Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/323830343a323135633a383030303a3a2f33332d3333203d3e20323634353530.roa
File:                     323830343a323135633a383030303a3a2f33332d3333203d3e20323634353530.roa (raw, json)
Hash identifier:          8zluLKcYZpB0PH3E22GNvEKez03isZaC1uOGMbJBKv8=
Subject key identifier:   EF:F2:F4:ED:C7:E3:6C:7F:06:22:D3:B3:76:90:CF:A7:67:82:E9:AC
Certificate issuer:       /CN=4B3CF06C0002D40DE1ED23E6F8328E9F4F5E4668
Certificate serial:       54D58DA18CA89D5249419DCA3C89350556323171
Authority key identifier: 4B:3C:F0:6C:00:02:D4:0D:E1:ED:23:E6:F8:32:8E:9F:4F:5E:46:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3CF06C0002D40DE1ED23E6F8328E9F4F5E4668.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/323830343a323135633a383030303a3a2f33332d3333203d3e20323634353530.roa
Signing time:             Wed 04 Dec 2024 03:38:47 +0000
ROA not before:           Wed 04 Dec 2024 03:33:47 +0000
ROA not after:            Wed 03 Dec 2025 03:38:47 +0000
asID:                     264550
IP address blocks:        2804:215c:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:d5:8d:a1:8c:a8:9d:52:49:41:9d:ca:3c:89:35:05:56:32:31:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B3CF06C0002D40DE1ED23E6F8328E9F4F5E4668
        Validity
            Not Before: Dec  4 03:33:47 2024 GMT
            Not After : Dec  3 03:38:47 2025 GMT
        Subject: CN=EFF2F4EDC7E36C7F0622D3B37690CFA76782E9AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:68:ac:a9:17:0f:df:0c:2e:06:41:e4:4c:f9:
                    c8:b5:e3:00:29:a7:cc:68:42:c5:f7:e6:fe:3e:75:
                    33:f9:e8:4e:5c:e5:d7:b1:56:2b:c7:4b:08:01:08:
                    28:12:f3:8a:23:69:c8:40:13:cb:c5:34:38:23:c3:
                    b8:62:9e:c1:50:9f:62:25:ff:41:51:62:55:db:5d:
                    61:28:aa:12:21:e7:3f:ef:75:e1:19:57:c8:96:ab:
                    19:8e:97:20:cc:fd:c9:f8:a4:3b:90:45:88:64:c0:
                    2c:38:54:bf:4e:79:62:1f:f1:2d:5e:52:93:89:d2:
                    eb:2b:16:7c:a3:06:5e:90:1e:09:89:eb:ec:df:db:
                    93:1c:ca:69:ae:ec:e4:93:bc:d4:7d:e2:10:2b:87:
                    c8:f9:db:44:1e:e6:20:6b:db:68:7c:a8:3c:d9:23:
                    41:fe:35:a3:a3:83:3b:6b:63:20:44:80:e7:45:af:
                    9a:08:89:e7:e1:47:da:09:0b:02:af:9a:e0:90:ee:
                    76:c4:cd:55:ad:12:32:fc:1a:a4:28:12:ba:56:72:
                    77:ee:1e:26:39:ef:ff:c2:40:45:39:d3:78:fa:e4:
                    52:75:ba:d4:69:39:19:7b:52:b1:ec:0b:4f:7a:a0:
                    04:16:86:ab:2b:14:32:4b:c6:a2:ef:52:d2:13:71:
                    b2:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:F2:F4:ED:C7:E3:6C:7F:06:22:D3:B3:76:90:CF:A7:67:82:E9:AC
            X509v3 Authority Key Identifier:
                keyid:4B:3C:F0:6C:00:02:D4:0D:E1:ED:23:E6:F8:32:8E:9F:4F:5E:46:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/4B3CF06C0002D40DE1ED23E6F8328E9F4F5E4668.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3CF06C0002D40DE1ED23E6F8328E9F4F5E4668.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/323830343a323135633a383030303a3a2f33332d3333203d3e20323634353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:215c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         8d:9a:0d:9b:bd:9f:ac:83:89:51:c3:18:de:13:95:61:60:52:
         4d:2a:63:bc:e4:e6:e4:8d:21:d9:b6:c6:29:13:ca:f8:4b:db:
         cc:92:ec:db:33:60:91:7b:fe:0e:8c:a1:48:ca:df:d4:83:76:
         0b:ec:32:ed:39:fa:49:28:1f:8d:55:38:92:4e:51:03:e8:e5:
         db:36:22:e2:9f:60:e9:cd:37:9a:5a:02:e9:34:36:bc:d9:8c:
         df:a3:c2:88:dc:1b:ce:94:f2:2a:82:0b:c5:e7:2a:64:f9:c3:
         5d:34:76:0f:c5:69:fd:e3:a5:05:d8:34:32:41:14:e4:61:fc:
         58:70:9e:c0:db:b4:6f:12:fa:e9:a7:b7:f5:06:07:79:01:8a:
         b1:8e:b2:57:32:be:98:4b:03:3d:19:d2:f4:87:76:e3:d1:d6:
         78:79:16:1f:e3:b1:b7:91:7c:c2:f5:5a:f8:96:2c:5e:46:1c:
         2b:62:8b:e6:bb:cc:dd:61:fa:39:2a:f1:6a:88:84:ab:90:78:
         90:b0:9b:2d:42:ba:0c:95:ff:cd:2d:c4:1b:f8:7b:1b:4d:8d:
         ab:80:fd:b1:2f:16:7b:ba:3f:24:41:ba:6e:ad:cb:84:55:c0:
         fd:24:65:95:9f:1d:03:15:b0:03:f8:11:ab:1c:10:50:7a:16:
         99:d6:f3:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:33:07 2025 by rpki-client