Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/323830343a356562383a383030303a3a2f33332d3333203d3e20323632383636.roa
File:                     323830343a356562383a383030303a3a2f33332d3333203d3e20323632383636.roa (raw, json)
Hash identifier:          AYCD2qcEF8XDNUOzKwf100QBpjehfvXg/i3fvLk9O4o=
Subject key identifier:   D7:A8:D3:C8:F7:F0:8D:25:A9:BD:F5:E6:FE:CA:35:90:59:63:18:DE
Certificate issuer:       /CN=732B1140085142A7D7474788EEF465DEABBE5080
Certificate serial:       3FA20A7B8E25D321B5001B8FF2318133A28074FC
Authority key identifier: 73:2B:11:40:08:51:42:A7:D7:47:47:88:EE:F4:65:DE:AB:BE:50:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732B1140085142A7D7474788EEF465DEABBE5080.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/323830343a356562383a383030303a3a2f33332d3333203d3e20323632383636.roa
Signing time:             Thu 06 Mar 2025 01:21:40 +0000
ROA not before:           Thu 06 Mar 2025 01:16:40 +0000
ROA not after:            Thu 05 Mar 2026 01:21:40 +0000
asID:                     262866
IP address blocks:        2804:5eb8:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:a2:0a:7b:8e:25:d3:21:b5:00:1b:8f:f2:31:81:33:a2:80:74:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=732B1140085142A7D7474788EEF465DEABBE5080
        Validity
            Not Before: Mar  6 01:16:40 2025 GMT
            Not After : Mar  5 01:21:40 2026 GMT
        Subject: CN=D7A8D3C8F7F08D25A9BDF5E6FECA3590596318DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:63:fe:9e:4f:98:4e:12:25:f2:e7:95:f1:c8:
                    03:e8:55:0a:93:0a:9e:a3:0f:dd:60:34:3d:92:28:
                    36:3e:dc:0a:87:49:f3:c7:72:60:3b:73:a1:d0:d8:
                    3a:c7:23:11:08:86:d3:d5:0e:ce:d5:8f:c7:b0:e5:
                    63:0d:41:88:e9:33:3c:44:19:29:dd:34:fa:fb:db:
                    97:04:66:d7:54:a8:6c:69:ff:e9:df:0c:0e:a0:2b:
                    c9:10:52:9f:f8:fb:92:d1:7e:db:ef:50:a6:7d:f2:
                    58:f8:d5:5f:9c:41:7b:65:cb:6a:77:d5:db:82:43:
                    25:65:25:71:42:d3:b4:1c:05:06:13:ee:1c:a3:7d:
                    e5:48:2a:9c:80:a8:ea:29:d7:9e:dc:63:70:80:ce:
                    4c:66:04:67:c0:0d:ff:2f:09:fc:e0:4b:dd:62:96:
                    56:06:6c:f0:34:b2:4a:00:76:42:ff:ad:de:20:7e:
                    eb:94:b9:14:c7:32:e6:fe:a8:d4:67:b8:d9:f3:f9:
                    2c:03:c2:da:87:61:a6:bd:80:bf:70:b7:4c:63:45:
                    a6:43:b7:f3:73:05:1d:f4:79:b4:2b:fe:72:26:99:
                    8e:e9:5a:e1:5d:2d:db:41:e2:47:ae:55:19:59:c5:
                    e2:29:a3:84:10:6c:c9:c3:80:f1:42:be:21:9a:0c:
                    68:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:A8:D3:C8:F7:F0:8D:25:A9:BD:F5:E6:FE:CA:35:90:59:63:18:DE
            X509v3 Authority Key Identifier:
                keyid:73:2B:11:40:08:51:42:A7:D7:47:47:88:EE:F4:65:DE:AB:BE:50:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/732B1140085142A7D7474788EEF465DEABBE5080.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732B1140085142A7D7474788EEF465DEABBE5080.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/323830343a356562383a383030303a3a2f33332d3333203d3e20323632383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5eb8:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         61:af:a5:1e:1c:57:a1:3f:12:44:90:a0:08:bc:b3:92:4f:7d:
         dd:15:c2:e9:6a:25:a4:7b:2f:cf:f5:ed:95:8b:fa:d3:2e:c5:
         a8:79:c9:7c:b9:4c:ab:21:b5:71:4c:e4:4c:b2:5c:2f:eb:d1:
         5a:4e:a6:a7:bf:bf:2b:38:e0:a1:86:1c:08:b2:3b:a5:c1:a5:
         c6:c1:f1:84:37:36:55:c8:60:0a:4d:2e:f8:9c:96:7f:ac:1d:
         bc:fb:d5:94:f1:2e:c6:86:33:e7:d3:cf:e7:36:77:3e:c1:ec:
         3a:0d:2b:46:f9:76:d3:ba:0a:b8:48:27:13:aa:00:a5:c8:d4:
         b6:22:94:cd:91:9e:84:f9:33:25:61:16:13:60:99:ab:e2:36:
         67:a9:98:25:87:93:4c:a3:ef:12:5c:92:71:21:7e:f2:06:d1:
         97:37:69:03:a3:dd:88:a5:19:64:49:f9:04:86:f0:38:d4:78:
         0b:d5:4f:51:de:a6:a8:84:02:bd:fc:ca:2e:23:99:c2:4a:74:
         89:2d:93:ba:14:f2:99:dc:e7:7a:df:5a:68:92:4f:1b:9c:0d:
         0a:23:c1:32:bb:2a:d1:d1:96:b5:e6:23:36:50:f0:87:84:81:
         c9:0e:19:ee:12:a1:af:c9:5f:3f:64:58:2e:29:d4:76:26:af:
         39:5a:de:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:39:46 2025 by rpki-client