Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uef8goYm1hLBBe7Nj2JFwB621drGN2jcBCa4wZvi1Q8/0/323830343a386635383a3a2f33322d3334203d3e20323733343835.roa
File:                     323830343a386635383a3a2f33322d3334203d3e20323733343835.roa (raw, json)
Hash identifier:          sWCWC2blugwDA5GjLHplzoTjJrDf4ml2mn5K8bTAaT8=
Subject key identifier:   1B:03:4C:E1:71:5A:A1:6E:00:2F:C5:5B:53:FB:7C:5F:EF:71:E2:97
Certificate issuer:       /CN=4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2
Certificate serial:       26B6646F88D6CD79F98200B23A8ABBC9DF8E2579
Authority key identifier: 4D:CB:5A:BC:62:FB:BC:89:0F:DA:F0:5E:0D:86:D7:99:9A:6E:AD:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uef8goYm1hLBBe7Nj2JFwB621drGN2jcBCa4wZvi1Q8/0/323830343a386635383a3a2f33322d3334203d3e20323733343835.roa
Signing time:             Tue 17 Dec 2024 18:10:30 +0000
ROA not before:           Tue 17 Dec 2024 18:05:30 +0000
ROA not after:            Tue 16 Dec 2025 18:10:30 +0000
asID:                     273485
IP address blocks:        2804:8f58::/32 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:b6:64:6f:88:d6:cd:79:f9:82:00:b2:3a:8a:bb:c9:df:8e:25:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2
        Validity
            Not Before: Dec 17 18:05:30 2024 GMT
            Not After : Dec 16 18:10:30 2025 GMT
        Subject: CN=1B034CE1715AA16E002FC55B53FB7C5FEF71E297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ae:56:31:fc:6e:09:83:73:1f:40:02:8e:c0:
                    58:cb:86:79:63:96:40:ef:f7:b9:08:dc:e7:68:f7:
                    37:6d:0b:a5:37:55:56:0d:b2:68:fb:df:ce:c8:49:
                    3b:8c:97:b8:29:69:96:f2:25:0d:32:28:c5:06:8d:
                    0f:0b:50:e7:b7:e5:6b:62:ca:a2:8d:58:01:42:48:
                    53:d3:ff:ef:35:77:0f:f8:a0:f4:d8:b5:95:cc:aa:
                    9e:bb:f0:40:d7:22:58:f7:6a:0e:e1:13:3a:32:56:
                    41:95:5b:00:33:93:b4:a1:29:3e:3a:05:da:65:90:
                    1c:06:45:3a:77:f5:f6:4a:2c:fb:47:94:76:8d:6d:
                    5c:6b:bf:3a:32:62:11:31:e4:b8:5b:2c:f8:6b:15:
                    63:bf:f3:23:d8:61:42:4a:d5:7e:b8:c8:3f:76:a4:
                    f7:3b:31:98:52:3f:25:99:cc:bb:70:3d:5e:79:60:
                    07:f9:72:cc:5a:83:95:ff:72:21:c7:6b:40:86:39:
                    17:ac:57:b0:06:37:16:24:a8:1a:4a:6b:c9:36:36:
                    c1:91:7b:4a:8f:18:1c:af:6e:f4:d9:00:2f:c3:5c:
                    76:70:bb:79:ec:55:f1:00:3f:25:de:7d:39:5a:77:
                    3d:a9:8e:d6:47:7f:24:cb:57:94:68:c5:31:3e:20:
                    d1:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:03:4C:E1:71:5A:A1:6E:00:2F:C5:5B:53:FB:7C:5F:EF:71:E2:97
            X509v3 Authority Key Identifier:
                keyid:4D:CB:5A:BC:62:FB:BC:89:0F:DA:F0:5E:0D:86:D7:99:9A:6E:AD:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uef8goYm1hLBBe7Nj2JFwB621drGN2jcBCa4wZvi1Q8/0/4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uef8goYm1hLBBe7Nj2JFwB621drGN2jcBCa4wZvi1Q8/0/323830343a386635383a3a2f33322d3334203d3e20323733343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8f58::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:d4:81:f4:92:d6:a5:43:9a:6a:4d:05:1a:b7:b8:7f:67:09:
         1e:25:59:94:cd:97:d4:5b:23:cb:c5:14:32:7c:65:e6:fa:5c:
         2b:16:56:66:52:c1:17:e9:84:c1:5a:9f:f2:56:f6:43:8f:3e:
         9d:49:4d:57:c2:41:12:b9:56:56:15:5b:0b:90:3c:d9:02:85:
         4c:e3:2d:7c:c6:17:59:3d:72:22:ef:2c:f1:39:c9:cf:49:9d:
         1d:3c:e4:f4:f3:13:bd:0f:b0:d2:83:83:d7:be:85:4f:0f:02:
         1a:ba:6c:0f:6a:08:61:00:b7:37:43:af:d4:7b:54:41:99:13:
         c3:8e:3a:5c:ca:f2:c9:2a:71:a3:f5:0e:15:6a:29:b0:20:ad:
         02:dc:0d:2b:d3:42:26:44:7b:be:41:2a:23:42:2b:32:ad:72:
         45:1d:48:ec:69:63:80:79:47:c8:69:fe:fe:65:8d:c0:36:78:
         e1:85:0c:fd:2b:b8:af:02:d7:76:48:ef:5f:4f:32:16:b6:b6:
         9e:0f:9a:28:7f:0f:b5:00:0a:54:5f:14:ac:00:68:34:8d:ad:
         9b:d9:72:25:4c:f5:df:b4:91:3b:e1:fb:24:e2:46:1d:e6:30:
         87:5f:07:1b:68:c9:8e:c2:4b:bc:a8:08:9f:1c:98:7d:01:a5:
         ea:aa:3f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:39:36 2025 by rpki-client