Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3hd8MdRyLpipRHkEDDdtUYSFC33XTyt4sApAfV5tg3KL/1/323830343a333538633a3a2f33322d3332203d3e20323636323933.roa
File:                     323830343a333538633a3a2f33322d3332203d3e20323636323933.roa (raw, json)
Hash identifier:          +hiw59pH94BfFjrIgeIlU9duRFFwVinG2EUE5jcvVMU=
Subject key identifier:   37:C2:BA:97:B1:4E:65:C3:A5:85:95:79:5A:B8:27:58:A4:88:1B:41
Certificate issuer:       /CN=7ED94AD8B4C548F921063196C3F8F89B0E259837
Certificate serial:       1404CBC6E5D47C2F6134A270816D4610E3C2CC89
Authority key identifier: 7E:D9:4A:D8:B4:C5:48:F9:21:06:31:96:C3:F8:F8:9B:0E:25:98:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ED94AD8B4C548F921063196C3F8F89B0E259837.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3hd8MdRyLpipRHkEDDdtUYSFC33XTyt4sApAfV5tg3KL/1/323830343a333538633a3a2f33322d3332203d3e20323636323933.roa
Signing time:             Thu 06 Mar 2025 18:33:28 +0000
ROA not before:           Thu 06 Mar 2025 18:28:28 +0000
ROA not after:            Thu 05 Mar 2026 18:33:28 +0000
asID:                     266293
IP address blocks:        2804:358c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:04:cb:c6:e5:d4:7c:2f:61:34:a2:70:81:6d:46:10:e3:c2:cc:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ED94AD8B4C548F921063196C3F8F89B0E259837
        Validity
            Not Before: Mar  6 18:28:28 2025 GMT
            Not After : Mar  5 18:33:28 2026 GMT
        Subject: CN=37C2BA97B14E65C3A58595795AB82758A4881B41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e0:b4:02:9d:62:84:b0:5e:77:77:ba:b1:6e:
                    9a:fc:25:aa:d3:14:d6:ac:88:79:65:3e:ab:d2:3b:
                    dd:3b:e2:27:bd:6f:c5:3c:ab:03:de:2d:24:ec:4e:
                    21:37:4d:2f:90:50:e7:72:18:22:3f:08:79:f8:02:
                    7d:3e:e8:40:59:5e:2b:c6:e7:04:ed:cd:dc:29:be:
                    76:d4:aa:cb:b7:a3:ff:ea:c5:a4:e4:d8:fd:19:06:
                    86:58:b4:22:aa:63:0c:e6:2b:17:f8:3c:0d:ce:5e:
                    6e:f7:bd:d7:d1:f7:17:d6:75:e2:2a:b7:95:8b:50:
                    1a:3a:f7:48:ab:58:d0:6e:18:50:be:3f:ca:1c:d6:
                    a6:2b:80:8f:45:ce:ca:89:27:94:75:f1:cf:03:c9:
                    0c:ba:d8:68:85:91:b0:08:6f:34:75:8b:15:de:e8:
                    4b:0f:4b:a4:ff:cc:b4:32:af:8e:23:db:ef:a3:10:
                    2f:56:8e:04:df:95:49:43:18:c3:48:ed:15:74:64:
                    5a:83:b1:53:97:51:0b:44:c4:53:4b:01:49:21:60:
                    9d:4a:87:5a:e3:05:77:0d:47:b0:0f:8b:6b:ac:d4:
                    ed:d7:58:a8:2a:c6:d4:21:5a:63:7b:4b:1d:5b:b1:
                    c2:08:3c:ce:2c:c4:f1:b1:ef:35:9c:c2:e6:fa:fe:
                    a2:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:C2:BA:97:B1:4E:65:C3:A5:85:95:79:5A:B8:27:58:A4:88:1B:41
            X509v3 Authority Key Identifier:
                keyid:7E:D9:4A:D8:B4:C5:48:F9:21:06:31:96:C3:F8:F8:9B:0E:25:98:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3hd8MdRyLpipRHkEDDdtUYSFC33XTyt4sApAfV5tg3KL/1/7ED94AD8B4C548F921063196C3F8F89B0E259837.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ED94AD8B4C548F921063196C3F8F89B0E259837.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3hd8MdRyLpipRHkEDDdtUYSFC33XTyt4sApAfV5tg3KL/1/323830343a333538633a3a2f33322d3332203d3e20323636323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:358c::/32

    Signature Algorithm: sha256WithRSAEncryption
         a9:b0:9f:02:a2:38:39:d0:fe:3d:af:ac:5c:26:53:dd:ef:96:
         06:d8:c9:ca:bf:b1:db:2d:09:bc:4a:ac:1b:27:3a:71:3a:e4:
         08:9e:7e:b5:97:1c:e8:6a:cf:a6:71:a8:c1:0f:64:90:9b:17:
         ce:8c:c0:27:7f:0f:13:65:b2:ec:4b:ee:db:17:8c:c7:0e:4e:
         35:35:9e:7b:5a:8a:ee:58:4f:97:79:ed:85:01:2b:4c:03:02:
         12:cb:bc:21:fc:b9:31:6f:d1:6e:69:f8:8d:65:f0:96:99:bc:
         cd:b3:c7:ad:87:d7:14:47:63:e6:2b:c3:f7:39:4b:8d:9a:05:
         3a:16:b3:34:07:cb:27:7c:51:77:c6:48:ed:71:b3:77:be:3c:
         ba:89:86:73:54:1d:30:15:44:ac:ad:6f:b9:f1:54:03:df:4f:
         72:38:6c:c4:6d:eb:37:1a:38:21:d1:51:ab:8c:01:e4:52:1a:
         91:28:6f:59:a6:14:87:e9:ef:f2:62:6d:d4:66:d4:7b:2d:f8:
         ed:ab:7c:36:de:d7:86:e8:14:8c:8c:5f:ca:d9:48:40:26:f0:
         5f:2c:07:a9:e6:0b:72:1a:fc:8b:bf:af:ab:6f:5e:d2:e6:d7:
         d6:53:77:49:3a:ec:0b:f9:60:a0:fd:9a:a3:d3:3e:37:d9:f4:
         fa:c8:d4:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:02:46 2025 by rpki-client