Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6nHPBjUmP2kHicLoC3JN7jti3cW47X7bYaXdVEkiVnwh/0/323830343a363432383a3a2f33322d313238203d3e20323639343130.roa
File:                     323830343a363432383a3a2f33322d313238203d3e20323639343130.roa (raw, json)
Hash identifier:          rHYydIvFkjDOyZ1H5jB7J1OUm0sD9CUYuErsnjviAgM=
Subject key identifier:   8D:D3:08:60:C9:CC:A2:90:50:0E:76:42:AF:23:7C:4B:D5:10:89:E0
Certificate issuer:       /CN=EED473537DEB3209C2A2A780B900F78F3D1B267E
Certificate serial:       73171CBE7F66D72E96A059B61C2C4824C3A6FC74
Authority key identifier: EE:D4:73:53:7D:EB:32:09:C2:A2:A7:80:B9:00:F7:8F:3D:1B:26:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EED473537DEB3209C2A2A780B900F78F3D1B267E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6nHPBjUmP2kHicLoC3JN7jti3cW47X7bYaXdVEkiVnwh/0/323830343a363432383a3a2f33322d313238203d3e20323639343130.roa
Signing time:             Wed 27 Mar 2024 18:36:53 +0000
ROA not before:           Wed 27 Mar 2024 18:31:53 +0000
ROA not after:            Wed 26 Mar 2025 18:36:53 +0000
asID:                     269410
IP address blocks:        2804:6428::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:17:1c:be:7f:66:d7:2e:96:a0:59:b6:1c:2c:48:24:c3:a6:fc:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EED473537DEB3209C2A2A780B900F78F3D1B267E
        Validity
            Not Before: Mar 27 18:31:53 2024 GMT
            Not After : Mar 26 18:36:53 2025 GMT
        Subject: CN=8DD30860C9CCA290500E7642AF237C4BD51089E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:48:39:d6:f2:07:30:db:78:23:a3:86:60:47:
                    d6:2e:eb:b5:72:4a:fa:78:6b:dd:80:05:b7:b8:4a:
                    2f:17:9b:d3:8e:11:98:43:b8:3b:0e:c3:d6:d2:8d:
                    d9:14:d6:a3:f2:5f:0f:47:64:97:dd:a2:62:2b:47:
                    89:9c:13:69:20:2e:80:08:42:52:6f:72:df:28:06:
                    99:60:0e:6c:b3:eb:15:8d:f8:a6:b2:9e:0c:54:69:
                    cb:cb:55:26:f6:30:de:d1:4b:54:96:3d:f0:ea:71:
                    58:a7:67:bc:af:50:e8:92:0c:a7:55:5d:59:7c:53:
                    39:d3:99:48:3f:7e:bc:b4:1b:fc:e1:7f:32:74:ac:
                    00:8f:29:ca:57:c6:20:9e:c8:ee:a3:53:a9:7e:14:
                    89:7c:8e:0b:72:52:4b:4f:9d:a0:e1:08:8d:12:77:
                    ad:11:01:5b:cc:a4:b9:36:ef:24:8a:5a:11:01:72:
                    15:f7:c6:8a:07:65:d5:4c:af:04:d5:28:f8:ae:6f:
                    6d:8c:27:4b:de:69:26:b4:f3:84:0e:b7:06:73:eb:
                    65:03:55:65:43:30:89:ad:26:19:1f:c3:a3:e6:87:
                    a9:3d:95:ba:e7:8b:7b:3a:d4:04:cf:a5:da:7c:16:
                    d4:09:34:5d:91:42:7a:a8:ea:7c:00:02:4e:ed:ea:
                    aa:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:D3:08:60:C9:CC:A2:90:50:0E:76:42:AF:23:7C:4B:D5:10:89:E0
            X509v3 Authority Key Identifier:
                keyid:EE:D4:73:53:7D:EB:32:09:C2:A2:A7:80:B9:00:F7:8F:3D:1B:26:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6nHPBjUmP2kHicLoC3JN7jti3cW47X7bYaXdVEkiVnwh/0/EED473537DEB3209C2A2A780B900F78F3D1B267E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EED473537DEB3209C2A2A780B900F78F3D1B267E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6nHPBjUmP2kHicLoC3JN7jti3cW47X7bYaXdVEkiVnwh/0/323830343a363432383a3a2f33322d313238203d3e20323639343130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6428::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:d0:13:b3:7f:1e:43:2c:a2:b6:68:29:dc:28:a8:d9:dd:2d:
         00:9a:98:ff:37:76:fa:68:a3:55:78:3a:39:31:42:e5:fb:42:
         98:25:6c:b2:c1:c7:79:ca:74:23:ab:a3:f2:de:01:41:e0:36:
         ed:d5:a1:d7:a1:28:84:d6:94:3a:2f:b9:e4:5a:0b:a4:b4:19:
         a6:0b:12:a5:63:ad:9a:b5:4b:67:24:b6:6c:00:a1:22:f0:1d:
         c3:bf:77:c4:64:39:88:d2:95:58:d9:9d:3a:0a:8c:fa:59:8d:
         a5:3a:c9:97:d4:87:2f:7e:71:24:2b:bc:8d:71:9a:fb:f6:5b:
         f8:3d:36:1a:be:18:5f:1a:30:a3:48:28:ef:18:25:a9:e7:cf:
         e8:50:7b:0d:41:00:21:1f:68:99:a8:55:93:8e:43:43:fc:7a:
         b8:34:16:18:cc:e1:69:03:c7:e9:5f:84:97:9d:4d:0d:33:30:
         09:8b:7e:8d:bb:06:eb:4d:35:3b:d6:81:8f:ad:6c:0d:9a:ad:
         ff:6a:59:ad:77:21:6f:79:d9:2e:f5:9e:2f:cc:de:9b:75:d1:
         d1:77:3c:e2:32:ca:74:e2:b2:56:bf:1a:de:4b:ba:c5:17:dc:
         11:d2:ad:64:cb:3a:e2:0d:41:d6:91:57:53:3a:92:5f:eb:de:
         53:80:41:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:41 2025 by rpki-client