Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/323830343a6332633a3a2f33322d313238203d3e203238313931.roa
File:                     323830343a6332633a3a2f33322d313238203d3e203238313931.roa (raw, json)
Hash identifier:          1IdDBv8DZUOuEo0fzv9kUqDmkSQq4AgAMpIYQ1dFasc=
Subject key identifier:   C1:A3:41:99:AC:18:2B:F9:16:83:76:E0:14:ED:FB:82:5D:E7:E9:EE
Certificate issuer:       /CN=000E8F0F5BCF155986A68F056DBFD3BAA939FE78
Certificate serial:       791F784E5FC62FA678AEE1D374EBBA6C061189CC
Authority key identifier: 00:0E:8F:0F:5B:CF:15:59:86:A6:8F:05:6D:BF:D3:BA:A9:39:FE:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/000E8F0F5BCF155986A68F056DBFD3BAA939FE78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/323830343a6332633a3a2f33322d313238203d3e203238313931.roa
Signing time:             Mon 11 Nov 2024 20:26:30 +0000
ROA not before:           Mon 11 Nov 2024 20:21:30 +0000
ROA not after:            Mon 10 Nov 2025 20:26:30 +0000
asID:                     28191
IP address blocks:        2804:c2c::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:1f:78:4e:5f:c6:2f:a6:78:ae:e1:d3:74:eb:ba:6c:06:11:89:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=000E8F0F5BCF155986A68F056DBFD3BAA939FE78
        Validity
            Not Before: Nov 11 20:21:30 2024 GMT
            Not After : Nov 10 20:26:30 2025 GMT
        Subject: CN=C1A34199AC182BF9168376E014EDFB825DE7E9EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:8e:dd:92:79:de:8a:8a:53:15:a2:9d:52:55:
                    7f:d1:38:14:77:2a:13:97:ed:b0:e7:77:80:64:1e:
                    ec:27:2d:1d:5f:a7:61:02:7a:3e:dc:56:50:9f:0e:
                    21:84:cf:dd:52:44:34:3f:54:66:3c:7d:5d:f8:24:
                    64:17:16:04:d5:13:64:55:83:15:96:b5:8e:67:f9:
                    3e:3c:18:ec:27:c0:41:4f:8e:22:d9:53:0d:ef:65:
                    5e:9b:22:c5:2e:98:95:a1:7a:27:c2:47:0a:3c:d7:
                    af:97:f2:f1:81:17:ea:40:55:75:84:5d:28:91:b6:
                    35:dd:9d:d8:67:77:b4:d6:be:d3:4d:29:99:58:f5:
                    cc:72:60:7d:18:08:12:d5:a3:2a:ff:08:54:47:df:
                    ff:c6:e3:73:2c:25:2c:50:03:89:91:d4:2e:4b:e5:
                    b3:4d:79:f2:ea:b9:dc:c4:92:cb:77:e3:b0:39:e2:
                    f0:a3:c0:b9:ec:02:99:a8:a3:3c:68:80:1f:72:c0:
                    53:52:ce:bd:37:0b:3e:cc:1d:34:2d:9d:13:03:f3:
                    e3:a7:ab:87:19:e0:d8:0e:9a:56:82:ad:e9:70:3a:
                    be:0f:a2:e7:21:84:aa:83:b7:6b:9f:41:cb:f6:91:
                    72:a7:f2:72:bb:15:fa:15:f9:0f:c7:97:60:2d:fa:
                    c1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:A3:41:99:AC:18:2B:F9:16:83:76:E0:14:ED:FB:82:5D:E7:E9:EE
            X509v3 Authority Key Identifier:
                keyid:00:0E:8F:0F:5B:CF:15:59:86:A6:8F:05:6D:BF:D3:BA:A9:39:FE:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/000E8F0F5BCF155986A68F056DBFD3BAA939FE78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/000E8F0F5BCF155986A68F056DBFD3BAA939FE78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/323830343a6332633a3a2f33322d313238203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c2c::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:17:d7:9b:22:8e:9c:09:48:10:30:ea:28:0a:5f:2c:6d:9f:
         e9:0b:18:48:ef:46:00:59:48:50:ee:ed:28:1b:52:7a:79:13:
         91:e8:b1:ce:d6:7a:0f:84:de:42:55:dd:28:b7:03:ce:ac:26:
         47:e5:d4:75:10:63:44:6a:89:6f:d5:8f:04:12:f2:54:80:fe:
         93:63:3f:30:e4:42:80:2a:93:04:ac:3a:90:1c:11:a6:4c:d2:
         0f:07:1d:0a:da:db:10:77:e4:f4:4b:9d:10:88:07:f6:42:7d:
         34:23:3d:d2:7b:78:eb:e4:96:fe:56:cb:47:37:27:b1:29:00:
         99:aa:f2:5c:e1:20:77:a7:58:ac:cf:02:9e:88:26:02:ad:64:
         fe:3b:8b:66:f3:75:14:16:a4:36:38:ea:58:67:f3:29:59:38:
         f0:c5:f0:66:fd:01:c8:52:ea:6a:b6:15:b5:1c:3f:63:43:e9:
         53:9a:1e:8a:0f:79:c9:aa:c5:4f:2b:9d:d4:0e:a2:ec:ce:c3:
         10:b1:08:73:17:d2:84:2d:e5:c5:58:4c:09:05:79:f1:bf:9b:
         20:82:48:34:e9:f9:ae:3c:4e:7c:a7:ea:ed:bd:98:12:b6:83:
         c0:01:36:e7:16:46:ac:cc:92:4c:d5:06:1d:4f:74:11:6d:70:
         dc:37:c3:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:17:10 2025 by rpki-client