Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/323830343a323331633a643030303a3a2f33362d3336203d3e203631353931.roa
File:                     323830343a323331633a643030303a3a2f33362d3336203d3e203631353931.roa (raw, json)
Hash identifier:          B3PwBlO7YpfANO6ItonuG35eUedv9WPkE8rZSuBE1FY=
Subject key identifier:   74:77:74:92:7C:37:94:5E:C7:BA:B1:5E:64:E0:F6:9A:EC:34:35:4C
Certificate issuer:       /CN=14490FD591932776F2F5F6CFB3C5431550A04F62
Certificate serial:       42C1B9899FF75A284E091E02A441D22C4059C531
Authority key identifier: 14:49:0F:D5:91:93:27:76:F2:F5:F6:CF:B3:C5:43:15:50:A0:4F:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/323830343a323331633a643030303a3a2f33362d3336203d3e203631353931.roa
Signing time:             Sat 01 Feb 2025 18:48:12 +0000
ROA not before:           Sat 01 Feb 2025 18:43:12 +0000
ROA not after:            Sat 31 Jan 2026 18:48:12 +0000
asID:                     61591
IP address blocks:        2804:231c:d000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:c1:b9:89:9f:f7:5a:28:4e:09:1e:02:a4:41:d2:2c:40:59:c5:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14490FD591932776F2F5F6CFB3C5431550A04F62
        Validity
            Not Before: Feb  1 18:43:12 2025 GMT
            Not After : Jan 31 18:48:12 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6a:d3:a4:72:eb:43:d0:04:b8:9b:b8:3c:d9:
                    77:ef:4f:a9:45:8a:34:19:64:05:07:7f:a2:b4:f2:
                    5f:d9:53:be:76:53:83:fe:55:a6:b0:a4:1a:cd:b3:
                    c2:da:2d:84:cc:85:a3:38:51:09:20:8a:93:0f:22:
                    6d:ee:59:f8:49:04:2e:0b:39:b3:25:00:24:28:f3:
                    4a:9e:2d:33:88:53:d0:08:78:6d:b9:28:3b:a4:6a:
                    c8:c2:e0:b9:64:c5:20:4f:86:c8:61:aa:03:7c:cd:
                    a9:fa:c3:36:1e:70:7c:30:df:10:b8:eb:6c:a4:4e:
                    5f:f3:60:2b:7f:82:a6:f8:67:8f:19:15:29:37:60:
                    59:2c:ff:da:41:fa:0b:c7:0a:ec:76:f8:b2:00:f0:
                    fa:3d:d0:16:a2:e8:7a:7e:15:55:f5:7c:15:cc:72:
                    1d:0e:9a:a7:f6:fa:9f:05:fa:8c:64:06:dc:ae:7a:
                    07:0a:ff:15:73:a8:69:ab:ab:a3:8b:5b:a2:24:f2:
                    d4:9a:29:97:e8:98:cb:c7:f1:96:03:c9:4f:d8:f0:
                    ba:d3:f5:bb:af:fe:8a:83:ed:dd:17:73:c4:04:99:
                    21:f7:ee:bc:15:25:bc:86:6f:5f:5b:62:d2:33:d0:
                    84:e6:8d:7c:a7:3c:35:65:6f:94:5b:db:f1:d2:06:
                    36:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:77:74:92:7C:37:94:5E:C7:BA:B1:5E:64:E0:F6:9A:EC:34:35:4C
            X509v3 Authority Key Identifier:
                keyid:14:49:0F:D5:91:93:27:76:F2:F5:F6:CF:B3:C5:43:15:50:A0:4F:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/323830343a323331633a643030303a3a2f33362d3336203d3e203631353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:231c:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         9b:c1:5d:d3:4e:a7:13:fb:ef:ac:ef:0b:f4:2b:41:54:74:c3:
         2d:a4:b5:90:c8:4b:38:fb:c8:72:a9:01:40:26:2e:6f:a8:81:
         e4:75:19:b7:b0:27:ec:5e:13:48:ff:84:85:e9:44:f7:7c:39:
         27:37:68:6f:f5:f4:b6:0a:5c:6b:72:ba:eb:e5:8c:3c:94:82:
         55:49:7d:97:c0:e9:90:c8:25:95:00:ca:5f:c1:e3:6f:7a:03:
         5b:0d:f0:11:33:6b:98:bb:22:b3:9a:ce:5a:d6:59:85:2c:6b:
         ab:01:3c:f3:ea:2e:de:08:7c:3a:ae:bf:45:19:54:f8:f8:fa:
         3b:40:cc:86:e7:2a:c5:78:41:3d:a0:7b:16:e5:d9:2d:96:27:
         59:d5:8c:93:99:b2:fd:70:39:6e:ee:f6:f2:53:33:50:3e:08:
         18:72:b4:c5:0a:e8:3a:9e:e7:a9:69:fe:43:14:4a:9c:42:8f:
         a5:ed:e7:2c:6e:1f:18:47:a6:63:47:e4:6e:3e:5e:d1:1f:6f:
         45:18:4a:a9:d6:78:a7:8d:cd:92:4b:eb:20:f2:a9:ec:fa:b6:
         82:e6:3e:43:66:f7:dc:05:db:dd:8e:31:2d:de:76:6f:5b:9c:
         36:e6:32:4f:59:6f:2f:f6:d4:f1:3e:97:43:f0:46:49:77:84:
         21:b0:2b:46
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Apr 9 00:13:00 2025 by rpki-client