Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/0/323830343a343064303a3a2f33322d313238203d3e20323635393833.roa
File:                     323830343a343064303a3a2f33322d313238203d3e20323635393833.roa (raw, json)
Hash identifier:          R1UWfGyplZbRSpwENRa59DlIDm3+NRIBf81NH3XRHH4=
Subject key identifier:   1A:2A:B0:EC:34:C0:91:4E:51:5C:72:4D:D6:61:CB:8E:B9:74:3A:24
Certificate issuer:       /CN=3E11375D9F3A525073B73C31D1BB896B20915FCC
Certificate serial:       2B636D9D0E534E161AF524B6D86E53D7C3CE7B3C
Authority key identifier: 3E:11:37:5D:9F:3A:52:50:73:B7:3C:31:D1:BB:89:6B:20:91:5F:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E11375D9F3A525073B73C31D1BB896B20915FCC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/0/323830343a343064303a3a2f33322d313238203d3e20323635393833.roa
Signing time:             Thu 05 Dec 2024 18:54:39 +0000
ROA not before:           Thu 05 Dec 2024 18:49:39 +0000
ROA not after:            Thu 04 Dec 2025 18:54:39 +0000
asID:                     265983
IP address blocks:        2804:40d0::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:63:6d:9d:0e:53:4e:16:1a:f5:24:b6:d8:6e:53:d7:c3:ce:7b:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E11375D9F3A525073B73C31D1BB896B20915FCC
        Validity
            Not Before: Dec  5 18:49:39 2024 GMT
            Not After : Dec  4 18:54:39 2025 GMT
        Subject: CN=1A2AB0EC34C0914E515C724DD661CB8EB9743A24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:67:46:1a:7c:6c:f3:06:96:dd:d2:20:0e:92:
                    40:d8:ab:c6:38:02:b2:4e:6e:8f:af:39:40:bf:fc:
                    20:13:0d:a4:b7:f7:57:9b:2f:11:fa:60:52:e2:3f:
                    65:e4:e0:42:3c:79:70:7a:d0:46:f9:f8:0e:49:a4:
                    d6:86:7f:29:b9:20:96:67:73:c7:f5:1a:44:6e:f2:
                    7a:b8:6a:01:25:0d:cb:c5:7e:1b:27:84:72:14:93:
                    52:11:8c:d3:7c:27:fd:77:fa:54:cf:92:b9:ca:1a:
                    17:e9:79:58:fb:2b:9a:c7:68:aa:9b:b0:09:56:c6:
                    9a:89:fb:2c:f9:62:91:09:bf:bd:31:03:f6:b9:b1:
                    22:a2:dc:6b:1f:f4:79:1b:37:f8:ac:63:72:91:5f:
                    66:da:c8:c8:c6:4e:e7:74:9d:a8:a1:35:53:2f:5c:
                    62:a7:86:3b:d9:11:1b:67:2e:8a:a9:df:62:1f:6a:
                    63:84:3a:e5:f6:4a:da:03:da:73:9a:d2:c0:8d:6e:
                    b9:92:02:59:95:b9:73:69:bf:da:79:01:1e:20:0c:
                    a2:94:60:a0:96:c5:0c:5c:19:05:d6:75:e0:75:0c:
                    b3:ce:c4:2a:17:01:85:78:6a:ff:a3:bc:f2:7e:ab:
                    26:bb:0b:16:8c:ca:c9:c5:f9:bb:11:d1:e3:10:5c:
                    25:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:2A:B0:EC:34:C0:91:4E:51:5C:72:4D:D6:61:CB:8E:B9:74:3A:24
            X509v3 Authority Key Identifier:
                keyid:3E:11:37:5D:9F:3A:52:50:73:B7:3C:31:D1:BB:89:6B:20:91:5F:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/0/3E11375D9F3A525073B73C31D1BB896B20915FCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E11375D9F3A525073B73C31D1BB896B20915FCC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/0/323830343a343064303a3a2f33322d313238203d3e20323635393833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:40d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:78:b3:8f:75:2a:8f:c7:47:2e:20:e5:b0:dd:d8:16:8f:22:
         0a:58:ff:b8:1a:a0:9f:f3:0b:a7:37:70:41:c5:16:aa:cf:01:
         33:8d:57:82:1b:d3:ce:c0:71:b5:e9:0f:c7:e4:8b:e1:93:75:
         a7:e5:86:9b:e7:8d:f9:c1:21:a5:f3:9e:34:8c:15:61:f9:81:
         49:57:a7:cc:59:66:fc:e6:d1:de:8e:74:1b:0f:d9:b0:b6:0d:
         26:89:cd:c7:5b:49:f1:f2:55:e2:15:59:20:b7:6a:d8:60:19:
         2f:03:30:8f:52:e2:ac:d1:fd:ca:e6:83:73:c7:b7:aa:97:f6:
         d4:38:5d:ac:c8:a9:73:29:2d:47:fb:bd:84:d9:70:5b:35:74:
         4c:2e:07:8e:db:4b:7b:18:d1:6f:70:6c:d3:7f:e5:3e:90:b6:
         80:92:12:5b:e5:a0:e4:2a:9b:8b:02:8e:05:c4:a1:04:78:77:
         08:54:6b:54:76:cf:07:e2:9d:c7:89:48:f8:12:70:5a:63:22:
         dd:a6:47:0f:bc:51:2d:d2:ff:0f:de:63:52:58:ff:24:10:48:
         ec:7c:c0:d5:e6:e8:bb:7f:4a:25:05:54:09:63:fa:3a:d9:09:
         f7:1d:0d:cd:bc:d0:42:6e:ab:82:5d:88:c1:d0:22:ed:21:e9:
         51:e2:23:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:14:21 2025 by rpki-client