Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/1/323830343a376534303a633030303a3a2f33342d3334203d3e20323731363132.roa
File:                     323830343a376534303a633030303a3a2f33342d3334203d3e20323731363132.roa (raw, json)
Hash identifier:          sp+NGXxnzqevO+1O6uIv8KF7xjmjGyUFH7Vk7rFQLto=
Subject key identifier:   CC:45:6C:A7:E9:04:02:78:B7:DF:43:19:2D:9F:19:13:C7:5F:3E:F4
Certificate issuer:       /CN=6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11
Certificate serial:       6A72423484BC8451E5DB832D4E82DBF50DAB5845
Authority key identifier: 6F:4E:1F:59:E6:18:6A:77:B0:AD:EF:3E:51:0A:CE:74:7B:F1:AB:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/1/323830343a376534303a633030303a3a2f33342d3334203d3e20323731363132.roa
Signing time:             Thu 06 Mar 2025 02:58:11 +0000
ROA not before:           Thu 06 Mar 2025 02:53:11 +0000
ROA not after:            Thu 05 Mar 2026 02:58:11 +0000
asID:                     271612
IP address blocks:        2804:7e40:c000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:72:42:34:84:bc:84:51:e5:db:83:2d:4e:82:db:f5:0d:ab:58:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11
        Validity
            Not Before: Mar  6 02:53:11 2025 GMT
            Not After : Mar  5 02:58:11 2026 GMT
        Subject: CN=CC456CA7E9040278B7DF43192D9F1913C75F3EF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:54:ce:3e:c1:cf:8d:07:a5:42:7c:99:b7:3d:
                    e3:2a:c9:58:bd:3d:1b:c6:ec:f0:f1:3d:02:24:2a:
                    08:47:ff:bc:07:a6:2b:c2:94:a4:70:ce:7f:63:f0:
                    92:9b:88:04:9d:fc:e4:47:e0:2f:4d:dd:7b:7d:be:
                    76:d9:fb:37:5f:bd:3a:65:88:1e:05:96:12:ae:b5:
                    e3:4e:3c:68:24:ac:24:ff:e0:f1:5c:1e:88:d8:27:
                    9c:fd:31:57:bf:0f:ff:53:20:88:98:9c:d3:c4:23:
                    d9:c1:56:15:be:67:80:1f:83:e6:02:82:bd:d0:49:
                    63:a2:71:d5:bf:e5:c6:d2:66:09:c2:8e:4d:f7:0e:
                    50:06:cd:64:dc:4b:d5:cc:18:4e:a3:aa:62:90:04:
                    82:ab:fb:a0:0c:03:9a:f8:1d:e3:10:a5:53:9c:c0:
                    c0:cc:66:dd:cc:02:97:8b:17:43:9d:61:a6:d6:14:
                    c0:ce:59:44:1b:64:84:f5:ad:25:68:34:af:ad:fa:
                    d3:6e:87:51:d4:a9:db:91:18:56:7b:7e:4d:4a:8f:
                    a7:d3:67:e5:e3:0d:29:6d:d5:65:f3:d0:84:85:7a:
                    b7:48:a7:be:d5:e8:38:9e:9d:d0:90:69:fb:52:bc:
                    e3:14:33:a0:19:91:ca:0e:c8:29:c3:60:90:a6:42:
                    0a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:45:6C:A7:E9:04:02:78:B7:DF:43:19:2D:9F:19:13:C7:5F:3E:F4
            X509v3 Authority Key Identifier:
                keyid:6F:4E:1F:59:E6:18:6A:77:B0:AD:EF:3E:51:0A:CE:74:7B:F1:AB:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/1/6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/1/323830343a376534303a633030303a3a2f33342d3334203d3e20323731363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e40:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         51:a7:f8:4b:ce:00:2d:6f:63:73:2e:1e:9f:37:f3:a2:23:ed:
         a9:29:72:f5:58:2d:a7:85:85:bc:b8:65:bd:81:72:7b:74:59:
         b5:17:c8:0e:69:ad:6b:76:d1:ac:4f:a5:1d:3c:1e:77:f6:f0:
         3e:fd:02:08:f1:52:0a:69:75:f7:d2:91:91:69:25:df:a7:58:
         92:d0:63:0d:28:5a:56:65:ea:c6:21:ee:4c:7f:9f:25:d6:13:
         87:35:d8:7c:57:b1:ec:89:33:bd:ba:40:b2:ac:07:1c:fe:c3:
         ae:02:02:a7:de:f5:1d:5c:ae:e5:1d:7c:9b:ab:5c:29:ad:aa:
         65:30:47:7c:3e:8c:f3:70:42:2b:6c:20:50:49:f8:4d:38:4a:
         b6:ff:d6:05:e2:00:ff:27:c9:6f:fa:01:4e:5a:21:aa:c8:90:
         5f:a4:bc:6d:14:a3:35:31:63:f0:75:9c:d6:2d:0f:3a:34:6a:
         83:9e:ca:c0:f3:77:5a:0a:ea:c4:3d:f8:84:a1:df:eb:3d:15:
         37:26:d7:fb:10:34:81:11:70:0d:15:46:d1:d2:6c:8a:a7:8f:
         06:fe:f3:7e:81:78:d6:0a:2e:8b:7c:ed:95:c0:d7:d4:66:37:
         45:6d:8b:4f:37:d6:e6:d6:92:94:99:d9:2c:32:15:dc:44:36:
         3c:0c:03:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:45:59 2025 by rpki-client