Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2i3pNdkQrPYH4cT4Vpn46Yvpaz4tsbhdQ6ozruAFNQxq/0/323830343a363937343a3a2f33322d3438203d3e20323730323731.roa
File:                     323830343a363937343a3a2f33322d3438203d3e20323730323731.roa (raw, json)
Hash identifier:          66K8O3gy1ICvCicOY5DaPbAtfBHIgFnjSKPskjrZRmU=
Subject key identifier:   AC:0F:DD:95:BC:B3:9A:23:93:8B:1D:E1:6A:2A:A6:D1:8B:A6:01:FA
Certificate issuer:       /CN=A7774A69190523932E4FE0BAAE66C849EEC4F6EB
Certificate serial:       3A3F3C280B29FE7F62BE4E9E7444E52DB8D32A94
Authority key identifier: A7:77:4A:69:19:05:23:93:2E:4F:E0:BA:AE:66:C8:49:EE:C4:F6:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7774A69190523932E4FE0BAAE66C849EEC4F6EB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2i3pNdkQrPYH4cT4Vpn46Yvpaz4tsbhdQ6ozruAFNQxq/0/323830343a363937343a3a2f33322d3438203d3e20323730323731.roa
Signing time:             Sat 09 Nov 2024 15:46:03 +0000
ROA not before:           Sat 09 Nov 2024 15:41:03 +0000
ROA not after:            Sat 08 Nov 2025 15:46:03 +0000
asID:                     270271
IP address blocks:        2804:6974::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:3f:3c:28:0b:29:fe:7f:62:be:4e:9e:74:44:e5:2d:b8:d3:2a:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7774A69190523932E4FE0BAAE66C849EEC4F6EB
        Validity
            Not Before: Nov  9 15:41:03 2024 GMT
            Not After : Nov  8 15:46:03 2025 GMT
        Subject: CN=AC0FDD95BCB39A23938B1DE16A2AA6D18BA601FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ad:39:93:e6:24:05:c4:be:0d:5c:cf:d3:49:
                    2f:7b:fd:25:8d:ef:cf:c3:59:bc:09:7c:ac:2a:41:
                    83:ae:74:42:34:3d:5e:a0:ae:e6:1b:b3:5d:6c:07:
                    25:7c:79:ca:d8:a9:75:ec:0c:e4:65:d4:80:d5:fd:
                    a3:53:cd:2a:2b:a2:9d:7d:3f:bb:5c:1e:16:ad:a6:
                    8f:f6:b5:48:32:4c:1b:fa:74:90:e6:98:61:18:62:
                    8e:a4:05:46:52:c8:82:58:cd:f9:18:f2:c7:41:c7:
                    d5:ad:a0:bc:7f:1a:3c:e0:29:25:1f:30:63:97:0e:
                    48:61:b5:96:e8:9d:84:b3:44:c9:9c:a5:35:f2:92:
                    6e:7a:68:c9:83:84:13:75:ec:ed:02:c9:09:7c:2d:
                    c1:6e:e0:1e:12:ee:d2:e0:b6:f8:50:71:ac:8f:13:
                    7c:61:3c:ab:4e:f5:b0:c7:6f:1f:e7:80:bd:ae:8a:
                    19:bf:a5:0d:34:ad:16:5d:e0:80:61:f6:af:01:58:
                    f0:c1:1f:c8:43:05:0a:1b:3c:c6:cc:6e:c2:86:47:
                    57:88:ed:eb:47:44:e0:5a:be:f6:2f:69:f9:94:0e:
                    3e:40:62:a3:8e:a6:de:ef:25:8c:35:f3:81:de:00:
                    87:62:e4:e0:ca:d5:de:f1:e3:b3:48:fb:b2:be:17:
                    bd:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:0F:DD:95:BC:B3:9A:23:93:8B:1D:E1:6A:2A:A6:D1:8B:A6:01:FA
            X509v3 Authority Key Identifier:
                keyid:A7:77:4A:69:19:05:23:93:2E:4F:E0:BA:AE:66:C8:49:EE:C4:F6:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2i3pNdkQrPYH4cT4Vpn46Yvpaz4tsbhdQ6ozruAFNQxq/0/A7774A69190523932E4FE0BAAE66C849EEC4F6EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7774A69190523932E4FE0BAAE66C849EEC4F6EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2i3pNdkQrPYH4cT4Vpn46Yvpaz4tsbhdQ6ozruAFNQxq/0/323830343a363937343a3a2f33322d3438203d3e20323730323731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6974::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:3e:e4:cd:11:62:81:02:26:3a:80:c4:31:de:28:a9:84:d1:
         8c:e6:4d:06:16:49:a4:53:d6:e0:6d:48:ac:bf:41:f1:f8:0f:
         9f:fd:a8:4f:42:85:be:4f:76:8f:02:f4:65:64:1c:68:da:c6:
         77:f6:9b:93:8a:d7:0e:39:9c:9f:7e:a3:2e:fc:a7:46:5a:51:
         14:64:94:48:0d:e4:bc:b1:8e:29:c3:08:bb:a3:4f:ee:06:38:
         60:60:79:e7:81:64:be:68:da:5a:f7:a2:b0:9d:f8:b9:70:7d:
         02:a0:a9:d9:bb:79:f5:02:d9:5c:7d:7e:20:25:5e:be:6e:0c:
         6c:75:36:d2:37:0d:a2:00:30:09:23:96:c2:99:c2:13:61:34:
         eb:65:e6:25:ed:81:a5:e5:8c:7f:58:3b:94:69:72:5a:e2:89:
         37:4c:c2:59:68:b0:bd:74:12:24:68:30:0f:7b:4f:e7:6b:76:
         54:03:ae:75:fd:8d:31:10:73:83:29:99:ae:49:89:e7:5a:2c:
         d5:64:b7:49:ad:ab:3f:50:c1:6f:16:83:21:df:c0:46:d6:37:
         ba:bf:8a:ce:31:39:47:c1:3b:ce:7a:b8:a1:04:c0:72:8b:93:
         63:64:71:a5:b7:a2:ea:38:0d:02:5b:f8:db:ec:a0:b1:27:a2:
         dd:13:08:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:44:27 2025 by rpki-client