Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/323830343a6139633a3a2f33322d3332203d3e203532383938.roa
File:                     323830343a6139633a3a2f33322d3332203d3e203532383938.roa (raw, json)
Hash identifier:          SD0K2nMqCT8+bY+1wtP9i/b0ydyEwrzxXhRpey4fhvk=
Subject key identifier:   EC:1C:90:F8:EF:A7:66:0F:65:F3:74:5A:E7:29:81:8E:D9:28:38:3E
Certificate issuer:       /CN=ECFAB6AC9374C6518AC9B2588CE9843E89FD8654
Certificate serial:       48F824AC0DDD5F617D0346E9BAF6182DEB3E911C
Authority key identifier: EC:FA:B6:AC:93:74:C6:51:8A:C9:B2:58:8C:E9:84:3E:89:FD:86:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECFAB6AC9374C6518AC9B2588CE9843E89FD8654.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/323830343a6139633a3a2f33322d3332203d3e203532383938.roa
Signing time:             Mon 23 Dec 2024 11:42:22 +0000
ROA not before:           Mon 23 Dec 2024 11:37:22 +0000
ROA not after:            Mon 22 Dec 2025 11:42:22 +0000
asID:                     52898
IP address blocks:        2804:a9c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:f8:24:ac:0d:dd:5f:61:7d:03:46:e9:ba:f6:18:2d:eb:3e:91:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECFAB6AC9374C6518AC9B2588CE9843E89FD8654
        Validity
            Not Before: Dec 23 11:37:22 2024 GMT
            Not After : Dec 22 11:42:22 2025 GMT
        Subject: CN=EC1C90F8EFA7660F65F3745AE729818ED928383E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:69:b5:72:d3:23:9b:76:f0:7e:d5:02:42:3e:
                    3c:33:15:05:43:d3:b5:06:8b:49:8e:8e:2d:cc:69:
                    a1:f7:54:9c:9d:24:fc:3f:11:f3:c8:26:6d:35:c1:
                    41:1e:e6:a2:64:22:ab:cc:01:d4:40:0a:0c:60:ac:
                    59:98:51:86:e3:47:68:3a:40:4a:dc:f3:84:27:18:
                    d4:28:9c:45:c8:e4:04:a1:8c:6a:85:b1:40:70:98:
                    2b:80:7a:84:05:76:81:dd:e1:af:53:79:ca:8a:ff:
                    a0:c6:e7:01:1d:08:5b:ab:f9:6e:45:2a:6d:20:92:
                    64:ae:25:d4:a1:39:c8:12:eb:cd:d7:48:87:00:da:
                    cc:e0:f9:51:de:8e:0d:d3:06:b8:8e:e9:e2:33:81:
                    b4:7d:32:1c:b3:4d:9c:c6:60:31:3c:40:1b:7c:d5:
                    a5:48:d3:51:2a:1c:ec:b6:0b:b7:d8:59:54:cb:8d:
                    f9:77:36:61:c7:d5:82:df:3b:06:54:c9:c6:3e:16:
                    99:17:41:ec:e7:3d:d6:f4:81:8e:e7:8f:55:02:75:
                    80:3a:f3:df:7f:76:ab:08:fb:ed:95:07:05:f5:94:
                    6b:b3:81:c6:c4:d4:53:00:9a:2e:28:60:21:77:f0:
                    a0:ab:ee:31:33:da:fc:39:f6:19:28:d2:a4:0d:d3:
                    a9:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:1C:90:F8:EF:A7:66:0F:65:F3:74:5A:E7:29:81:8E:D9:28:38:3E
            X509v3 Authority Key Identifier:
                keyid:EC:FA:B6:AC:93:74:C6:51:8A:C9:B2:58:8C:E9:84:3E:89:FD:86:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/ECFAB6AC9374C6518AC9B2588CE9843E89FD8654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECFAB6AC9374C6518AC9B2588CE9843E89FD8654.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/323830343a6139633a3a2f33322d3332203d3e203532383938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a9c::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:ca:1e:dd:d8:90:0f:61:6a:d9:c7:49:6d:51:81:f2:b3:70:
         82:7e:41:51:1f:de:17:3d:90:44:60:a0:99:a9:2a:1f:1a:57:
         16:82:90:7b:35:ab:eb:5a:1e:17:d7:82:3e:07:ef:3f:12:9e:
         72:61:f9:b7:9b:1d:a3:a8:89:25:e5:a1:9e:a4:7b:74:da:16:
         0d:9b:f0:b2:df:0a:e4:56:04:68:d5:c2:ed:b3:93:cc:b2:b7:
         bd:70:7a:f8:44:58:b1:62:64:46:cc:a9:67:fb:b2:92:19:bb:
         7f:25:a6:df:ee:e1:d1:92:ac:75:c0:4d:52:ef:1a:a3:19:6d:
         c6:ba:56:e7:c1:f6:64:09:de:aa:77:9a:80:11:a3:72:65:24:
         00:2e:03:19:bd:01:01:bc:2b:53:f7:71:da:40:17:0f:34:06:
         ef:bc:20:b8:52:7d:cb:85:65:a1:01:42:ed:f0:11:4f:16:6e:
         9c:91:f7:e3:60:96:37:08:a2:bb:78:3b:51:e4:ae:a2:c5:42:
         6b:15:8c:e1:f3:a2:d6:8b:33:0d:e7:be:1d:02:71:79:3d:4f:
         77:2b:02:fd:d3:03:57:80:ab:6e:ef:14:89:e1:6f:57:93:03:
         7b:6b:78:d4:dc:50:8b:57:3d:c1:f7:5b:87:b5:66:fd:31:4f:
         3c:ae:3c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:06:30 2025 by rpki-client