323637343336.roa (raw, json)
Hash identifier:          lwEXgAX21ksl+peAE9Fr0QTrtFW7bx9f7QSZq14lnDo=
Subject key identifier:   C6:F6:BE:36:44:5C:57:BF:FD:5F:0B:0B:1F:6A:6D:B3:60:64:ED:3A
Certificate issuer:       /CN=03FA2EBA952910BFF3993D9D42BA510513B3280B
Certificate serial:       03A15940D45985A39BE2A391732DFA2A23132D66
Authority key identifier: 03:FA:2E:BA:95:29:10:BF:F3:99:3D:9D:42:BA:51:05:13:B3:28:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03FA2EBA952910BFF3993D9D42BA510513B3280B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/27hAC1SmsFLNA6MiFDwXGjouYh8oCmmcsfapvSpz1aMu/0/323830343a343137633a3a2f33322d3438203d3e20323637343336.roa
Signing time:             Thu 24 Oct 2024 14:04:31 +0000
ROA not before:           Thu 24 Oct 2024 13:59:31 +0000
ROA not after:            Thu 23 Oct 2025 14:04:31 +0000
asID:                     267436
IP address blocks:        2804:417c::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:a1:59:40:d4:59:85:a3:9b:e2:a3:91:73:2d:fa:2a:23:13:2d:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03FA2EBA952910BFF3993D9D42BA510513B3280B
        Validity
            Not Before: Oct 24 13:59:31 2024 GMT
            Not After : Oct 23 14:04:31 2025 GMT
        Subject: CN=C6F6BE36445C57BFFD5F0B0B1F6A6DB36064ED3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a9:71:1d:c6:35:6c:47:9b:b1:9f:71:e5:00:
                    89:1a:8e:7e:c3:9b:19:b1:18:60:59:1e:86:95:b3:
                    e5:34:61:da:59:34:af:d3:a5:1c:60:fa:dd:a2:c0:
                    6c:10:65:71:28:69:5d:bb:3e:d8:03:2c:39:25:2e:
                    84:69:0b:6a:25:d9:98:d4:35:1d:12:9d:90:f1:87:
                    fc:a7:45:36:cd:2b:1d:c3:eb:51:07:de:a0:83:15:
                    4b:6c:38:a8:a2:f7:7a:f3:0d:b4:70:0b:4b:39:6e:
                    cb:0c:cd:ee:b7:1f:37:3c:41:8a:22:70:a0:d6:e9:
                    6a:6c:98:c3:97:8f:e5:45:df:b0:2d:25:b0:46:6b:
                    79:1f:77:ce:05:cb:48:e1:2e:dc:85:50:51:61:4e:
                    01:3d:f0:e0:22:ee:09:65:eb:68:dc:ba:3f:92:3e:
                    74:5e:d1:9e:3e:51:3d:b3:fb:11:18:93:ca:1b:1e:
                    a3:91:c8:50:47:82:e6:31:ec:12:62:90:36:05:8d:
                    d2:43:c3:2f:e6:2a:5c:49:e4:35:92:42:c4:e6:fa:
                    1c:a1:cc:cd:68:cd:5c:98:89:5f:98:5f:45:85:12:
                    52:df:18:78:45:44:44:33:c5:02:4f:c5:d6:c8:c7:
                    62:21:f6:24:10:f0:7b:b0:df:da:c0:af:a4:cb:20:
                    76:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:F6:BE:36:44:5C:57:BF:FD:5F:0B:0B:1F:6A:6D:B3:60:64:ED:3A
            X509v3 Authority Key Identifier:
                keyid:03:FA:2E:BA:95:29:10:BF:F3:99:3D:9D:42:BA:51:05:13:B3:28:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/27hAC1SmsFLNA6MiFDwXGjouYh8oCmmcsfapvSpz1aMu/0/03FA2EBA952910BFF3993D9D42BA510513B3280B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03FA2EBA952910BFF3993D9D42BA510513B3280B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/27hAC1SmsFLNA6MiFDwXGjouYh8oCmmcsfapvSpz1aMu/0/323830343a343137633a3a2f33322d3438203d3e20323637343336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:417c::/32

    Signature Algorithm: sha256WithRSAEncryption
         d0:43:cf:9a:0d:59:19:b5:97:dc:3f:7a:15:f0:5a:ca:00:fa:
         60:6b:dc:ac:37:2e:02:69:b2:16:ee:38:ea:02:ed:69:ff:fe:
         4f:03:e4:34:fa:c5:fb:6f:75:40:7e:7f:e6:6a:c5:a6:ce:ec:
         21:a4:a1:7e:13:60:94:cd:cf:6d:72:c8:7f:ad:30:2c:00:96:
         c3:82:f6:72:40:9e:d1:21:1f:79:c5:c1:60:ad:f8:1b:e3:ab:
         83:98:1a:fe:09:81:e5:4c:69:0a:39:71:6c:81:63:e2:93:e2:
         18:77:63:3c:0c:0a:6d:32:be:94:77:75:d4:f7:54:a0:5a:59:
         e6:67:0c:ae:a3:27:85:12:19:0c:cb:73:4e:07:8a:e9:e3:e9:
         a6:30:7f:a6:c8:04:73:5b:8c:c0:64:70:4e:cb:b3:60:f9:04:
         f2:f5:3a:23:90:07:e1:d3:50:5a:76:80:0c:e5:56:66:3a:71:
         30:a0:3e:8c:b0:07:ac:0e:a1:87:d3:47:d3:e3:4d:a4:49:30:
         fc:3f:47:d9:b8:3a:7e:e2:2c:c8:fe:ef:c1:1d:09:a1:85:a6:
         66:26:f5:83:a4:32:37:38:f1:09:09:ff:e6:ee:19:48:71:93:
         d7:bc:8e:e2:a4:80:60:2f:0c:99:4f:4c:ec:61:9c:05:7b:fa:
         44:cb:44:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 03:23:02 2025 by rpki-client