Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uef8goYm1hLBBe7Nj2JFwB621drGN2jcBCa4wZvi1Q8/0/323830343a386635383a3a2f33322d3332203d3e20323733343835.roa
File:                     323830343a386635383a3a2f33322d3332203d3e20323733343835.roa (raw, json)
Hash identifier:          hDPSG3UIUpiH2EWZag/ICzRALOg42/raFOAk4M0uoMI=
Subject key identifier:   1F:46:62:87:45:EE:11:7F:25:13:A3:13:36:23:CB:3A:A4:E6:1D:12
Certificate issuer:       /CN=3AEB50755D281E4A9B9ABA4D21AA67926FCA5507
Certificate serial:       489D0F651976A6A0088A9C725C5F44401F093C37
Authority key identifier: 3A:EB:50:75:5D:28:1E:4A:9B:9A:BA:4D:21:AA:67:92:6F:CA:55:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AEB50755D281E4A9B9ABA4D21AA67926FCA5507.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uef8goYm1hLBBe7Nj2JFwB621drGN2jcBCa4wZvi1Q8/0/323830343a386635383a3a2f33322d3332203d3e20323733343835.roa
Signing time:             Tue 10 Dec 2024 17:07:08 +0000
ROA not before:           Tue 10 Dec 2024 17:02:08 +0000
ROA not after:            Tue 09 Dec 2025 17:07:08 +0000
asID:                     273485
IP address blocks:        2804:8f58::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:9d:0f:65:19:76:a6:a0:08:8a:9c:72:5c:5f:44:40:1f:09:3c:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3AEB50755D281E4A9B9ABA4D21AA67926FCA5507
        Validity
            Not Before: Dec 10 17:02:08 2024 GMT
            Not After : Dec  9 17:07:08 2025 GMT
        Subject: CN=1F46628745EE117F2513A3133623CB3AA4E61D12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:16:c9:d4:87:5b:4d:6e:b9:75:1c:31:cc:2d:
                    11:c9:7e:b5:cc:49:e2:62:7c:7e:b3:47:f8:c3:fd:
                    e0:d5:01:58:40:7f:e2:49:87:e9:28:99:19:b6:f5:
                    2e:88:c9:d7:1f:82:a9:06:e8:0e:a1:f5:5c:8f:f3:
                    d1:13:ed:53:24:fc:1a:31:65:0e:74:bf:93:75:14:
                    d6:f4:d9:58:91:64:fd:df:4f:63:c5:58:bb:89:6a:
                    79:a2:74:d4:ec:de:65:2f:ca:81:8c:f7:ea:ca:57:
                    ec:ca:21:9e:04:ba:80:96:23:b3:13:83:55:90:9c:
                    3e:ba:85:40:d4:4c:33:07:ff:b5:79:6a:2b:d1:59:
                    56:07:af:a3:5d:5f:88:86:a6:ac:1c:1c:a4:1b:26:
                    d6:ce:c8:6b:76:a7:c7:88:2a:54:75:8a:5a:f1:0c:
                    c5:c5:c9:3a:fb:bf:e0:ed:f2:82:c2:6d:27:49:28:
                    55:0f:57:0c:24:09:00:78:9a:88:4f:d0:9b:1e:c0:
                    6a:22:f6:0e:92:21:10:8d:2a:f7:1d:45:2f:18:31:
                    0b:0c:fd:ef:b4:1c:c1:fd:1d:7c:70:07:8a:61:18:
                    b4:56:5e:ba:b1:2d:fa:cb:4e:63:4f:8c:60:7e:f5:
                    74:b2:8e:ce:b1:1c:38:98:85:00:74:a2:b5:a6:5b:
                    e6:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:46:62:87:45:EE:11:7F:25:13:A3:13:36:23:CB:3A:A4:E6:1D:12
            X509v3 Authority Key Identifier:
                keyid:3A:EB:50:75:5D:28:1E:4A:9B:9A:BA:4D:21:AA:67:92:6F:CA:55:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uef8goYm1hLBBe7Nj2JFwB621drGN2jcBCa4wZvi1Q8/0/3AEB50755D281E4A9B9ABA4D21AA67926FCA5507.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AEB50755D281E4A9B9ABA4D21AA67926FCA5507.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uef8goYm1hLBBe7Nj2JFwB621drGN2jcBCa4wZvi1Q8/0/323830343a386635383a3a2f33322d3332203d3e20323733343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8f58::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:12:41:2e:aa:8a:03:89:77:8e:38:3b:f5:1b:9d:d2:78:0c:
         e7:12:c3:12:54:30:1d:bb:ff:89:cd:d7:be:d0:66:d6:43:9d:
         25:a1:52:b1:b0:34:c7:0c:49:d6:8f:5d:69:46:86:d2:e0:da:
         ed:11:29:84:c2:8c:7c:f8:ff:12:51:e0:96:dd:41:fa:77:d8:
         ab:4e:af:7f:7d:f8:f1:02:5d:b3:6f:b8:e7:29:65:54:3b:12:
         82:78:57:00:84:44:b5:a8:68:5f:85:e3:10:d4:f5:2a:89:0c:
         2e:26:60:47:64:c8:83:a8:f7:85:81:56:7c:7c:f2:e2:24:7b:
         6c:7d:89:2e:e7:5c:fe:f5:58:33:97:29:70:5f:86:fe:22:58:
         a2:d4:8b:ac:34:de:3a:7a:d4:8b:83:a7:58:3c:7d:12:3e:ec:
         dd:c9:ef:b7:26:ae:a4:ed:42:f3:70:9e:db:1a:81:77:51:cf:
         63:2a:0e:15:9c:8f:81:0a:d4:fc:b9:ee:b8:29:15:44:4c:2b:
         8d:c9:3c:80:a9:e9:40:d3:9f:5c:fa:01:f7:b5:54:83:6c:a7:
         32:59:6f:dc:c4:8e:16:85:f1:55:0f:a7:39:d4:3a:18:4b:e1:
         ce:57:5f:32:9d:0b:05:59:fc:de:09:83:ad:00:92:dc:5f:eb:
         48:66:07:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:42:05 2025 by rpki-client