Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a653030303a3a2f33362d3336203d3e20323637393432.roa
File:                     323830343a353539303a653030303a3a2f33362d3336203d3e20323637393432.roa (raw, json)
Hash identifier:          YTGxCB0BOkEYlsk2BI6hgd4/bmRrXGfNB8HErDQFQB0=
Subject key identifier:   4E:C4:46:72:E3:D7:F5:B6:69:99:58:85:7A:9E:46:EB:DC:A4:E5:2D
Certificate issuer:       /CN=0FD65004E7C4085F2D33DF17345261EDD9B3A811
Certificate serial:       3DA986C12FC18DE1876B50C1824ACFB83F8CA2DF
Authority key identifier: 0F:D6:50:04:E7:C4:08:5F:2D:33:DF:17:34:52:61:ED:D9:B3:A8:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FD65004E7C4085F2D33DF17345261EDD9B3A811.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a653030303a3a2f33362d3336203d3e20323637393432.roa
Signing time:             Wed 26 Mar 2025 16:51:14 +0000
ROA not before:           Wed 26 Mar 2025 16:46:14 +0000
ROA not after:            Wed 25 Mar 2026 16:51:14 +0000
asID:                     267942
IP address blocks:        2804:5590:e000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:a9:86:c1:2f:c1:8d:e1:87:6b:50:c1:82:4a:cf:b8:3f:8c:a2:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FD65004E7C4085F2D33DF17345261EDD9B3A811
        Validity
            Not Before: Mar 26 16:46:14 2025 GMT
            Not After : Mar 25 16:51:14 2026 GMT
        Subject: CN=4EC44672E3D7F5B6699958857A9E46EBDCA4E52D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6b:5e:9c:2e:80:80:e6:b3:06:dc:a0:a6:d7:
                    3a:82:34:df:4b:ab:2f:ee:bd:e9:dd:b3:c1:7d:f2:
                    b8:25:fa:b0:1a:6e:c9:ce:b8:2a:64:ae:23:5b:3f:
                    15:57:73:a2:90:01:7a:14:f5:3f:05:31:3e:a0:c7:
                    6a:78:d2:8f:94:f8:33:61:2f:26:0f:de:27:fd:79:
                    21:b5:7e:09:7a:64:30:18:13:60:7b:80:7d:01:3f:
                    75:fc:df:ba:bd:37:f9:ff:b7:0c:84:78:4f:8d:1a:
                    09:63:74:77:79:f5:11:0a:0d:95:6b:3a:00:b7:09:
                    f8:ce:db:7f:25:01:ab:93:cc:06:b3:28:0e:29:0c:
                    8d:39:34:b9:7c:3d:6c:85:a1:4d:fd:cd:2e:75:67:
                    4e:3f:23:c4:64:22:1a:c1:bb:d7:80:ad:73:a1:98:
                    24:62:dd:63:85:6f:12:d3:8a:49:bc:1a:bb:cd:f6:
                    e0:92:39:03:7e:4f:dd:39:80:8d:2c:20:74:f2:b7:
                    77:20:52:28:2a:f0:37:82:42:38:71:da:cf:ff:3c:
                    b2:93:49:67:ef:2e:7c:e4:71:e1:5d:e1:c8:fc:00:
                    ed:42:2a:00:07:7e:ac:72:a8:6c:71:74:96:c8:a0:
                    5e:ad:e5:5b:8f:54:e1:f0:39:d9:f5:42:0e:d2:2d:
                    ee:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:C4:46:72:E3:D7:F5:B6:69:99:58:85:7A:9E:46:EB:DC:A4:E5:2D
            X509v3 Authority Key Identifier:
                keyid:0F:D6:50:04:E7:C4:08:5F:2D:33:DF:17:34:52:61:ED:D9:B3:A8:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/0FD65004E7C4085F2D33DF17345261EDD9B3A811.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FD65004E7C4085F2D33DF17345261EDD9B3A811.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a653030303a3a2f33362d3336203d3e20323637393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5590:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         94:7a:94:68:70:5a:eb:e5:8f:58:1a:d7:f8:ac:7c:fe:85:cd:
         fd:32:92:f0:03:8c:9a:e8:3b:0c:4c:96:32:d1:ae:8e:b1:a0:
         2e:26:a2:7f:40:88:ce:44:c4:31:a7:0d:72:75:44:b8:08:bc:
         eb:5a:f8:d8:1e:e0:ee:9c:32:30:5d:31:03:71:16:db:68:6a:
         6f:eb:7d:10:f2:62:12:49:c5:83:ef:8f:ce:67:b2:b3:5c:9f:
         ed:ea:04:d6:5f:12:24:6f:e0:fe:9f:0c:5f:ea:d7:c0:c6:32:
         86:ac:db:4e:15:2b:0b:4e:8e:fa:e9:28:1f:49:63:77:c3:6f:
         25:86:8c:60:23:07:b4:bd:d3:46:96:4a:8a:75:1e:1c:54:9d:
         06:84:a9:12:1a:6e:86:f0:59:16:00:1d:b7:4b:ca:53:94:b4:
         c7:94:ae:b2:c7:45:0b:b2:dd:a0:a8:34:87:8a:86:f9:fd:47:
         38:89:3c:dc:e3:d4:d0:20:50:f7:48:31:14:fb:f0:89:61:ee:
         89:d5:e4:cd:63:aa:5b:eb:3b:6d:9a:b7:fc:61:13:91:df:5f:
         33:cf:14:d3:9d:d3:bc:f5:29:28:c3:04:e0:f3:4c:b1:a0:f7:
         f8:b0:ea:6a:0a:29:48:9e:54:a3:9f:82:db:46:77:f4:dd:cd:
         09:27:81:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:39:48 2025 by rpki-client