Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a666666663a3a2f34382d3438203d3e203631383838.roa
File:                     323830343a6536303a666666663a3a2f34382d3438203d3e203631383838.roa (raw, json)
Hash identifier:          CjBlXm7G6TKsmum5E6thrD/wHSYXVVLZHdvj4JFrXKQ=
Subject key identifier:   EC:2B:FC:0C:E8:AA:6B:FC:AB:CA:62:CD:05:B6:83:F7:CE:E5:31:3D
Certificate issuer:       /CN=961AE5D479B2534022682B64D7F0EFE6AA11F791
Certificate serial:       04DE41228EB993E2659B0F15A9598677ECD0AD7D
Authority key identifier: 96:1A:E5:D4:79:B2:53:40:22:68:2B:64:D7:F0:EF:E6:AA:11:F7:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a666666663a3a2f34382d3438203d3e203631383838.roa
Signing time:             Wed 05 Mar 2025 19:00:03 +0000
ROA not before:           Wed 05 Mar 2025 18:55:03 +0000
ROA not after:            Wed 04 Mar 2026 19:00:03 +0000
asID:                     61888
IP address blocks:        2804:e60:ffff::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:de:41:22:8e:b9:93:e2:65:9b:0f:15:a9:59:86:77:ec:d0:ad:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961AE5D479B2534022682B64D7F0EFE6AA11F791
        Validity
            Not Before: Mar  5 18:55:03 2025 GMT
            Not After : Mar  4 19:00:03 2026 GMT
        Subject: CN=EC2BFC0CE8AA6BFCABCA62CD05B683F7CEE5313D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:c1:e9:4a:67:0b:45:85:47:fe:1a:29:68:1c:
                    af:d6:22:57:eb:c7:f3:18:b3:47:99:9e:64:b3:a6:
                    37:8b:12:da:c4:c9:4a:ad:f7:d0:94:7d:1b:5a:23:
                    01:a6:40:e4:69:fa:82:65:a0:9a:3a:6f:20:23:93:
                    42:64:44:68:46:d1:a6:b7:ce:5f:33:7f:93:54:ee:
                    5e:1d:1c:79:a3:c4:58:b5:16:e0:2b:c5:64:be:38:
                    26:5a:64:4c:6c:5a:42:e4:f1:70:da:fa:eb:62:0f:
                    61:19:3b:a0:b8:85:b2:cc:f8:c6:f1:a2:d0:34:7d:
                    41:c5:9c:ac:9b:29:f5:77:d0:49:6b:71:4b:a6:6c:
                    95:90:1b:0d:95:b3:e5:b7:4b:11:ed:0f:ea:59:9d:
                    35:fc:e5:f0:bb:f8:15:e0:38:b0:88:c5:30:21:32:
                    ec:68:18:ce:c3:a2:4c:79:88:27:b0:e1:a8:dc:7b:
                    6c:21:4f:dc:00:7d:ae:f1:c5:b2:ee:ca:fd:b0:cd:
                    a8:6e:38:0a:79:4b:ef:64:8c:ce:97:43:5c:cc:97:
                    df:55:f6:2b:6a:d1:aa:dd:58:5c:5a:b9:66:ed:47:
                    90:f3:d8:72:a3:03:6d:c2:13:5f:b9:80:d2:70:6b:
                    6a:2f:65:66:7e:9f:db:c4:7a:38:4a:e9:b9:5b:c0:
                    4b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:2B:FC:0C:E8:AA:6B:FC:AB:CA:62:CD:05:B6:83:F7:CE:E5:31:3D
            X509v3 Authority Key Identifier:
                keyid:96:1A:E5:D4:79:B2:53:40:22:68:2B:64:D7:F0:EF:E6:AA:11:F7:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a666666663a3a2f34382d3438203d3e203631383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e60:ffff::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:4f:ce:38:3c:73:bd:88:e6:b2:c9:44:0b:39:d5:a9:52:73:
         25:b4:6d:c5:de:e7:2f:7d:ac:86:23:65:5a:67:9e:ba:24:23:
         ac:ac:4d:e0:63:96:3a:9d:41:0b:cd:ff:f8:90:ac:3c:fc:0a:
         30:a8:f4:3c:20:c3:5f:ee:8a:08:54:0d:4f:1c:ad:60:cc:c3:
         ca:07:e5:03:36:1b:be:bd:2d:a3:cd:e5:c9:cd:ec:da:4e:75:
         fe:92:b7:e2:eb:f9:e6:05:65:50:c1:4b:5c:0b:ff:d7:43:1d:
         6e:aa:e8:33:f4:a0:86:d7:5e:cd:14:d7:31:7f:24:13:44:73:
         63:95:04:6b:75:48:91:3a:36:32:26:bc:7a:6f:57:8b:00:eb:
         6d:8e:a1:66:5d:b6:58:de:3a:32:b6:d4:b6:38:9a:d5:a0:c0:
         20:3c:28:d7:4c:1e:08:3a:1a:56:25:76:1c:d4:98:bf:d4:7b:
         dc:10:32:87:bb:7f:da:46:d7:20:7c:6f:7f:82:bf:0e:cb:20:
         39:0a:45:cb:28:e4:1a:be:85:42:ed:44:6e:95:88:96:45:97:
         c9:d8:c7:1d:52:05:86:d4:f0:b9:e5:35:45:26:41:34:fe:29:
         09:a7:70:7b:8c:3d:b9:b7:26:d5:fb:43:f0:e1:b9:92:27:6d:
         a8:35:c7:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:48:06 2025 by rpki-client