Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/323830343a6266383a383030303a3a2f33342d3334203d3e203532363533.roa
File:                     323830343a6266383a383030303a3a2f33342d3334203d3e203532363533.roa (raw, json)
Hash identifier:          n3fiUwIT90l76GjqwwmcdldeeNppjiUa8osJIIyuAlA=
Subject key identifier:   39:86:33:77:79:50:BC:45:E0:E0:07:BE:B7:C0:1E:57:38:78:EE:41
Certificate issuer:       /CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
Certificate serial:       08F8B616FD23082241A49C9B08696A86A45E238B
Authority key identifier: 03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/323830343a6266383a383030303a3a2f33342d3334203d3e203532363533.roa
Signing time:             Thu 06 Mar 2025 00:00:02 +0000
ROA not before:           Wed 05 Mar 2025 23:55:02 +0000
ROA not after:            Thu 05 Mar 2026 00:00:02 +0000
asID:                     52653
IP address blocks:        2804:bf8:8000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:f8:b6:16:fd:23:08:22:41:a4:9c:9b:08:69:6a:86:a4:5e:23:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
        Validity
            Not Before: Mar  5 23:55:02 2025 GMT
            Not After : Mar  5 00:00:02 2026 GMT
        Subject: CN=398633777950BC45E0E007BEB7C01E573878EE41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0e:fb:77:6c:08:42:99:2f:6d:86:26:4b:f6:
                    95:7d:77:1d:2c:fd:48:ad:56:b6:22:a4:10:a2:7b:
                    bc:1b:23:d4:10:f9:9f:d3:51:f7:ee:a8:96:4b:2b:
                    bb:55:f8:4a:fe:fe:1d:1f:4b:9e:cc:f0:d3:4b:a1:
                    08:7a:a1:c9:eb:cf:58:61:ff:0d:02:c9:42:fe:32:
                    0d:68:60:75:db:75:6d:d6:66:04:1f:0f:d1:db:21:
                    94:01:1a:e7:0c:04:a4:ef:a8:55:3d:98:0e:b9:12:
                    fc:a5:67:bd:28:67:21:4f:74:92:b8:13:77:a0:22:
                    5e:74:b5:d2:dc:33:b3:e4:27:b4:dc:bc:2c:60:b3:
                    81:ab:de:75:9f:bb:1c:49:7b:c1:77:a4:2a:00:22:
                    54:09:c7:02:81:9d:fb:6b:f4:6d:06:2b:a9:31:63:
                    3c:3c:c8:a3:16:16:f2:db:be:60:51:ce:ed:8e:76:
                    c9:38:8a:1d:31:20:76:03:50:c1:14:5e:11:d1:70:
                    98:ec:8d:ac:d3:bd:a4:89:c6:d8:11:a8:45:20:0a:
                    c6:8a:b0:d7:5c:7e:dd:c0:a6:72:5c:0a:64:6b:c7:
                    4d:2e:af:4e:a4:d4:9f:f5:a4:3d:35:5c:1f:8e:db:
                    96:4c:9a:e7:e6:5a:3b:66:83:cf:9e:fb:94:f8:62:
                    f9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:86:33:77:79:50:BC:45:E0:E0:07:BE:B7:C0:1E:57:38:78:EE:41
            X509v3 Authority Key Identifier:
                keyid:03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/323830343a6266383a383030303a3a2f33342d3334203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:bf8:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         7b:98:d1:5f:2a:48:2e:40:cb:2d:fe:d8:ac:65:c6:19:8d:7b:
         f9:f7:34:b3:1d:bd:f3:88:28:07:8a:69:56:c3:c9:62:1a:02:
         a6:2d:87:2a:c8:79:68:7e:cd:a5:b3:60:14:0e:73:e8:5d:e4:
         e0:23:09:37:56:88:15:3d:8b:8d:5d:06:1b:4c:32:76:7d:34:
         1c:25:f1:04:a3:89:f6:6a:76:53:91:46:9d:18:5d:b5:88:c9:
         a0:b9:4c:a7:f0:b2:76:53:19:5a:b2:2f:7f:8e:16:28:5d:ba:
         e7:f6:c7:d8:e4:60:dc:18:ec:bb:fc:e1:c0:27:11:d4:fe:74:
         ba:4d:b0:7e:d1:a9:dd:ee:49:af:a4:83:bc:6c:3a:85:cb:ec:
         c9:9d:f4:78:9f:5a:3d:0c:79:99:73:4d:73:32:8d:34:cc:47:
         c4:10:68:b3:98:02:35:ba:bd:d7:41:42:0f:0f:75:b1:68:36:
         fe:4f:cc:d4:00:22:f8:e8:51:de:22:31:c2:0c:5f:6a:7a:55:
         e1:3a:0f:4e:60:11:85:8c:ff:b6:7b:8b:ec:c5:91:10:77:c0:
         18:28:89:19:7a:3d:22:f5:61:58:86:09:e9:3b:62:08:11:b9:
         73:05:79:5e:66:76:97:23:a0:db:32:03:7f:6e:f3:68:f8:15:
         89:fd:4b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:05:20 2025 by rpki-client