Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2LDCBWd83mNGY9Cq5pEdUJm4kYrcECuAQS1SpAxT7rd1/0/323830343a386634343a3a2f33322d313238203d3e20323733343830.roa
File:                     323830343a386634343a3a2f33322d313238203d3e20323733343830.roa (raw, json)
Hash identifier:          1glAJR8cqrwckgPgXEcqF7SWu8+jQ9k18ay2N4PyVa4=
Subject key identifier:   E1:02:A1:56:EC:99:36:D5:F5:1B:D7:E1:E5:E5:60:AE:BE:D4:48:EA
Certificate issuer:       /CN=8B384F437E456C4797E6DFC0379EA72714867D56
Certificate serial:       5C2355B8B7003985639B618701001B0CD6129F2E
Authority key identifier: 8B:38:4F:43:7E:45:6C:47:97:E6:DF:C0:37:9E:A7:27:14:86:7D:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B384F437E456C4797E6DFC0379EA72714867D56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2LDCBWd83mNGY9Cq5pEdUJm4kYrcECuAQS1SpAxT7rd1/0/323830343a386634343a3a2f33322d313238203d3e20323733343830.roa
Signing time:             Tue 18 Mar 2025 18:22:41 +0000
ROA not before:           Tue 18 Mar 2025 18:17:41 +0000
ROA not after:            Tue 17 Mar 2026 18:22:41 +0000
asID:                     273480
IP address blocks:        2804:8f44::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:23:55:b8:b7:00:39:85:63:9b:61:87:01:00:1b:0c:d6:12:9f:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B384F437E456C4797E6DFC0379EA72714867D56
        Validity
            Not Before: Mar 18 18:17:41 2025 GMT
            Not After : Mar 17 18:22:41 2026 GMT
        Subject: CN=E102A156EC9936D5F51BD7E1E5E560AEBED448EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0a:db:17:56:ee:23:3e:67:02:56:0c:fa:94:
                    76:e6:59:98:37:2e:94:d5:4c:07:fe:01:db:0b:66:
                    c5:54:a2:e4:0a:63:4f:bc:c3:bf:98:c5:a8:2b:23:
                    22:9d:d7:d2:d8:64:ca:2d:08:ae:ec:f5:bf:77:1d:
                    c4:3d:00:39:9d:13:74:91:e3:77:1a:58:22:b0:9f:
                    7d:eb:1d:d9:99:17:72:79:8b:ee:99:d6:8f:d0:55:
                    27:db:cd:42:0d:e7:a4:d6:be:ed:5d:af:63:3c:9d:
                    cd:8b:ab:3a:da:8f:77:46:7a:c8:03:b4:af:d5:af:
                    a5:be:1e:d7:b8:51:62:4c:5e:ad:d4:24:ef:ae:df:
                    4f:74:e8:3f:ae:46:4a:25:09:7f:65:99:62:3f:89:
                    39:d0:4f:d2:af:04:99:97:4b:ff:df:9f:7e:df:83:
                    31:87:ff:fd:a0:9f:df:4a:38:d4:70:79:c2:4e:7e:
                    55:d7:54:c6:15:e6:ab:0a:66:6d:58:59:d8:7a:33:
                    45:23:fb:6f:6c:94:79:ac:7a:1d:df:55:87:8a:23:
                    0f:a3:bc:49:ba:48:16:50:c6:c1:10:fe:3a:73:b3:
                    92:e3:1a:93:f2:8d:34:e6:f6:70:a4:d7:4e:26:00:
                    9b:6e:77:c7:a8:1e:65:d7:3b:88:50:6b:6b:0f:d7:
                    fd:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:02:A1:56:EC:99:36:D5:F5:1B:D7:E1:E5:E5:60:AE:BE:D4:48:EA
            X509v3 Authority Key Identifier:
                keyid:8B:38:4F:43:7E:45:6C:47:97:E6:DF:C0:37:9E:A7:27:14:86:7D:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2LDCBWd83mNGY9Cq5pEdUJm4kYrcECuAQS1SpAxT7rd1/0/8B384F437E456C4797E6DFC0379EA72714867D56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B384F437E456C4797E6DFC0379EA72714867D56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2LDCBWd83mNGY9Cq5pEdUJm4kYrcECuAQS1SpAxT7rd1/0/323830343a386634343a3a2f33322d313238203d3e20323733343830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8f44::/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:69:ee:dc:6b:c1:a8:55:23:40:f6:d9:ae:4a:c2:f4:e6:b4:
         60:8f:af:e7:49:22:98:2a:6d:8a:16:39:d1:72:ca:a3:cb:e6:
         fa:22:46:37:95:ee:43:f9:5e:87:c2:f4:8a:93:7e:22:1d:b6:
         1e:00:a1:ce:b6:fc:ff:66:1b:7e:af:58:6f:4a:45:4d:0e:61:
         6c:de:01:f0:e5:5d:42:09:98:4e:bf:14:59:66:a8:1c:c0:6d:
         6d:ce:ca:42:c9:52:9b:44:92:a4:62:a1:23:39:c1:7a:9b:83:
         2f:13:69:b0:47:7a:01:88:3b:e7:a3:e0:fb:fc:7c:9e:69:d4:
         90:dd:0e:4b:95:4b:32:aa:cf:98:75:9c:cd:5a:f5:35:fb:4a:
         ac:b1:74:4c:6e:df:90:90:29:16:57:e6:b5:4e:65:0d:bc:bf:
         87:11:91:c3:be:3c:02:26:2b:66:2e:9f:9d:76:f7:ff:1b:15:
         1d:c6:a3:1e:3d:7f:d7:e7:c5:71:58:85:56:2b:9e:89:1d:e6:
         1c:ae:e6:34:75:2e:54:3b:3b:03:aa:46:f2:2b:5c:94:50:5f:
         fa:b1:15:7d:db:41:96:a7:d0:a6:8f:e1:fb:b7:e6:d6:d1:92:
         a8:8f:08:75:72:78:6c:12:85:85:0b:24:43:3f:83:92:21:b6:
         a7:fc:1b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:27:17 2025 by rpki-client