Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4W6i4jmJdnab1GEgq3MbtiB5RBSNZTQEsVViE94xTJri/0/323830343a376165343a343030303a3a2f33342d3334203d3e20323731333938.roa
File:                     323830343a376165343a343030303a3a2f33342d3334203d3e20323731333938.roa (raw, json)
Hash identifier:          j8evtCL1Oa6CpN7K37pCmVbqInM06cSg1THIWSuYd5c=
Subject key identifier:   83:3F:57:1B:E4:22:88:3A:B2:19:75:C7:42:65:61:D8:D2:A4:AE:2B
Certificate issuer:       /CN=7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA
Certificate serial:       65C347779FFE7DE118601EC7A4262F35C4EAB80A
Authority key identifier: 7E:B6:6D:EF:DD:94:27:39:8C:BE:80:B8:EC:3D:1D:5B:CF:33:21:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4W6i4jmJdnab1GEgq3MbtiB5RBSNZTQEsVViE94xTJri/0/323830343a376165343a343030303a3a2f33342d3334203d3e20323731333938.roa
Signing time:             Tue 18 Feb 2025 18:40:31 +0000
ROA not before:           Tue 18 Feb 2025 18:35:31 +0000
ROA not after:            Tue 17 Feb 2026 18:40:31 +0000
asID:                     271398
IP address blocks:        2804:7ae4:4000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:c3:47:77:9f:fe:7d:e1:18:60:1e:c7:a4:26:2f:35:c4:ea:b8:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA
        Validity
            Not Before: Feb 18 18:35:31 2025 GMT
            Not After : Feb 17 18:40:31 2026 GMT
        Subject: CN=833F571BE422883AB21975C7426561D8D2A4AE2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:55:1b:c6:a5:73:cc:0d:e5:d4:8e:35:ea:d6:
                    4c:aa:18:95:cd:2a:dd:07:94:d1:90:61:d1:b9:55:
                    53:77:e2:38:35:49:24:b3:b0:42:d5:04:0e:8a:d1:
                    57:b0:39:3a:46:76:79:6c:5c:46:12:55:f9:0c:ed:
                    a0:31:1a:b9:28:39:cc:e6:3e:c7:e4:10:c5:27:75:
                    cb:5d:ce:0c:c7:d4:ba:f9:51:51:ee:d7:24:bd:5c:
                    d3:0c:6e:54:9c:0b:c1:8d:00:38:34:e9:fa:b2:f4:
                    01:0b:28:e2:f8:4d:30:18:e3:2e:87:1e:68:c5:7b:
                    52:83:6c:e3:4d:b3:69:84:0a:62:cb:90:0d:f8:36:
                    12:e9:40:dc:5a:d4:e2:a6:0b:63:4d:65:e2:11:6f:
                    ce:c0:22:45:c9:48:e9:b4:08:66:f9:86:2f:35:64:
                    9d:c1:38:30:f6:7d:89:9f:27:e4:36:1f:92:1d:91:
                    e1:d2:4d:2f:86:19:a3:a0:bf:9f:d4:50:7a:e7:47:
                    66:41:48:55:3c:2f:d0:ab:de:ad:fc:6b:db:ac:5a:
                    d3:41:5a:30:67:89:16:eb:c9:16:c2:eb:b1:53:95:
                    e5:f5:64:0a:31:ca:6c:89:7c:a9:5f:ec:20:9b:bb:
                    51:d9:56:76:c5:15:95:38:c4:e2:0c:72:8d:6f:28:
                    45:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:3F:57:1B:E4:22:88:3A:B2:19:75:C7:42:65:61:D8:D2:A4:AE:2B
            X509v3 Authority Key Identifier:
                keyid:7E:B6:6D:EF:DD:94:27:39:8C:BE:80:B8:EC:3D:1D:5B:CF:33:21:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4W6i4jmJdnab1GEgq3MbtiB5RBSNZTQEsVViE94xTJri/0/7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4W6i4jmJdnab1GEgq3MbtiB5RBSNZTQEsVViE94xTJri/0/323830343a376165343a343030303a3a2f33342d3334203d3e20323731333938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7ae4:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         7e:6f:02:80:d6:48:fd:1e:49:70:a5:c5:1e:69:a7:02:70:a4:
         b8:39:da:65:43:de:8b:05:a4:10:ac:ac:ef:13:4b:79:2e:77:
         de:63:54:dd:a7:82:86:2d:ee:04:56:7a:62:91:ce:a0:c9:b8:
         b0:8d:42:bd:84:2e:89:20:f4:12:53:6d:85:b1:01:d6:7c:32:
         e7:29:35:a6:3c:f1:2b:ef:8c:99:e7:05:e7:a1:64:df:61:8c:
         6e:66:6f:54:93:ad:f2:b6:a1:cf:ea:13:fa:b5:a7:d2:5f:82:
         97:a9:cf:c6:9d:17:2a:95:9b:ff:cc:74:de:87:13:69:fc:c5:
         fd:f2:3f:7e:aa:7a:3a:bc:eb:70:50:88:3f:bf:a2:d9:d2:19:
         f3:5d:d0:5b:d8:4d:11:cd:cc:45:03:2f:92:77:91:c9:36:a7:
         89:38:13:06:d4:5d:7a:07:d2:4a:f3:67:45:de:7b:7d:5e:1f:
         d1:fc:ca:90:15:65:65:8f:cf:e0:b5:65:c4:76:0c:94:61:09:
         60:c6:d8:ad:94:a6:b4:9b:9f:57:86:e3:0a:77:19:f8:71:30:
         ca:58:bc:b3:64:8c:92:11:4a:c2:87:c6:20:96:62:7c:ec:86:
         fa:b7:ee:4d:88:f9:c8:46:d8:4e:8b:b7:26:c4:7a:b9:79:ee:
         a6:16:92:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:25:13 2025 by rpki-client