Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3hKi5Ys82hcybRZNYyZBgfnHhhkU4s9D8JUxjguATLhd/1/323830343a336239383a3a2f33322d3332203d3e20323636313539.roa
File:                     323830343a336239383a3a2f33322d3332203d3e20323636313539.roa (raw, json)
Hash identifier:          P8swHEGtfErEmA+6qG6JI27P8AH7ghAMDSFo5b7T5Ak=
Subject key identifier:   56:7E:5B:D5:DE:56:6F:2F:62:21:73:68:08:FC:BC:20:5A:80:47:3D
Certificate issuer:       /CN=69B7F5A9658DE6458B100966610F13A42172540B
Certificate serial:       180224C08AFABCE92037EAB17DD982B45F0B91BB
Authority key identifier: 69:B7:F5:A9:65:8D:E6:45:8B:10:09:66:61:0F:13:A4:21:72:54:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69B7F5A9658DE6458B100966610F13A42172540B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3hKi5Ys82hcybRZNYyZBgfnHhhkU4s9D8JUxjguATLhd/1/323830343a336239383a3a2f33322d3332203d3e20323636313539.roa
Signing time:             Thu 06 Mar 2025 11:52:47 +0000
ROA not before:           Thu 06 Mar 2025 11:47:47 +0000
ROA not after:            Thu 05 Mar 2026 11:52:47 +0000
asID:                     266159
IP address blocks:        2804:3b98::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:02:24:c0:8a:fa:bc:e9:20:37:ea:b1:7d:d9:82:b4:5f:0b:91:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69B7F5A9658DE6458B100966610F13A42172540B
        Validity
            Not Before: Mar  6 11:47:47 2025 GMT
            Not After : Mar  5 11:52:47 2026 GMT
        Subject: CN=567E5BD5DE566F2F6221736808FCBC205A80473D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:47:d4:36:dd:01:bc:79:d1:80:78:bc:fb:a5:
                    00:a3:53:4c:40:79:c4:b5:7f:9f:c8:9f:dc:50:3d:
                    1d:29:0b:b1:68:29:20:62:50:6e:24:2d:45:32:da:
                    bd:ec:be:f8:73:07:95:03:f6:55:25:b2:8e:b9:24:
                    2b:fb:a1:0c:e6:4b:c0:ca:01:e2:45:d8:c4:17:53:
                    a2:57:ab:79:69:11:96:49:ef:55:7d:30:2b:71:a5:
                    a0:8a:95:49:b8:2f:e5:e8:59:b7:b4:38:7a:cf:cd:
                    55:2c:a5:23:64:68:0b:06:08:0e:d3:00:5c:b9:ae:
                    8e:b7:b1:05:3e:d2:56:13:31:b2:60:18:3e:85:1c:
                    74:23:00:0e:a0:b8:3f:1c:2d:ff:8a:97:ea:26:d4:
                    35:45:e3:33:e6:01:49:05:19:c2:8e:f3:21:9a:4d:
                    12:ee:ad:41:dc:0a:00:68:e7:be:0a:66:44:eb:41:
                    51:0a:e3:53:41:0d:71:07:1c:9e:8f:e1:61:f0:27:
                    37:1c:a8:84:88:9a:65:63:d2:34:b6:de:5f:7f:58:
                    ed:4c:fe:1e:dd:9e:74:fc:ef:dc:ca:d0:92:82:af:
                    e9:18:5a:cb:32:52:fa:29:28:1e:5b:9a:8f:ee:97:
                    79:ae:82:d0:23:bd:fc:bc:54:f1:7b:79:e3:ba:58:
                    f2:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:7E:5B:D5:DE:56:6F:2F:62:21:73:68:08:FC:BC:20:5A:80:47:3D
            X509v3 Authority Key Identifier:
                keyid:69:B7:F5:A9:65:8D:E6:45:8B:10:09:66:61:0F:13:A4:21:72:54:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3hKi5Ys82hcybRZNYyZBgfnHhhkU4s9D8JUxjguATLhd/1/69B7F5A9658DE6458B100966610F13A42172540B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69B7F5A9658DE6458B100966610F13A42172540B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3hKi5Ys82hcybRZNYyZBgfnHhhkU4s9D8JUxjguATLhd/1/323830343a336239383a3a2f33322d3332203d3e20323636313539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b98::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:51:af:b2:da:b6:58:72:d0:4b:0f:c0:d4:f0:d9:c5:15:54:
         9b:81:fd:16:1a:44:7c:ad:fa:5c:c8:f1:99:49:0e:6c:1b:e3:
         b6:9c:fb:8c:c3:6d:92:12:62:12:99:7f:2b:ab:95:2f:a1:02:
         3e:13:95:c3:30:c7:a4:b4:94:b5:f9:cd:d8:52:c0:ba:d7:99:
         32:7a:80:c6:55:94:26:28:99:65:b4:4e:69:e5:ce:ff:57:dd:
         c1:3a:4e:94:8c:6b:3b:88:23:2c:20:40:87:a5:4f:86:83:62:
         03:3d:f8:da:d6:ce:93:a4:f9:04:61:7a:d2:ba:19:a2:b8:67:
         5a:59:8c:66:d3:9e:52:08:3c:00:c8:a1:a9:08:5b:63:d3:81:
         c5:71:f7:b7:1f:b6:b5:17:53:e6:d2:47:34:07:15:7a:8d:56:
         d5:7a:a7:3a:b8:c6:08:ee:28:f6:d8:af:a5:da:ea:ef:b7:66:
         14:1e:c7:54:bc:21:b2:25:16:b3:ed:32:77:e9:93:b0:67:8d:
         cf:d8:26:70:03:ca:3b:d8:42:56:30:4f:f3:9f:33:42:a3:dc:
         e6:2c:76:af:c9:05:0f:af:8f:42:07:2f:28:eb:1a:71:ba:50:
         54:09:24:c4:6a:b9:3d:5d:2a:83:c9:28:8b:ce:c5:ba:08:c6:
         6f:96:5a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:35:15 2025 by rpki-client