Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/323830343a333662633a343030303a3a2f33342d3334203d3e20323636333638.roa
File:                     323830343a333662633a343030303a3a2f33342d3334203d3e20323636333638.roa (raw, json)
Hash identifier:          89beWiYSMm5yEte+g51sWORhYS6CbFTgDhc+XdfNz0U=
Subject key identifier:   E6:D7:53:F8:A0:00:38:A9:9C:25:F6:F9:0B:F7:0E:12:D9:5A:F2:FF
Certificate issuer:       /CN=2A3CA2DBD8297399B3831FD990D4BFDBEC0BED07
Certificate serial:       43AD1E016E4BE33408A95582C31F616EE5CFD5E5
Authority key identifier: 2A:3C:A2:DB:D8:29:73:99:B3:83:1F:D9:90:D4:BF:DB:EC:0B:ED:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A3CA2DBD8297399B3831FD990D4BFDBEC0BED07.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/323830343a333662633a343030303a3a2f33342d3334203d3e20323636333638.roa
Signing time:             Tue 17 Dec 2024 19:54:16 +0000
ROA not before:           Tue 17 Dec 2024 19:49:16 +0000
ROA not after:            Tue 16 Dec 2025 19:54:16 +0000
asID:                     266368
IP address blocks:        2804:36bc:4000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:ad:1e:01:6e:4b:e3:34:08:a9:55:82:c3:1f:61:6e:e5:cf:d5:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A3CA2DBD8297399B3831FD990D4BFDBEC0BED07
        Validity
            Not Before: Dec 17 19:49:16 2024 GMT
            Not After : Dec 16 19:54:16 2025 GMT
        Subject: CN=E6D753F8A00038A99C25F6F90BF70E12D95AF2FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:95:12:2e:c4:fd:5f:67:10:73:c0:36:d3:65:
                    00:80:50:2f:0a:09:1c:72:e7:db:83:9b:d6:5a:78:
                    09:9b:2a:86:ef:b7:0e:03:d7:e7:94:13:1a:d8:4c:
                    70:bd:d2:7d:35:3b:6a:77:77:88:c2:0d:75:50:12:
                    9d:cd:df:df:f8:b3:b8:80:c9:fd:9c:56:4e:e4:ea:
                    53:94:1b:55:2f:cd:52:bf:0b:5b:21:bd:49:18:ee:
                    ce:19:ff:90:58:d2:dc:f5:cc:96:48:2d:72:7a:02:
                    36:4a:eb:12:3d:f1:e1:dc:f0:dc:a4:f2:88:20:7a:
                    6e:e7:ee:a3:c9:e1:24:05:8d:53:1b:b4:93:34:e3:
                    d7:be:82:24:6e:fb:62:26:af:e6:e8:4e:4e:47:41:
                    c7:cd:84:97:52:99:ff:cc:a9:bf:35:e8:c9:48:35:
                    b8:2e:0e:6a:8b:24:32:ea:84:9b:57:d0:3f:4b:e3:
                    c0:07:3d:77:77:e0:b2:ef:29:de:0a:c6:3a:82:09:
                    7a:8b:f9:2b:a5:31:0a:06:6b:24:ea:f1:c0:b3:3b:
                    b1:ef:f2:e4:96:20:5b:10:01:63:77:76:15:40:33:
                    91:64:8d:be:1e:a6:3a:0f:d6:40:9a:2e:4a:53:ff:
                    eb:15:df:83:9b:51:ef:a5:00:cc:97:44:3b:2f:a2:
                    4d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:D7:53:F8:A0:00:38:A9:9C:25:F6:F9:0B:F7:0E:12:D9:5A:F2:FF
            X509v3 Authority Key Identifier:
                keyid:2A:3C:A2:DB:D8:29:73:99:B3:83:1F:D9:90:D4:BF:DB:EC:0B:ED:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/2A3CA2DBD8297399B3831FD990D4BFDBEC0BED07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A3CA2DBD8297399B3831FD990D4BFDBEC0BED07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/323830343a333662633a343030303a3a2f33342d3334203d3e20323636333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:36bc:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         18:65:34:4b:20:85:88:bc:5b:0e:47:5a:6c:54:08:8b:14:4d:
         3a:45:3a:82:98:b6:ae:8e:41:81:8d:cc:3f:c8:e0:d7:fe:bf:
         0f:1d:5e:1c:ce:da:2a:c9:d8:75:47:45:59:fe:05:b2:04:b4:
         c5:95:1e:67:7a:60:81:8e:f6:4b:5d:a5:8d:c3:a2:09:e3:d4:
         a6:4c:65:02:5a:06:a5:9c:53:d8:88:7f:55:0f:10:78:f8:aa:
         36:e7:cb:bb:35:85:6b:7c:3d:8c:27:35:5a:a6:cb:4c:7c:02:
         c9:bb:e4:cf:44:9c:4f:0c:00:27:5a:43:fd:f0:b5:a5:ff:78:
         34:8b:ea:47:e5:af:f3:2b:ea:fa:59:3f:d9:22:8c:b1:7d:f0:
         8e:23:b6:84:b7:10:6e:c3:c1:04:4d:e5:f1:a8:fa:b1:6f:e9:
         b4:25:8e:e5:08:51:73:ab:37:70:7e:9e:2c:11:5d:9b:e9:7c:
         21:db:dc:35:7c:31:7d:2b:79:15:81:6e:22:c2:5a:a7:9f:2a:
         3d:f1:fc:92:49:71:6f:84:e9:aa:7d:44:3a:c8:7a:e7:22:54:
         2e:c8:92:da:46:7d:35:d0:03:d7:d6:cb:c8:fb:a0:56:03:d8:
         8a:04:9e:b2:2b:1a:9e:f4:79:bc:99:48:a2:17:fa:3b:3a:3b:
         89:16:e8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:55:31 2025 by rpki-client