Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/716UF5rQjRhvd29jPs1HtdFNrwjVdAEdSCZoSD6ciimZ/0/323830343a366264383a3a2f33322d3438203d3e20323730343239.roa
File:                     323830343a366264383a3a2f33322d3438203d3e20323730343239.roa (raw, json)
Hash identifier:          UYP4+hNA0WBXVXrVuhUUrjdz3teyo8yM+4PeIemV5o4=
Subject key identifier:   18:61:F2:09:26:5E:29:8D:20:D8:46:1A:18:AB:A1:63:A9:23:B9:31
Certificate issuer:       /CN=7EC0B807856399E82A913F6CC7DF0DF3D2A170CB
Certificate serial:       123A5657CFA0A496767D0CE572C4A5BC5D4F8358
Authority key identifier: 7E:C0:B8:07:85:63:99:E8:2A:91:3F:6C:C7:DF:0D:F3:D2:A1:70:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EC0B807856399E82A913F6CC7DF0DF3D2A170CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/716UF5rQjRhvd29jPs1HtdFNrwjVdAEdSCZoSD6ciimZ/0/323830343a366264383a3a2f33322d3438203d3e20323730343239.roa
Signing time:             Wed 15 Jan 2025 14:02:21 +0000
ROA not before:           Wed 15 Jan 2025 13:57:21 +0000
ROA not after:            Wed 14 Jan 2026 14:02:21 +0000
asID:                     270429
IP address blocks:        2804:6bd8::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:3a:56:57:cf:a0:a4:96:76:7d:0c:e5:72:c4:a5:bc:5d:4f:83:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EC0B807856399E82A913F6CC7DF0DF3D2A170CB
        Validity
            Not Before: Jan 15 13:57:21 2025 GMT
            Not After : Jan 14 14:02:21 2026 GMT
        Subject: CN=1861F209265E298D20D8461A18ABA163A923B931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a4:34:7b:fa:a6:2e:0a:04:88:2c:94:53:dd:
                    65:02:1f:d0:f6:c8:f7:fb:98:ac:43:a1:35:7c:d5:
                    9f:ef:54:12:04:9b:3d:26:18:93:15:ad:1a:a0:e5:
                    b7:ce:bc:d1:c3:33:7a:ac:87:47:d1:2d:63:17:92:
                    be:25:91:47:e7:c0:a7:af:17:33:76:e2:fc:36:29:
                    b3:d3:d8:01:81:12:01:2a:c4:9f:38:74:9b:e8:b7:
                    b1:2c:3c:0d:8d:49:44:88:95:09:78:0f:75:c2:7e:
                    56:30:7c:73:bc:34:a8:73:fb:d8:ea:bd:a4:29:8e:
                    df:c2:c8:1a:3e:0b:2a:0f:4d:14:23:15:58:65:12:
                    31:48:ed:62:94:b8:ca:89:cf:8c:58:c8:b7:f0:67:
                    83:cf:e2:32:a8:b1:37:0f:f7:4a:31:62:90:e4:a6:
                    fa:3c:8f:61:7c:4a:0f:a3:c8:0d:27:ca:56:ed:0a:
                    c9:d8:e1:68:41:d3:71:9a:4d:b2:dc:02:34:4f:ed:
                    60:89:52:9c:2d:d5:fd:55:ab:4a:11:fb:65:09:79:
                    4b:79:e1:9e:54:5c:3f:15:ea:9a:8b:a2:10:d6:8b:
                    bf:de:b0:d5:3c:01:2f:32:d7:44:59:b0:f5:fe:a3:
                    91:7e:57:87:31:bd:3c:d0:d1:3e:48:b4:2c:1b:78:
                    ef:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:61:F2:09:26:5E:29:8D:20:D8:46:1A:18:AB:A1:63:A9:23:B9:31
            X509v3 Authority Key Identifier:
                keyid:7E:C0:B8:07:85:63:99:E8:2A:91:3F:6C:C7:DF:0D:F3:D2:A1:70:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/716UF5rQjRhvd29jPs1HtdFNrwjVdAEdSCZoSD6ciimZ/0/7EC0B807856399E82A913F6CC7DF0DF3D2A170CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EC0B807856399E82A913F6CC7DF0DF3D2A170CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/716UF5rQjRhvd29jPs1HtdFNrwjVdAEdSCZoSD6ciimZ/0/323830343a366264383a3a2f33322d3438203d3e20323730343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6bd8::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:e0:ef:e0:da:23:cb:9b:ee:a0:34:b5:e5:c5:1f:95:f7:6b:
         d1:85:3b:d3:12:aa:77:f8:6c:8e:f5:6e:f8:3a:a8:ec:db:90:
         79:bc:d1:d1:2c:af:72:54:ce:93:00:73:e7:9e:9b:33:8f:be:
         3a:b1:b6:b8:06:1a:47:36:55:b6:2b:21:87:d2:46:c0:fc:82:
         b6:ac:8e:54:48:c5:d8:5f:fe:d8:a4:3e:38:44:19:b5:1b:b8:
         69:4c:16:89:7b:74:c6:0f:12:af:b4:6c:a5:62:9b:6a:f5:88:
         21:25:da:5a:2e:7b:2b:c6:39:9c:de:a0:62:05:b9:c1:28:e8:
         fc:7c:23:ee:b4:e0:0a:97:4a:e3:d9:89:61:f6:9f:4b:24:73:
         9d:cd:50:1d:88:4d:f5:d3:8d:79:4f:6e:f4:e4:51:84:52:31:
         d0:41:dc:0c:48:ec:e3:99:f4:24:4b:3d:f2:2d:14:dd:16:28:
         7d:c1:4d:0f:42:be:66:13:f9:19:4c:7d:09:8f:9f:0a:29:f6:
         3e:26:c9:e8:43:72:82:ae:55:38:26:c1:1c:6a:92:51:50:31:
         b3:95:7d:cd:f8:3f:12:81:d9:54:b2:33:0b:ce:e0:3d:1c:75:
         bb:57:f5:56:16:64:5b:06:2f:01:98:78:b0:4e:03:6f:42:ee:
         94:df:1b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:14:16 2025 by rpki-client