Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a3a2f33322d3332203d3e20323637393432.roa
File:                     323830343a353539303a3a2f33322d3332203d3e20323637393432.roa (raw, json)
Hash identifier:          uv58Tu+ERkwswYF7+qkly0KdFA8nUt8N5vOKzSWlHZ8=
Subject key identifier:   69:87:91:21:8B:9F:B0:A1:13:99:E2:B0:DD:01:63:1E:79:04:B7:E7
Certificate issuer:       /CN=0FD65004E7C4085F2D33DF17345261EDD9B3A811
Certificate serial:       5A1634000592AD5D4A3DCCFF87A69C624672F105
Authority key identifier: 0F:D6:50:04:E7:C4:08:5F:2D:33:DF:17:34:52:61:ED:D9:B3:A8:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FD65004E7C4085F2D33DF17345261EDD9B3A811.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a3a2f33322d3332203d3e20323637393432.roa
Signing time:             Wed 26 Mar 2025 16:49:23 +0000
ROA not before:           Wed 26 Mar 2025 16:44:23 +0000
ROA not after:            Wed 25 Mar 2026 16:49:23 +0000
asID:                     267942
IP address blocks:        2804:5590::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:16:34:00:05:92:ad:5d:4a:3d:cc:ff:87:a6:9c:62:46:72:f1:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FD65004E7C4085F2D33DF17345261EDD9B3A811
        Validity
            Not Before: Mar 26 16:44:23 2025 GMT
            Not After : Mar 25 16:49:23 2026 GMT
        Subject: CN=698791218B9FB0A11399E2B0DD01631E7904B7E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e2:a3:20:47:11:61:81:c0:5c:66:b4:8c:62:
                    4c:8c:be:76:ab:f3:7a:0e:98:41:99:3b:46:c3:72:
                    09:ee:bf:a1:f6:80:22:df:ec:d6:da:95:35:d3:80:
                    15:73:5d:37:50:1e:4f:b6:40:99:42:18:36:35:09:
                    ce:14:0d:7c:86:51:bb:83:0c:8e:a8:e3:99:f9:fd:
                    84:7b:95:c2:99:ef:6d:06:1f:35:ce:f9:8e:cc:cb:
                    f8:b1:56:29:b3:b0:67:7c:e1:9a:3b:f4:8c:40:21:
                    e9:33:03:37:9d:c8:27:16:0a:fb:e0:e8:bf:29:27:
                    56:0a:bb:d3:f0:d1:4b:64:26:73:12:c2:2a:92:2e:
                    07:88:83:a8:86:3a:f4:d0:bf:ce:8c:96:af:3d:0b:
                    2f:ac:28:5a:db:23:68:e5:65:51:a5:8b:c3:8e:aa:
                    2d:73:eb:b7:6a:5a:eb:72:5d:43:42:55:0a:07:81:
                    3a:74:38:7e:80:02:4d:66:e8:e1:59:cf:15:30:0b:
                    b2:ea:fb:75:bd:50:a9:5b:64:0b:7f:6b:63:58:23:
                    05:31:80:6c:ce:a5:d9:41:30:8d:ea:25:2e:ad:24:
                    96:b9:fd:31:ae:4e:39:ea:6b:25:3d:45:41:45:40:
                    ad:47:22:21:f8:c4:ab:75:44:6b:bd:e9:c8:07:46:
                    0f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:87:91:21:8B:9F:B0:A1:13:99:E2:B0:DD:01:63:1E:79:04:B7:E7
            X509v3 Authority Key Identifier:
                keyid:0F:D6:50:04:E7:C4:08:5F:2D:33:DF:17:34:52:61:ED:D9:B3:A8:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/0FD65004E7C4085F2D33DF17345261EDD9B3A811.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FD65004E7C4085F2D33DF17345261EDD9B3A811.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a3a2f33322d3332203d3e20323637393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5590::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:2a:a3:5c:f3:f8:da:cc:75:e3:b4:47:2f:52:53:2b:44:89:
         a1:cc:0e:24:80:26:0f:ec:ba:df:6a:70:91:e3:a0:11:ba:41:
         4a:7c:c7:f9:61:c2:ad:5b:32:2b:af:86:50:94:e3:17:36:5a:
         a9:55:3c:90:1b:ae:0d:fb:c2:24:e0:a9:c4:ef:15:10:9c:2a:
         f5:e8:2e:c0:77:21:42:d2:4c:18:18:4f:10:38:36:e0:57:1c:
         45:d0:f7:db:9e:7c:47:f9:6f:7a:12:fe:28:0f:e8:bb:1a:00:
         fc:bc:27:ee:56:04:48:d0:35:21:02:e9:2f:43:a3:c2:85:3b:
         dc:15:63:da:05:4f:85:be:47:94:b3:68:cc:dd:dc:5e:13:98:
         81:61:97:34:0c:56:bc:e1:4a:20:5d:66:da:fb:d0:f9:47:a7:
         94:89:5c:4b:51:6e:5e:e3:93:13:54:62:02:83:b0:2b:46:d1:
         a0:7d:40:42:e8:57:97:47:79:16:12:c8:b9:84:2f:71:2b:6e:
         c1:57:ed:58:49:d6:fa:69:c9:b3:a2:e2:47:c6:5b:e9:c3:89:
         d4:58:27:2a:cd:09:b4:37:34:ff:18:ba:e2:ac:d6:5b:09:bc:
         42:6c:67:fb:b7:95:44:ce:c3:f3:3d:dc:8f:07:7e:d5:ed:da:
         41:5a:8c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:03:03 2025 by rpki-client