Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/323830343a313030343a613030303a3a2f33352d3335203d3e20323633363134.roa
File:                     323830343a313030343a613030303a3a2f33352d3335203d3e20323633363134.roa (raw, json)
Hash identifier:          alYV2RFPK95ss8hFzRSlvL1/XoNz26Jma1rJ60DqUhc=
Subject key identifier:   24:2B:B6:E3:E8:88:6D:12:1D:8B:EF:5D:15:2D:44:60:9E:15:04:7F
Certificate issuer:       /CN=0C4C2F81C99B5D1FE7D42B7598E302474D31C83B
Certificate serial:       50B5F0D53F618A75990DD74D33BBCC32B8CABF09
Authority key identifier: 0C:4C:2F:81:C9:9B:5D:1F:E7:D4:2B:75:98:E3:02:47:4D:31:C8:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C4C2F81C99B5D1FE7D42B7598E302474D31C83B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/323830343a313030343a613030303a3a2f33352d3335203d3e20323633363134.roa
Signing time:             Fri 09 Feb 2024 17:18:59 +0000
ROA not before:           Fri 09 Feb 2024 17:13:59 +0000
ROA not after:            Fri 07 Feb 2025 17:18:59 +0000
asID:                     263614
IP address blocks:        2804:1004:a000::/35 maxlen: 35
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:b5:f0:d5:3f:61:8a:75:99:0d:d7:4d:33:bb:cc:32:b8:ca:bf:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C4C2F81C99B5D1FE7D42B7598E302474D31C83B
        Validity
            Not Before: Feb  9 17:13:59 2024 GMT
            Not After : Feb  7 17:18:59 2025 GMT
        Subject: CN=242BB6E3E8886D121D8BEF5D152D44609E15047F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b3:bb:16:ce:24:80:6e:3f:11:b7:8d:11:e0:
                    18:e6:a6:71:d5:97:c1:3e:f4:8c:21:a2:82:30:56:
                    21:31:b9:22:7d:36:32:06:e2:65:50:c6:8a:4c:b6:
                    3b:1e:b0:63:c7:97:18:0a:78:16:d7:79:6c:a3:7f:
                    f5:99:d3:05:80:50:7b:58:c9:a2:50:2f:f2:c6:fc:
                    ac:43:75:34:47:49:13:7b:57:94:23:6d:f9:33:81:
                    59:2c:df:28:ef:31:03:27:40:7c:75:0e:a8:67:47:
                    ea:87:28:45:a9:3f:6a:f5:06:05:71:4e:cd:1f:5b:
                    50:47:17:ee:b3:7f:f0:fa:aa:e7:c4:7b:39:b9:93:
                    c7:ed:2a:3a:f3:94:e3:9b:54:8d:8a:3a:20:45:24:
                    31:be:d1:08:3e:21:5b:cf:e9:4d:49:16:88:84:ed:
                    c4:cd:94:d8:69:75:6d:0c:0e:40:52:2b:9d:fa:5d:
                    50:70:e0:66:04:98:5e:6b:ec:bb:2a:24:b5:f9:a9:
                    f3:f8:e9:dd:d3:bb:e2:91:30:e2:32:e9:e0:f6:d8:
                    75:81:26:8f:b0:54:ef:f1:93:77:40:c0:67:a3:cd:
                    7c:ab:7e:fe:b6:a6:2c:c3:55:97:43:df:bf:72:2c:
                    da:d0:e1:f8:54:6c:6a:90:e1:a6:55:11:97:54:21:
                    0e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:2B:B6:E3:E8:88:6D:12:1D:8B:EF:5D:15:2D:44:60:9E:15:04:7F
            X509v3 Authority Key Identifier:
                keyid:0C:4C:2F:81:C9:9B:5D:1F:E7:D4:2B:75:98:E3:02:47:4D:31:C8:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/0C4C2F81C99B5D1FE7D42B7598E302474D31C83B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C4C2F81C99B5D1FE7D42B7598E302474D31C83B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/323830343a313030343a613030303a3a2f33352d3335203d3e20323633363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1004:a000::/35

    Signature Algorithm: sha256WithRSAEncryption
         74:4a:77:12:a2:94:ca:4d:a9:f3:11:d4:56:d6:4f:58:b6:00:
         79:f3:9c:9c:3f:6f:0f:a5:37:73:0f:38:6d:3c:92:29:02:da:
         79:e3:36:42:72:51:78:da:08:9a:09:32:86:a9:57:98:7f:21:
         36:9e:70:65:f1:fd:c6:41:33:b8:56:35:66:4e:88:ee:9a:fa:
         50:91:72:7d:0d:21:07:3d:73:1c:8f:57:de:d7:c0:db:1d:a1:
         62:34:c4:a3:88:c0:d7:bf:5c:72:cb:c2:0b:fe:e2:cb:03:a3:
         02:95:89:d5:be:4c:18:6f:3f:b8:a1:b1:40:13:e1:4c:3a:09:
         04:1f:b5:7c:7c:44:c4:93:e8:29:42:91:51:9f:ce:c5:23:66:
         50:6f:b0:bd:31:3c:be:b3:b1:f0:0b:f1:9d:1a:c0:f5:2d:7b:
         90:d9:48:20:43:99:6c:5a:58:37:6e:c2:29:b5:44:94:60:44:
         28:b1:a6:64:60:7c:3c:18:98:da:2e:11:93:ca:8f:de:4c:2c:
         bf:fd:ab:a4:b6:fd:9c:08:c8:d2:83:4e:75:b4:fa:95:01:ca:
         95:d6:5a:aa:37:91:8b:4f:ae:44:42:12:9d:f3:fd:4b:e2:3c:
         28:1c:db:6c:b0:83:f4:5d:0b:ea:e7:b1:da:15:77:44:45:eb:
         51:f2:fb:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:03:52 2025 by rpki-client