Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/1/323830343a356365383a393030303a3a2f34302d3430203d3e20323638393338.roa
File:                     323830343a356365383a393030303a3a2f34302d3430203d3e20323638393338.roa (raw, json)
Hash identifier:          76A9UbZNdOVmDx8KQTZ0O9IJWe0PZxbSh6eYFGJn+c4=
Subject key identifier:   B4:99:AA:D9:61:CE:B9:7F:DF:5C:77:3C:CC:DB:A2:72:A1:A4:41:6E
Certificate issuer:       /CN=5BA440224058DF1562003D8FD1746F0E05A2C6F6
Certificate serial:       750E281927AB3ACF098E0AB4C7427E19684C5009
Authority key identifier: 5B:A4:40:22:40:58:DF:15:62:00:3D:8F:D1:74:6F:0E:05:A2:C6:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BA440224058DF1562003D8FD1746F0E05A2C6F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/1/323830343a356365383a393030303a3a2f34302d3430203d3e20323638393338.roa
Signing time:             Thu 06 Mar 2025 02:11:59 +0000
ROA not before:           Thu 06 Mar 2025 02:06:59 +0000
ROA not after:            Thu 05 Mar 2026 02:11:59 +0000
asID:                     268938
IP address blocks:        2804:5ce8:9000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:0e:28:19:27:ab:3a:cf:09:8e:0a:b4:c7:42:7e:19:68:4c:50:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BA440224058DF1562003D8FD1746F0E05A2C6F6
        Validity
            Not Before: Mar  6 02:06:59 2025 GMT
            Not After : Mar  5 02:11:59 2026 GMT
        Subject: CN=B499AAD961CEB97FDF5C773CCCDBA272A1A4416E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ba:e5:8f:43:c7:74:e5:4b:8b:f5:b5:b8:46:
                    da:5f:99:a7:80:60:b6:2e:04:18:5e:f5:8a:9b:e4:
                    f0:54:f5:27:de:22:37:95:93:ae:63:9b:56:fa:38:
                    53:8b:96:f2:d0:da:a1:9a:08:0c:ba:fc:9b:00:cf:
                    1b:08:5a:4a:41:66:1c:b4:0d:9f:35:72:bf:74:1a:
                    83:3f:20:21:5e:80:d9:e7:01:15:15:95:22:ae:cc:
                    b1:19:f1:37:c4:23:4b:b0:48:0a:64:70:5d:da:3e:
                    a1:c5:9e:62:25:27:b6:0a:77:28:1d:18:a8:36:5a:
                    42:76:c3:87:b3:9b:3d:db:0e:41:e3:63:23:27:1c:
                    a4:b4:39:49:5c:9a:3d:e5:1c:35:76:33:14:71:98:
                    16:96:61:00:14:33:b4:b5:70:8c:b2:cd:27:b7:61:
                    78:dd:2c:72:c4:0a:57:0f:7e:04:ef:aa:5b:1a:a0:
                    5c:eb:18:64:e9:53:08:03:18:85:4a:0b:09:db:d6:
                    a9:4b:6e:fb:6b:91:a9:79:ce:38:2d:56:5c:25:9e:
                    7c:a5:38:6e:27:3b:a4:5e:63:e0:62:0c:30:43:f0:
                    7b:aa:5b:eb:80:9c:a3:6c:64:36:f5:52:f8:c6:77:
                    9a:7a:54:1f:74:28:91:1f:fb:1b:dd:d4:b5:01:31:
                    d7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:99:AA:D9:61:CE:B9:7F:DF:5C:77:3C:CC:DB:A2:72:A1:A4:41:6E
            X509v3 Authority Key Identifier:
                keyid:5B:A4:40:22:40:58:DF:15:62:00:3D:8F:D1:74:6F:0E:05:A2:C6:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/1/5BA440224058DF1562003D8FD1746F0E05A2C6F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BA440224058DF1562003D8FD1746F0E05A2C6F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/1/323830343a356365383a393030303a3a2f34302d3430203d3e20323638393338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ce8:9000::/40

    Signature Algorithm: sha256WithRSAEncryption
         77:7c:56:97:62:da:93:e2:6c:d5:c8:4b:65:2d:0d:54:dc:63:
         4e:6f:52:a0:b6:ba:bd:62:7d:ca:fe:4b:b1:4d:d4:dc:94:03:
         47:71:b3:31:99:03:2f:c5:7a:20:ed:f5:c1:2d:66:9c:fc:b4:
         51:11:8a:13:80:45:11:82:1b:dd:75:39:b5:9a:85:71:9a:fc:
         8a:68:44:67:44:e3:64:04:1f:11:a4:f6:50:6c:ab:83:0d:8b:
         07:6e:23:d1:c3:a0:f1:6b:f0:a4:c7:9b:1a:06:26:17:89:00:
         a0:55:cc:af:5f:e9:65:04:8e:85:ba:df:4b:7b:d5:e4:a6:2d:
         ce:e7:8e:a6:7e:ca:10:07:f9:01:9d:f3:55:38:ad:33:1a:25:
         58:d1:94:cd:4d:f9:42:f7:fd:1a:cc:ab:89:af:8c:2c:1c:35:
         e3:39:5c:84:82:8d:c5:a4:83:bd:91:58:e2:8f:7f:98:18:38:
         3e:97:2f:a0:e3:0f:05:57:96:d2:d0:59:9a:bc:3b:bd:8f:b2:
         47:35:20:6b:00:17:d1:5a:3a:cd:49:6f:20:56:16:ea:a2:1f:
         36:46:ef:17:d9:e2:2a:5e:44:a6:e8:13:b4:a3:3e:ad:b1:9b:
         f2:38:2b:fe:d7:b8:4f:09:ef:ae:25:42:9e:51:b7:98:42:0a:
         de:73:68:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:44:25 2025 by rpki-client