Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/323830343a3235303a3a2f34302d3430203d3e20323632383033.roa
File:                     323830343a3235303a3a2f34302d3430203d3e20323632383033.roa (raw, json)
Hash identifier:          tV1YSi7gDS+2RdOPJ4eqC6whFyQ2JiAjDsO4b6fWYWM=
Subject key identifier:   9B:DD:16:2B:45:7A:EF:ED:3C:FA:23:61:71:CF:D2:F6:BA:0E:53:DF
Certificate issuer:       /CN=6D48F047E612BDC947C9747FC9B62D281F0796A4
Certificate serial:       4C021DD0AE6658A61679AA7DBC42A480C153002A
Authority key identifier: 6D:48:F0:47:E6:12:BD:C9:47:C9:74:7F:C9:B6:2D:28:1F:07:96:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D48F047E612BDC947C9747FC9B62D281F0796A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/323830343a3235303a3a2f34302d3430203d3e20323632383033.roa
Signing time:             Fri 14 Mar 2025 18:17:07 +0000
ROA not before:           Fri 14 Mar 2025 18:12:07 +0000
ROA not after:            Fri 13 Mar 2026 18:17:07 +0000
asID:                     262803
IP address blocks:        2804:250::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:02:1d:d0:ae:66:58:a6:16:79:aa:7d:bc:42:a4:80:c1:53:00:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D48F047E612BDC947C9747FC9B62D281F0796A4
        Validity
            Not Before: Mar 14 18:12:07 2025 GMT
            Not After : Mar 13 18:17:07 2026 GMT
        Subject: CN=9BDD162B457AEFED3CFA236171CFD2F6BA0E53DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:99:4c:60:92:83:dc:92:32:06:59:c2:de:bf:
                    51:b2:69:49:e3:b2:94:0b:9a:f5:12:d7:5c:33:be:
                    44:d3:6f:dd:8b:e3:3d:29:e7:ac:04:92:17:ca:a0:
                    fe:df:c8:4d:fa:cc:c5:f3:36:7a:08:14:03:e3:cd:
                    a8:dc:04:e4:e1:06:53:bb:2a:5c:d0:12:a5:8b:fe:
                    32:c9:ac:32:b9:e3:af:e8:8a:9a:db:30:ba:7e:d6:
                    57:54:27:b2:46:4d:22:42:a0:b7:78:95:b4:17:8f:
                    30:e2:99:13:ba:89:96:83:de:d1:1c:3c:6c:a9:79:
                    c9:81:93:c6:8a:2e:02:c5:ec:51:40:4d:58:d6:42:
                    d6:3f:3a:e4:9a:ee:64:94:ac:ad:47:c1:62:28:31:
                    1d:62:f6:4e:68:d5:42:80:2f:2a:69:1f:5b:11:a1:
                    7e:62:96:8b:a0:6b:03:93:bc:65:42:51:47:b4:15:
                    88:ae:5b:c5:3c:0e:be:ee:80:7b:be:61:c4:e8:ef:
                    53:5a:6e:45:f4:dc:9a:31:e0:7d:53:fb:81:da:4e:
                    f2:da:0b:40:d2:36:ef:41:55:28:cf:40:39:ba:e0:
                    ee:8e:c7:a2:79:36:4b:df:d6:71:eb:98:6d:80:16:
                    af:50:12:8a:57:0e:ad:db:bf:9a:39:6d:65:21:6b:
                    d7:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:DD:16:2B:45:7A:EF:ED:3C:FA:23:61:71:CF:D2:F6:BA:0E:53:DF
            X509v3 Authority Key Identifier:
                keyid:6D:48:F0:47:E6:12:BD:C9:47:C9:74:7F:C9:B6:2D:28:1F:07:96:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/6D48F047E612BDC947C9747FC9B62D281F0796A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D48F047E612BDC947C9747FC9B62D281F0796A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/323830343a3235303a3a2f34302d3430203d3e20323632383033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:250::/40

    Signature Algorithm: sha256WithRSAEncryption
         29:18:b3:1e:45:1b:34:58:ee:86:db:87:d0:e2:8e:05:31:68:
         2e:d2:e6:f0:1a:07:d0:52:a3:67:dd:95:e0:a7:be:bb:3e:5e:
         c6:e9:c8:ef:0c:e9:a1:08:c8:95:27:35:29:22:2c:51:7b:33:
         f4:26:b3:bc:ae:a7:94:4c:1d:c6:d2:43:c8:64:f8:da:ce:39:
         12:4b:89:d7:78:9e:b5:1e:43:c1:2e:80:56:6b:c1:26:ad:13:
         8b:64:9d:82:08:0c:ef:1e:e5:01:69:af:ad:05:be:df:5b:f7:
         b6:75:ba:7d:d8:7a:1f:32:2a:d7:c7:ee:cb:b3:0a:c9:7c:1b:
         6c:8b:0e:cf:fb:74:4a:b1:d9:ea:bd:77:68:21:22:a5:12:8a:
         a4:f2:91:eb:d8:a7:f9:7c:cb:0c:d9:c3:ed:b5:f6:0a:c3:29:
         61:2b:b4:0c:d1:59:bc:35:33:68:33:ac:84:1a:a6:c3:11:05:
         00:b5:54:b1:da:1d:b1:bd:f9:f0:2f:db:d5:4f:b1:fe:59:1a:
         10:e9:df:b7:12:01:39:db:3e:79:9f:46:db:76:47:cf:f9:9e:
         7e:8d:fc:7d:73:64:3a:8d:eb:0c:f6:46:55:c1:77:5f:b8:05:
         f7:f9:44:cb:71:38:59:01:4b:56:e0:e6:e3:ce:1f:6c:dc:23:
         7b:31:05:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:38:09 2025 by rpki-client