Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4QCg5qy6i1Y9Ka3f4FQQkxAVgdis94wRsWHjwmE3StjB/1/323830343a353436383a3a2f33322d3335203d3e20323638363438.roa
File:                     323830343a353436383a3a2f33322d3335203d3e20323638363438.roa (raw, json)
Hash identifier:          /GemfBvArZtukG4Y6RFLcXF3f1tLbIJXVDgtbWncR/o=
Subject key identifier:   3D:B2:E1:94:E6:B9:E3:F0:C3:5A:49:23:56:20:67:2F:39:07:D1:0E
Certificate issuer:       /CN=DCE24D4E9D4DE179A93239E5972A0A48CBE24117
Certificate serial:       0BEC7A9B061498727306F195DCE0530B0F3EA7DE
Authority key identifier: DC:E2:4D:4E:9D:4D:E1:79:A9:32:39:E5:97:2A:0A:48:CB:E2:41:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE24D4E9D4DE179A93239E5972A0A48CBE24117.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4QCg5qy6i1Y9Ka3f4FQQkxAVgdis94wRsWHjwmE3StjB/1/323830343a353436383a3a2f33322d3335203d3e20323638363438.roa
Signing time:             Thu 06 Mar 2025 08:07:39 +0000
ROA not before:           Thu 06 Mar 2025 08:02:39 +0000
ROA not after:            Thu 05 Mar 2026 08:07:39 +0000
asID:                     268648
IP address blocks:        2804:5468::/32 maxlen: 35
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:ec:7a:9b:06:14:98:72:73:06:f1:95:dc:e0:53:0b:0f:3e:a7:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCE24D4E9D4DE179A93239E5972A0A48CBE24117
        Validity
            Not Before: Mar  6 08:02:39 2025 GMT
            Not After : Mar  5 08:07:39 2026 GMT
        Subject: CN=3DB2E194E6B9E3F0C35A49235620672F3907D10E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a1:a5:b2:1e:6d:b7:2b:f1:17:53:47:60:a7:
                    0b:ce:97:0e:14:0e:6c:68:16:b1:fc:34:0a:7f:e6:
                    fa:00:75:69:c0:1a:c8:29:a3:4c:dc:d4:72:a5:8a:
                    80:7c:1a:28:44:88:e1:17:8a:24:ad:fb:13:cb:8e:
                    51:4d:5a:15:d5:1d:ae:3b:31:12:e4:22:49:2b:fb:
                    3e:b9:f6:c6:72:cb:5d:17:7d:e4:c1:0c:4f:e8:2c:
                    b0:cd:0b:07:36:2c:4f:50:fd:28:eb:5c:47:12:06:
                    01:4a:94:ae:3d:b9:3d:46:b7:c3:e5:fa:e2:73:fe:
                    39:37:60:43:0e:e9:1f:47:a3:d8:20:c0:4c:8d:fb:
                    e6:51:07:30:d6:98:6d:f3:cf:cd:35:66:18:5f:dc:
                    8b:cb:69:d2:9d:7e:d3:a0:cf:b0:e4:7f:ba:11:e1:
                    e3:9b:5e:1e:59:21:d6:15:66:2b:2d:eb:3c:5e:55:
                    e9:2b:a8:f4:de:83:ac:7d:61:ab:bd:18:86:ed:f5:
                    aa:da:09:02:83:e6:53:69:f7:a1:90:1d:ad:14:e2:
                    15:d1:5b:68:5c:f4:d6:9f:e3:d0:5a:63:a0:a2:55:
                    cd:19:d5:b9:7f:c5:69:a6:c9:de:7f:83:23:3f:1d:
                    bd:85:00:d9:dc:55:cc:9f:e8:8b:51:3e:40:19:4c:
                    3b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:B2:E1:94:E6:B9:E3:F0:C3:5A:49:23:56:20:67:2F:39:07:D1:0E
            X509v3 Authority Key Identifier:
                keyid:DC:E2:4D:4E:9D:4D:E1:79:A9:32:39:E5:97:2A:0A:48:CB:E2:41:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4QCg5qy6i1Y9Ka3f4FQQkxAVgdis94wRsWHjwmE3StjB/1/DCE24D4E9D4DE179A93239E5972A0A48CBE24117.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE24D4E9D4DE179A93239E5972A0A48CBE24117.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4QCg5qy6i1Y9Ka3f4FQQkxAVgdis94wRsWHjwmE3StjB/1/323830343a353436383a3a2f33322d3335203d3e20323638363438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5468::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:dc:b4:98:b6:31:9f:9b:44:97:95:0a:b6:de:1b:e8:2e:c8:
         a3:65:91:01:50:ab:b3:2e:f6:86:0c:70:0c:10:ec:80:97:a2:
         3f:cb:4f:d8:c2:42:0c:2e:8c:3e:94:1f:e0:2d:43:6d:80:48:
         7e:e8:b5:c7:0a:49:6d:eb:6e:0d:8c:2d:95:ea:d2:c8:b5:3e:
         99:4f:92:d2:de:df:f6:06:1d:1d:48:ff:8e:34:a5:a0:73:de:
         a7:a0:8a:d5:0f:c0:97:02:d6:7b:67:b1:16:cb:ed:8e:90:75:
         5d:68:cf:47:1d:60:d7:dd:e7:18:d1:d7:9a:c6:dd:ee:5a:62:
         84:ed:67:c2:49:23:6f:a5:32:ae:ad:c8:ba:97:99:8f:7c:5f:
         4e:50:6a:f7:d0:62:58:51:0a:51:aa:f6:29:d5:b1:fe:2b:39:
         3f:3f:26:c9:3a:16:b2:af:32:a0:c3:54:da:03:c5:ea:4e:3d:
         0a:72:69:be:46:59:46:0a:b0:a9:d8:d0:83:ba:58:08:45:ef:
         17:82:d7:7e:c4:30:1f:f8:b2:89:ae:0c:84:20:32:60:80:73:
         8e:64:f4:c6:58:fb:1f:65:69:75:35:5b:69:4c:76:29:83:35:
         f5:3b:46:5d:ea:24:4c:dc:24:34:11:ad:a3:3a:8b:9e:d8:58:
         ca:ba:53:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:42:36 2025 by rpki-client