Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6HsUFLjPNhw58NdRHgKFqDem7ua7S24ZsmcHAEkjSVhJ/0/323830343a383032383a3a2f33322d3334203d3e20323731373333.roa
File:                     323830343a383032383a3a2f33322d3334203d3e20323731373333.roa (raw, json)
Hash identifier:          DzBmadl7QW5S9IM+B8ksRSbDTMulW0pIS5S7LtZJ0XM=
Subject key identifier:   4E:EF:CA:DF:7C:89:3C:50:89:4F:C7:C3:E2:2C:73:40:7C:94:60:B7
Certificate issuer:       /CN=E4BC959F2814C50C32B3647442E7A327D6946E27
Certificate serial:       02C0509E7180FACD42E674EEF5E0272A2FE7C48A
Authority key identifier: E4:BC:95:9F:28:14:C5:0C:32:B3:64:74:42:E7:A3:27:D6:94:6E:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4BC959F2814C50C32B3647442E7A327D6946E27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6HsUFLjPNhw58NdRHgKFqDem7ua7S24ZsmcHAEkjSVhJ/0/323830343a383032383a3a2f33322d3334203d3e20323731373333.roa
Signing time:             Fri 28 Feb 2025 17:43:47 +0000
ROA not before:           Fri 28 Feb 2025 17:38:47 +0000
ROA not after:            Fri 27 Feb 2026 17:43:47 +0000
asID:                     271733
IP address blocks:        2804:8028::/32 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:c0:50:9e:71:80:fa:cd:42:e6:74:ee:f5:e0:27:2a:2f:e7:c4:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4BC959F2814C50C32B3647442E7A327D6946E27
        Validity
            Not Before: Feb 28 17:38:47 2025 GMT
            Not After : Feb 27 17:43:47 2026 GMT
        Subject: CN=4EEFCADF7C893C50894FC7C3E22C73407C9460B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a7:21:a6:ba:7e:f5:99:b9:94:bf:a7:38:30:
                    ab:a3:23:31:7f:60:d1:9d:22:74:f9:1f:8c:ea:9a:
                    ba:5d:d2:46:bf:0f:75:78:15:26:42:b5:72:2a:dd:
                    c0:76:5c:bd:8a:50:d8:cd:67:24:98:44:bc:a2:ef:
                    0d:33:de:0e:65:e2:f0:af:0c:20:78:de:c0:d8:53:
                    c1:84:84:d9:23:a2:1a:37:f0:94:ce:09:27:34:88:
                    6e:e0:9c:b9:8c:8a:44:d3:22:f1:3a:06:ab:6c:3d:
                    18:0a:99:4f:75:72:e9:c1:84:cf:22:ed:9d:ba:5d:
                    ef:00:bb:c2:16:19:14:55:9a:0f:5f:3f:30:7d:2d:
                    24:0a:29:5b:eb:b5:66:59:97:0f:a6:c9:c6:95:35:
                    83:2c:b7:d6:74:6a:59:6a:97:d1:97:eb:3e:88:71:
                    c4:b2:c5:26:ff:5c:41:a6:f3:b3:88:bf:ad:4c:fb:
                    4a:05:d0:de:52:5d:dc:bb:76:60:10:9b:e9:00:62:
                    6a:3b:de:91:f2:cf:d9:95:f6:34:af:74:3b:74:4e:
                    32:c2:b8:69:13:07:2d:5d:a3:05:85:04:25:f6:4c:
                    33:12:8f:fe:a0:25:1a:67:92:0a:99:37:f7:85:bc:
                    6e:77:db:df:3e:dc:64:f5:35:d2:5f:a7:e0:02:bd:
                    21:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:EF:CA:DF:7C:89:3C:50:89:4F:C7:C3:E2:2C:73:40:7C:94:60:B7
            X509v3 Authority Key Identifier:
                keyid:E4:BC:95:9F:28:14:C5:0C:32:B3:64:74:42:E7:A3:27:D6:94:6E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6HsUFLjPNhw58NdRHgKFqDem7ua7S24ZsmcHAEkjSVhJ/0/E4BC959F2814C50C32B3647442E7A327D6946E27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4BC959F2814C50C32B3647442E7A327D6946E27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6HsUFLjPNhw58NdRHgKFqDem7ua7S24ZsmcHAEkjSVhJ/0/323830343a383032383a3a2f33322d3334203d3e20323731373333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8028::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:f1:a3:3a:e1:e1:d8:26:ba:23:78:91:4c:6d:d3:ce:f4:99:
         18:a2:cf:bb:2f:ab:ad:71:3c:ca:40:6a:75:e4:6d:a8:27:e8:
         cf:d5:a8:fe:e6:70:86:10:49:4c:44:4e:d5:31:9c:e7:ce:72:
         58:36:62:43:e7:df:c9:06:49:80:bd:c1:12:8e:56:22:c2:71:
         f5:f8:91:e6:33:91:7f:b1:43:d0:ed:7c:41:65:6f:ce:18:fd:
         53:4f:12:73:df:37:cc:04:fe:d2:67:83:af:96:3b:5a:83:9f:
         41:0b:17:dd:10:ea:90:db:ce:42:68:b1:9a:27:61:5a:6f:48:
         25:ff:86:82:9c:15:87:de:a7:50:4a:79:79:9b:c5:a4:5a:a3:
         8c:60:07:37:b0:9c:1c:49:97:ca:05:d9:32:21:6a:8a:ec:0c:
         64:b9:46:dd:cd:73:15:44:3a:b7:bf:73:6e:35:68:e9:02:8c:
         b8:e9:73:17:82:72:9a:67:10:97:89:07:72:c5:2c:cf:5d:4b:
         8a:01:c9:de:fb:cd:d5:4a:54:f9:bb:db:04:16:44:21:41:bf:
         50:35:12:ed:e5:a9:df:3f:b3:26:4b:1f:27:62:80:0a:e3:ce:
         dc:2e:63:f9:a4:5e:6f:10:54:4c:3f:d4:0b:40:85:3f:2a:db:
         7d:98:7c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 08:23:50 2025 by rpki-client