Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/323830343a6139633a3a2f33332d3333203d3e203532383938.roa
File:                     323830343a6139633a3a2f33332d3333203d3e203532383938.roa (raw, json)
Hash identifier:          a+ROgH/yXsgU59EXVGvGxFZL7VFnSwrKrMxX9MGcA5I=
Subject key identifier:   92:CA:F1:4A:26:4D:BD:48:EC:76:D0:96:94:1C:EA:B1:A3:4A:78:34
Certificate issuer:       /CN=ECFAB6AC9374C6518AC9B2588CE9843E89FD8654
Certificate serial:       04A63AA7542C3DCF051C6FC558F6921ECD51FE85
Authority key identifier: EC:FA:B6:AC:93:74:C6:51:8A:C9:B2:58:8C:E9:84:3E:89:FD:86:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECFAB6AC9374C6518AC9B2588CE9843E89FD8654.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/323830343a6139633a3a2f33332d3333203d3e203532383938.roa
Signing time:             Mon 23 Dec 2024 11:42:28 +0000
ROA not before:           Mon 23 Dec 2024 11:37:28 +0000
ROA not after:            Mon 22 Dec 2025 11:42:28 +0000
asID:                     52898
IP address blocks:        2804:a9c::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:a6:3a:a7:54:2c:3d:cf:05:1c:6f:c5:58:f6:92:1e:cd:51:fe:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECFAB6AC9374C6518AC9B2588CE9843E89FD8654
        Validity
            Not Before: Dec 23 11:37:28 2024 GMT
            Not After : Dec 22 11:42:28 2025 GMT
        Subject: CN=92CAF14A264DBD48EC76D096941CEAB1A34A7834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:19:80:c2:e8:c8:a7:3a:4f:78:02:e5:17:91:
                    4b:2c:19:84:3f:b7:26:71:e0:22:36:a2:bc:0d:1b:
                    56:98:6f:65:08:04:2e:0c:c4:4e:89:47:f9:30:d4:
                    4c:c1:68:1c:bc:35:cc:d4:72:db:e8:a0:19:2a:20:
                    3c:e1:e4:68:99:1e:c7:24:28:9d:60:44:27:0a:ed:
                    16:6a:b8:90:70:7b:2f:d4:f8:17:c1:da:66:ee:3a:
                    57:9e:b6:78:d8:6b:98:95:0c:38:ba:93:05:32:a7:
                    2e:3d:86:03:f3:d4:86:5b:29:7d:d5:c2:0e:a7:db:
                    30:98:6f:34:05:a5:5d:5b:58:c5:0e:d6:79:a0:96:
                    5c:38:1b:6a:7d:01:c3:38:26:da:b9:47:9c:cc:8c:
                    66:29:f2:15:09:ad:f4:a9:3e:fb:86:e6:e0:4a:2b:
                    8a:c6:1c:20:4b:5a:40:e4:2f:38:fd:41:6e:18:35:
                    ee:7c:a6:aa:d6:fb:0b:9b:7c:f4:22:fc:fe:34:26:
                    f9:51:f2:fa:c8:f2:4d:d8:4b:a8:4e:7b:d8:55:7c:
                    fe:dd:6b:6e:fe:a0:f9:e9:59:97:00:58:16:f2:77:
                    3a:e7:0a:7a:d2:3f:5f:12:1f:be:6f:59:9e:8a:2b:
                    33:ae:b8:22:bd:23:51:49:17:0b:d8:05:bf:80:4b:
                    e4:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:CA:F1:4A:26:4D:BD:48:EC:76:D0:96:94:1C:EA:B1:A3:4A:78:34
            X509v3 Authority Key Identifier:
                keyid:EC:FA:B6:AC:93:74:C6:51:8A:C9:B2:58:8C:E9:84:3E:89:FD:86:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/ECFAB6AC9374C6518AC9B2588CE9843E89FD8654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECFAB6AC9374C6518AC9B2588CE9843E89FD8654.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/323830343a6139633a3a2f33332d3333203d3e203532383938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a9c::/33

    Signature Algorithm: sha256WithRSAEncryption
         bc:ce:fe:2e:23:22:30:87:e3:c2:91:62:27:87:dd:6a:26:44:
         ee:53:4f:e5:85:72:b0:93:33:be:ff:83:8f:76:d0:f8:ba:a6:
         7f:a0:c0:70:7f:cb:30:97:7c:36:67:d1:40:7d:b6:aa:30:3e:
         85:f9:47:bb:9f:55:35:0d:80:76:ca:6a:62:90:47:22:16:a5:
         26:d6:e2:ef:bf:e0:4e:e2:4e:88:40:a9:28:3a:d0:c2:81:eb:
         09:37:b5:ae:46:a1:fb:fb:c0:f4:6b:f8:48:db:57:78:8b:5a:
         4b:cd:1a:9d:be:fa:6d:fd:3a:0c:52:43:f7:61:ec:06:8e:a2:
         db:a5:ae:25:1d:5d:2d:fa:cf:dc:2a:ed:1a:17:ec:72:dd:1d:
         8a:6b:c5:54:91:18:a8:fa:56:13:6f:43:e1:3b:d6:cc:31:9c:
         89:4e:a4:0f:c7:6e:3b:53:e5:a8:e9:46:f0:33:48:37:c3:af:
         41:55:8b:13:8d:c4:30:7e:63:7c:19:55:6d:c8:87:31:e9:cb:
         26:c0:41:0e:2e:b7:1e:58:ae:ec:a6:f1:4b:72:79:db:d6:02:
         98:ea:6c:60:5d:88:7c:8f:4d:3c:8d:e1:db:ce:60:78:84:30:
         cb:d1:f4:ad:68:34:82:3f:2e:6a:d0:9b:4d:d9:ef:53:9c:20:
         0a:d9:3f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:06:20 2025 by rpki-client