Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/323830343a333336303a666130303a3a2f34382d3438203d3e20323632373235.roa
File:                     323830343a333336303a666130303a3a2f34382d3438203d3e20323632373235.roa (raw, json)
Hash identifier:          o4JfZdGVCdVqGD8DDz4G//DhD/0SCYB48KhIvrFTPmo=
Subject key identifier:   29:D9:05:83:21:7D:A8:CC:DB:41:AB:B2:11:36:6C:42:57:33:BF:81
Certificate issuer:       /CN=20DE0E6E3D621F83173025848A78216A75E502CC
Certificate serial:       0A48E391A291E54F103CA3046DDE1F2592C1A52F
Authority key identifier: 20:DE:0E:6E:3D:62:1F:83:17:30:25:84:8A:78:21:6A:75:E5:02:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DE0E6E3D621F83173025848A78216A75E502CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/323830343a333336303a666130303a3a2f34382d3438203d3e20323632373235.roa
Signing time:             Mon 11 Nov 2024 21:01:51 +0000
ROA not before:           Mon 11 Nov 2024 20:56:51 +0000
ROA not after:            Mon 10 Nov 2025 21:01:51 +0000
asID:                     262725
IP address blocks:        2804:3360:fa00::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:48:e3:91:a2:91:e5:4f:10:3c:a3:04:6d:de:1f:25:92:c1:a5:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20DE0E6E3D621F83173025848A78216A75E502CC
        Validity
            Not Before: Nov 11 20:56:51 2024 GMT
            Not After : Nov 10 21:01:51 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:87:80:a8:4c:ff:68:ce:53:b8:0a:c1:5c:7e:
                    6b:99:14:a0:d7:ba:98:c7:1c:bd:07:a1:12:65:21:
                    47:fa:1f:c0:8b:a9:e7:e0:85:59:5a:2c:43:ae:32:
                    8e:b0:f4:41:ac:1e:5f:7a:6e:45:07:05:6b:3e:9f:
                    1d:4c:4a:42:92:b2:6b:50:5c:37:d7:bf:3d:01:16:
                    b3:0e:1b:ea:a4:ea:59:50:db:5c:cb:d9:9f:69:d3:
                    7a:6a:b4:2f:02:02:ac:98:45:3b:f9:9c:5f:3d:a9:
                    52:59:b6:ad:04:b5:34:c1:2c:71:f8:34:9e:bf:e0:
                    1f:b5:e2:5c:e9:8c:06:e8:ff:97:b8:f9:92:5f:6e:
                    37:3b:6f:46:c0:76:8d:f1:70:f1:14:4e:f7:78:49:
                    b9:6f:f1:24:1a:8e:14:72:bc:01:e9:f9:c0:fb:ff:
                    d2:0b:e9:a7:42:9d:d5:2c:c2:f9:12:4d:c8:b2:81:
                    79:bf:4d:2b:46:88:c9:ab:73:ae:3c:ea:23:ef:65:
                    4f:5d:31:ef:02:2a:98:ae:2c:23:27:91:c7:5c:35:
                    ac:da:b7:7a:9a:18:71:e3:72:de:7a:31:7e:f4:2e:
                    ba:76:f9:dc:e1:e2:11:22:12:00:b6:92:fa:e0:0a:
                    34:c6:7a:5a:5f:6f:88:32:08:d1:a1:8c:01:7f:de:
                    89:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:D9:05:83:21:7D:A8:CC:DB:41:AB:B2:11:36:6C:42:57:33:BF:81
            X509v3 Authority Key Identifier:
                keyid:20:DE:0E:6E:3D:62:1F:83:17:30:25:84:8A:78:21:6A:75:E5:02:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/20DE0E6E3D621F83173025848A78216A75E502CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DE0E6E3D621F83173025848A78216A75E502CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/323830343a333336303a666130303a3a2f34382d3438203d3e20323632373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3360:fa00::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:73:bc:f4:92:6e:94:5b:51:ba:51:73:eb:80:dc:ad:54:d1:
         56:cd:9f:29:f1:a3:cc:10:53:30:b7:0c:d1:ee:d3:10:da:62:
         af:b7:73:08:13:8a:52:ee:aa:b8:3f:fe:ca:5c:40:4b:7d:d1:
         32:47:ed:9d:de:e8:b2:c3:8e:a2:be:ce:36:79:a8:7c:7b:e8:
         93:f6:3f:aa:c6:1d:14:f4:6c:5d:1d:66:85:8d:38:f7:37:3c:
         b7:8a:59:7e:db:bf:8d:bd:af:7f:f1:6b:7d:f9:8e:31:d3:ba:
         37:3b:1d:1f:9b:e6:13:bd:44:23:0a:37:09:ab:49:e7:15:a5:
         e6:52:2f:77:8d:8b:9a:1e:0e:bb:3f:09:c8:15:fa:6a:a2:75:
         a5:a0:c7:ca:6b:1c:9c:37:eb:93:82:ef:43:cf:c5:1a:3d:48:
         eb:3e:5f:3e:29:4b:56:e9:80:02:d6:8c:51:fe:b0:0f:71:7e:
         0f:12:74:d1:25:3b:67:01:d9:31:c8:9c:be:24:d4:39:4d:9d:
         3d:22:80:c7:ae:2d:b6:4a:c0:4e:72:12:40:ec:89:30:d0:77:
         73:81:b2:eb:43:ef:2a:8a:34:52:07:28:ed:0d:70:f8:9d:e4:
         98:60:42:97:fc:c5:55:95:00:2a:cf:f6:1e:3d:98:34:59:9b:
         0c:ed:dc:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:23:09 2025 by rpki-client