Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Gnt2oBFw1nkj6p3pEKWKzFXJ8XnpThdftjJaKn9PUVd/0/323830343a323931383a3a2f33322d3438203d3e20323633393937.roa
File:                     323830343a323931383a3a2f33322d3438203d3e20323633393937.roa (raw, json)
Hash identifier:          pfHeWAX3UI+O6utgK+vodlCZ6fEY3vpwtwWVFCKtUt0=
Subject key identifier:   3F:2C:37:4B:60:4D:84:A9:CF:6A:58:59:C4:9A:46:AF:D2:3E:97:E2
Certificate issuer:       /CN=00C65B86D207F9E0E311ECD95BDEFF56752084D1
Certificate serial:       399493897BDC7BB241C5053FA5516AC8F888074E
Authority key identifier: 00:C6:5B:86:D2:07:F9:E0:E3:11:EC:D9:5B:DE:FF:56:75:20:84:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00C65B86D207F9E0E311ECD95BDEFF56752084D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Gnt2oBFw1nkj6p3pEKWKzFXJ8XnpThdftjJaKn9PUVd/0/323830343a323931383a3a2f33322d3438203d3e20323633393937.roa
Signing time:             Tue 17 Dec 2024 20:23:26 +0000
ROA not before:           Tue 17 Dec 2024 20:18:26 +0000
ROA not after:            Tue 16 Dec 2025 20:23:26 +0000
asID:                     263997
IP address blocks:        2804:2918::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:94:93:89:7b:dc:7b:b2:41:c5:05:3f:a5:51:6a:c8:f8:88:07:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00C65B86D207F9E0E311ECD95BDEFF56752084D1
        Validity
            Not Before: Dec 17 20:18:26 2024 GMT
            Not After : Dec 16 20:23:26 2025 GMT
        Subject: CN=3F2C374B604D84A9CF6A5859C49A46AFD23E97E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ca:ff:9f:95:88:6c:1b:9e:1e:76:63:73:42:
                    df:93:a9:13:fd:b2:c6:74:4b:d3:2d:bb:8f:dc:92:
                    c4:f8:69:dd:90:b6:68:0a:f1:5d:2e:b4:74:d1:c3:
                    e5:66:14:01:d4:1a:24:6d:ca:23:88:aa:e5:46:23:
                    64:33:b5:9c:d9:71:22:76:cb:88:ab:10:cf:5e:a2:
                    66:66:17:e4:88:92:c6:34:6d:89:0e:7a:1a:73:2b:
                    0a:27:4f:9d:e0:45:07:32:3e:1b:b2:58:5c:1f:d5:
                    55:48:c4:54:1a:e3:3a:48:f6:86:4d:2c:2c:e5:76:
                    33:13:30:6f:4c:66:c2:8b:f0:79:9a:b7:1c:c1:5b:
                    79:34:03:4f:32:5b:05:e5:0a:f7:6b:e2:4d:ee:b4:
                    1d:14:5f:f8:50:65:bd:65:4a:7e:53:c0:fd:e4:ff:
                    62:92:48:49:43:cf:1c:87:54:60:21:a1:01:af:b4:
                    17:41:07:41:f7:56:76:7d:94:24:15:5b:f9:53:06:
                    7c:af:c8:df:81:3b:23:b2:63:f2:55:e4:ba:b3:77:
                    d0:37:5d:a6:0f:5f:f7:18:bc:24:d7:fa:3a:d7:00:
                    3d:fd:8c:ab:f5:42:64:a2:c6:6a:a0:51:50:1a:a5:
                    5b:f8:73:23:cf:e8:a7:d7:a6:ed:37:3c:36:e8:88:
                    23:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:2C:37:4B:60:4D:84:A9:CF:6A:58:59:C4:9A:46:AF:D2:3E:97:E2
            X509v3 Authority Key Identifier:
                keyid:00:C6:5B:86:D2:07:F9:E0:E3:11:EC:D9:5B:DE:FF:56:75:20:84:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Gnt2oBFw1nkj6p3pEKWKzFXJ8XnpThdftjJaKn9PUVd/0/00C65B86D207F9E0E311ECD95BDEFF56752084D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00C65B86D207F9E0E311ECD95BDEFF56752084D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Gnt2oBFw1nkj6p3pEKWKzFXJ8XnpThdftjJaKn9PUVd/0/323830343a323931383a3a2f33322d3438203d3e20323633393937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2918::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:ed:d1:bb:ae:ed:93:ed:0c:ef:6e:2a:fe:bc:c0:ae:33:5e:
         42:e8:81:6b:18:56:b3:fa:3e:42:68:f7:cf:2f:d1:12:44:4c:
         5c:19:e7:f1:4c:7f:29:61:37:dc:4a:bf:df:b1:da:5c:45:ac:
         1d:7e:c8:12:8c:b0:0b:86:5a:58:8e:27:78:e7:bd:5d:a8:d8:
         18:91:70:e4:a0:bc:43:76:95:e3:d9:72:2d:fb:aa:35:a4:c1:
         72:76:04:37:a7:c1:59:59:69:5e:f4:34:39:f1:26:fb:58:a7:
         cf:05:cf:f1:e0:4c:e8:ae:b7:fe:a9:ad:1c:07:86:20:3f:07:
         df:36:37:d4:fb:fc:5c:ee:bb:28:ff:d8:53:e2:f8:05:ac:64:
         40:54:d0:c6:9a:82:ee:02:1b:01:87:48:ab:8c:c9:39:18:7a:
         8c:e7:6b:78:b9:ae:56:62:2a:89:05:86:09:69:b7:e1:f3:d1:
         aa:ca:8c:82:c0:fe:62:05:46:27:a2:cf:5d:26:ea:a2:7a:e6:
         eb:03:29:71:1e:09:14:7f:dc:5b:d7:49:f8:81:84:d6:f0:b1:
         a0:cf:02:2d:46:b4:a6:90:99:60:8a:6a:03:fa:4d:c8:47:8a:
         e8:4d:0d:0e:55:53:5d:8b:66:20:b5:c3:bb:9c:f8:a5:15:20:
         55:18:77:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:17:00 2025 by rpki-client