Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4oN3DxPQZdfEvjriwXrJFiuYHQnmdf3mqqkRRfNnUJMa/0/323830343a316331343a3a2f33322d313238203d3e203631363336.roa
File:                     323830343a316331343a3a2f33322d313238203d3e203631363336.roa (raw, json)
Hash identifier:          xVmmIxsD1bqopMW4NYvCaOXrizXta4N5npLywza28TE=
Subject key identifier:   63:30:18:3A:02:20:4D:0C:1D:85:14:0A:81:C6:89:B1:29:6D:FC:14
Certificate issuer:       /CN=D725162E18A463E8576032287F7EEDA7CF72075D
Certificate serial:       6EC5A0CEAC33035A1F3D52EBCAB599CD46B10DAB
Authority key identifier: D7:25:16:2E:18:A4:63:E8:57:60:32:28:7F:7E:ED:A7:CF:72:07:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D725162E18A463E8576032287F7EEDA7CF72075D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4oN3DxPQZdfEvjriwXrJFiuYHQnmdf3mqqkRRfNnUJMa/0/323830343a316331343a3a2f33322d313238203d3e203631363336.roa
Signing time:             Fri 14 Feb 2025 14:51:13 +0000
ROA not before:           Fri 14 Feb 2025 14:46:13 +0000
ROA not after:            Fri 13 Feb 2026 14:51:13 +0000
asID:                     61636
IP address blocks:        2804:1c14::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:c5:a0:ce:ac:33:03:5a:1f:3d:52:eb:ca:b5:99:cd:46:b1:0d:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D725162E18A463E8576032287F7EEDA7CF72075D
        Validity
            Not Before: Feb 14 14:46:13 2025 GMT
            Not After : Feb 13 14:51:13 2026 GMT
        Subject: CN=6330183A02204D0C1D85140A81C689B1296DFC14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:65:48:1a:1f:3a:f0:24:65:ff:f4:76:97:21:
                    08:04:0a:12:15:6d:11:0a:78:52:be:c3:ec:f3:e8:
                    08:a3:b6:c7:2e:e5:54:cb:69:17:98:c0:61:16:af:
                    42:ff:e6:6f:05:50:8b:75:76:79:15:6e:51:fb:b1:
                    60:28:7f:96:f1:b7:90:ae:fd:14:e2:d4:7e:b0:1c:
                    a4:0f:18:d3:17:a4:6f:4c:bb:18:74:33:e7:a4:28:
                    4a:39:32:c8:30:f7:69:93:a8:10:56:1e:2d:3e:1c:
                    cc:c1:85:4f:b6:55:45:98:2b:17:d4:c9:31:c4:b8:
                    43:ba:e6:f6:0e:80:ab:70:ec:bc:fc:45:9e:14:61:
                    65:29:9d:61:5e:35:25:a7:53:38:e7:52:5e:7d:e1:
                    0e:81:d9:be:1f:bd:f6:7b:7f:43:17:96:cf:ab:a9:
                    ac:a2:0f:2e:e6:59:cf:b7:71:c4:4c:eb:3e:52:4b:
                    ed:65:de:d1:de:94:fb:9f:e6:7d:99:fe:59:58:af:
                    dd:5f:be:e0:ea:01:79:ae:19:b3:81:87:8b:0f:7f:
                    aa:fd:da:39:2f:b3:f0:a5:64:c3:df:86:a6:a9:23:
                    4d:77:c1:e8:b5:c2:ff:1f:9b:25:98:d4:b3:35:bc:
                    de:c2:eb:5e:2d:c7:db:be:9d:e0:ab:4a:ec:bd:4c:
                    2f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:30:18:3A:02:20:4D:0C:1D:85:14:0A:81:C6:89:B1:29:6D:FC:14
            X509v3 Authority Key Identifier:
                keyid:D7:25:16:2E:18:A4:63:E8:57:60:32:28:7F:7E:ED:A7:CF:72:07:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4oN3DxPQZdfEvjriwXrJFiuYHQnmdf3mqqkRRfNnUJMa/0/D725162E18A463E8576032287F7EEDA7CF72075D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D725162E18A463E8576032287F7EEDA7CF72075D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4oN3DxPQZdfEvjriwXrJFiuYHQnmdf3mqqkRRfNnUJMa/0/323830343a316331343a3a2f33322d313238203d3e203631363336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c14::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:f7:86:78:df:87:c4:bc:b4:a5:d6:3f:63:a7:a3:84:47:28:
         b7:cf:34:d3:8b:8b:45:cc:7f:18:de:48:b4:20:7e:66:59:7e:
         f5:e0:30:3a:6f:02:17:4a:1f:29:90:66:25:71:ab:a6:68:76:
         55:11:ae:0b:90:dd:1b:d0:01:1f:4a:fd:64:90:79:e8:14:22:
         4c:7d:a8:5e:12:62:31:f8:98:51:a0:50:61:21:7b:01:16:ff:
         b8:30:5a:17:c4:f9:7e:b8:da:33:43:fd:3f:36:30:67:29:34:
         c3:c1:f4:ee:b5:bf:10:0e:d5:21:36:ee:63:be:11:94:c2:59:
         db:73:63:95:a5:8b:6c:ff:9b:9d:41:10:e7:a0:39:c4:79:21:
         14:fa:05:eb:b6:0c:2f:e1:f5:52:b1:90:33:98:c5:2d:13:dd:
         fc:61:0a:e6:ab:49:a1:e9:ca:53:d5:b0:76:f6:2d:55:3b:12:
         3a:d5:9c:58:b9:5f:26:ff:35:7d:35:3e:a6:96:ed:bc:f2:06:
         1a:b9:36:1a:34:21:b9:b3:db:52:c2:28:bf:bd:26:57:4b:b7:
         6c:01:bb:82:43:e8:31:11:f1:06:40:59:7c:cf:96:1f:c5:05:
         55:62:47:73:84:e5:b2:59:b4:b3:7e:dc:dc:17:9d:32:70:70:
         43:a7:ae:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 20:50:37 2025 by rpki-client