Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/323830343a313030343a653030303a3a2f33352d3335203d3e20323633363134.roa
File:                     323830343a313030343a653030303a3a2f33352d3335203d3e20323633363134.roa (raw, json)
Hash identifier:          SDXkcguYXhGUiHAFDMwS7GEaQUs4ssOnCvav3BdxVjo=
Subject key identifier:   EB:81:28:B0:F2:85:B2:76:77:80:78:E8:00:99:BB:E2:50:C8:96:3D
Certificate issuer:       /CN=0C4C2F81C99B5D1FE7D42B7598E302474D31C83B
Certificate serial:       07D19C911B5218261F627546E59B49214DA776FF
Authority key identifier: 0C:4C:2F:81:C9:9B:5D:1F:E7:D4:2B:75:98:E3:02:47:4D:31:C8:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C4C2F81C99B5D1FE7D42B7598E302474D31C83B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/323830343a313030343a653030303a3a2f33352d3335203d3e20323633363134.roa
Signing time:             Fri 09 Feb 2024 17:19:01 +0000
ROA not before:           Fri 09 Feb 2024 17:14:01 +0000
ROA not after:            Fri 07 Feb 2025 17:19:01 +0000
asID:                     263614
IP address blocks:        2804:1004:e000::/35 maxlen: 35
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:d1:9c:91:1b:52:18:26:1f:62:75:46:e5:9b:49:21:4d:a7:76:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C4C2F81C99B5D1FE7D42B7598E302474D31C83B
        Validity
            Not Before: Feb  9 17:14:01 2024 GMT
            Not After : Feb  7 17:19:01 2025 GMT
        Subject: CN=EB8128B0F285B276778078E80099BBE250C8963D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b6:ad:98:d2:f8:c9:d4:de:62:f9:e4:63:d8:
                    24:59:fa:33:8f:c1:d4:a5:96:58:99:44:c9:60:d5:
                    b2:bc:d2:b8:b8:2b:1f:65:76:ee:0d:bd:7c:7a:e2:
                    f2:07:4b:ff:58:a2:6e:39:ec:3e:df:a3:32:3d:e7:
                    b7:79:86:44:be:10:6a:86:8c:0b:58:82:73:d7:dc:
                    27:84:6d:21:68:13:b8:c6:b9:15:da:96:f2:8a:ca:
                    18:48:e9:f2:90:30:fe:31:19:a1:55:3a:ab:81:db:
                    77:49:94:d1:81:72:16:25:ad:49:1b:27:00:94:22:
                    2e:49:2e:de:dd:76:2d:28:91:62:ce:fe:5a:c1:d7:
                    38:83:02:83:76:cc:93:4c:cc:07:44:40:0b:21:16:
                    a9:ff:b4:0f:8e:30:ab:f6:31:4e:49:ff:d8:13:dc:
                    6c:73:1e:c5:ad:6a:83:48:e7:77:38:64:09:b1:b0:
                    56:98:25:32:7b:ac:a9:d1:47:0f:7e:04:62:8d:8d:
                    f0:7f:d0:d6:e5:72:a0:05:1e:62:63:7c:96:11:27:
                    3d:91:91:9b:54:78:84:71:b2:33:fa:4e:28:57:db:
                    6f:e9:64:68:04:ee:8d:ad:95:56:ae:7f:0b:5b:4a:
                    48:88:65:d4:97:6f:ad:d8:2e:a8:59:8c:f4:67:5a:
                    a3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:81:28:B0:F2:85:B2:76:77:80:78:E8:00:99:BB:E2:50:C8:96:3D
            X509v3 Authority Key Identifier:
                keyid:0C:4C:2F:81:C9:9B:5D:1F:E7:D4:2B:75:98:E3:02:47:4D:31:C8:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/0C4C2F81C99B5D1FE7D42B7598E302474D31C83B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C4C2F81C99B5D1FE7D42B7598E302474D31C83B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/323830343a313030343a653030303a3a2f33352d3335203d3e20323633363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1004:e000::/35

    Signature Algorithm: sha256WithRSAEncryption
         1a:d0:46:30:6c:0e:12:e2:68:10:3d:93:1a:3e:9a:fe:0f:8e:
         d2:43:ea:6d:97:92:69:df:ac:db:3f:e0:70:dd:77:b8:c9:e0:
         a2:5b:7c:11:4d:2b:e5:da:1a:5c:c5:46:fd:6a:42:1f:27:96:
         3a:97:ea:d6:d4:72:31:6d:8c:0a:3d:cc:f2:7f:b2:85:ea:86:
         e4:3f:93:fe:8e:d6:19:2f:3f:77:92:91:4a:a0:fd:88:b2:9f:
         75:9b:b6:5e:6c:22:f5:03:71:47:bb:79:63:ab:28:6d:22:6f:
         a9:7a:de:56:90:d4:4c:4a:eb:7c:bb:01:75:9d:1e:a2:b8:87:
         cb:45:b3:f6:59:05:97:06:d4:14:ae:5d:db:52:e0:a2:05:d6:
         3b:de:e1:c9:fe:17:37:3c:50:a5:ef:3a:c7:01:cc:2a:4c:44:
         c1:c5:61:98:4e:de:97:3d:2a:3a:8c:33:ec:3f:5a:20:91:25:
         34:7d:f4:47:2c:7b:40:f2:da:05:e5:e3:79:4c:75:29:d1:e1:
         b8:d6:ae:9c:87:20:26:17:10:c4:d9:ea:a7:a0:4e:d8:c5:ec:
         7b:e5:46:1a:91:de:23:c7:63:f4:f4:ac:aa:88:cd:55:76:5e:
         4d:32:7e:11:bb:1f:86:5f:91:9e:9d:03:01:af:c0:c8:fd:53:
         81:3f:18:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:47:23 2025 by rpki-client