Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/323830343a313261303a3331303a3a2f34382d3438203d3e203631393030.roa
File:                     323830343a313261303a3331303a3a2f34382d3438203d3e203631393030.roa (raw, json)
Hash identifier:          JRHre1TKnbgICZYMVqJfo1klBV62GqcYsfWkSpUj5vk=
Subject key identifier:   A7:C9:2F:B6:F0:DD:86:35:48:93:E5:17:79:19:41:4B:32:BF:21:CF
Certificate issuer:       /CN=7032365C782465DB62283945DC9E72F6BAA6BF0A
Certificate serial:       2A81E6092317BD8AA46066DB613EB4B9E8B38E1E
Authority key identifier: 70:32:36:5C:78:24:65:DB:62:28:39:45:DC:9E:72:F6:BA:A6:BF:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7032365C782465DB62283945DC9E72F6BAA6BF0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/323830343a313261303a3331303a3a2f34382d3438203d3e203631393030.roa
Signing time:             Tue 17 Dec 2024 17:07:47 +0000
ROA not before:           Tue 17 Dec 2024 17:02:47 +0000
ROA not after:            Tue 16 Dec 2025 17:07:47 +0000
asID:                     61900
IP address blocks:        2804:12a0:310::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:81:e6:09:23:17:bd:8a:a4:60:66:db:61:3e:b4:b9:e8:b3:8e:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7032365C782465DB62283945DC9E72F6BAA6BF0A
        Validity
            Not Before: Dec 17 17:02:47 2024 GMT
            Not After : Dec 16 17:07:47 2025 GMT
        Subject: CN=A7C92FB6F0DD86354893E5177919414B32BF21CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1c:8f:cd:07:96:29:9b:a3:f7:a0:e9:7a:a0:
                    c1:34:4e:a6:1f:14:55:89:fc:90:cd:da:5f:f7:84:
                    8d:97:79:0c:27:c8:17:39:4e:01:a8:e9:3c:13:9a:
                    67:e4:37:4e:0d:d0:45:0b:7c:fe:c4:7f:a8:65:72:
                    e9:a9:84:47:bc:48:5c:ef:97:64:8d:1e:4c:e0:e3:
                    14:1f:24:48:e8:00:96:39:1b:73:60:58:2f:21:39:
                    ce:6d:46:c3:9b:e7:80:2c:3f:41:8d:23:45:c6:19:
                    a3:54:01:91:db:59:61:96:fd:a0:78:3e:5a:32:e0:
                    11:56:46:70:77:0f:ba:0f:01:92:0a:c4:ab:b3:a5:
                    81:86:05:fa:d9:be:4e:a7:ef:40:9f:b6:ba:14:b2:
                    b5:b8:3f:8f:1a:c0:e5:ce:43:1f:3d:b4:59:a0:50:
                    be:ab:ac:58:f7:b1:20:69:ad:0a:bb:7d:09:47:2b:
                    b2:7a:b9:1e:b6:30:4b:cd:d8:dd:6d:98:07:bf:2e:
                    99:fd:9e:7d:ca:4b:52:9d:b6:da:e4:de:fa:a3:c1:
                    65:62:52:4f:ea:bb:b4:19:c0:79:c5:fe:83:4b:fa:
                    4a:eb:15:bf:c7:49:30:90:b3:56:83:e5:0a:27:8d:
                    61:35:04:5b:2d:08:8c:8f:22:18:98:da:c3:7e:14:
                    5b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:C9:2F:B6:F0:DD:86:35:48:93:E5:17:79:19:41:4B:32:BF:21:CF
            X509v3 Authority Key Identifier:
                keyid:70:32:36:5C:78:24:65:DB:62:28:39:45:DC:9E:72:F6:BA:A6:BF:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/7032365C782465DB62283945DC9E72F6BAA6BF0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7032365C782465DB62283945DC9E72F6BAA6BF0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/323830343a313261303a3331303a3a2f34382d3438203d3e203631393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:12a0:310::/48

    Signature Algorithm: sha256WithRSAEncryption
         11:e2:1b:22:7e:25:77:4f:f9:bb:fb:34:dd:69:92:7c:82:d4:
         77:6c:fc:9b:f8:16:59:4b:8f:1f:68:8e:32:f8:f5:2e:cf:0d:
         d5:7f:3f:32:8f:ea:38:8b:28:d1:42:10:d2:27:87:e8:48:7e:
         dc:4f:2d:ab:8b:8b:b8:1c:07:14:24:ab:22:27:63:c1:8c:09:
         12:ff:c6:22:e6:9c:7f:b3:6c:95:76:ed:e5:08:c7:c2:d9:58:
         0e:5f:56:80:70:1e:6f:52:03:ca:87:4a:b4:21:21:9e:3c:ea:
         e6:ce:e5:5c:dd:0b:d7:14:f4:d9:38:52:d6:52:f8:7a:35:f2:
         42:d5:3b:07:a7:fb:fa:48:cf:f7:8a:e6:dc:bc:9c:46:27:9b:
         fc:22:57:62:bd:bc:48:f4:cc:6f:83:ec:e5:4e:6a:22:e8:06:
         06:c7:67:f4:3d:d9:a3:cc:fa:61:b4:e5:38:8e:02:fb:9e:fc:
         34:27:28:68:43:c2:d8:3b:2b:67:6f:52:47:d3:50:76:b8:c8:
         e2:e5:03:46:48:32:c8:a7:54:da:13:b0:fd:03:40:4b:dd:d7:
         0c:77:6d:7b:66:51:cd:6e:c8:80:d3:64:95:b5:60:20:c5:53:
         16:78:9c:5b:90:ba:72:d5:2c:f0:21:4e:10:58:25:4c:7d:46:
         6f:ed:fd:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 19:13:15 2025 by rpki-client