Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/323830343a323463343a3a2f33322d313238203d3e20323634323431.roa
File:                     323830343a323463343a3a2f33322d313238203d3e20323634323431.roa (raw, json)
Hash identifier:          X7L6S/iz47JYN92bJbRqOMlahKYPpbV1cDTZ4ZDuE78=
Subject key identifier:   B6:82:32:86:D5:F2:BC:4C:7C:DF:B2:6D:0C:20:14:8E:A1:A5:0C:53
Certificate issuer:       /CN=E658FE87DF0EC05FB5A0C9011B6372F3B3FBFA26
Certificate serial:       6423300CC2A047C352791E666185CAE3F7921363
Authority key identifier: E6:58:FE:87:DF:0E:C0:5F:B5:A0:C9:01:1B:63:72:F3:B3:FB:FA:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E658FE87DF0EC05FB5A0C9011B6372F3B3FBFA26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/323830343a323463343a3a2f33322d313238203d3e20323634323431.roa
Signing time:             Tue 28 Jan 2025 13:48:50 +0000
ROA not before:           Tue 28 Jan 2025 13:43:50 +0000
ROA not after:            Tue 27 Jan 2026 13:48:50 +0000
asID:                     264241
IP address blocks:        2804:24c4::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:23:30:0c:c2:a0:47:c3:52:79:1e:66:61:85:ca:e3:f7:92:13:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E658FE87DF0EC05FB5A0C9011B6372F3B3FBFA26
        Validity
            Not Before: Jan 28 13:43:50 2025 GMT
            Not After : Jan 27 13:48:50 2026 GMT
        Subject: CN=B6823286D5F2BC4C7CDFB26D0C20148EA1A50C53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:60:be:a1:0d:66:a2:45:84:e3:74:26:55:0a:
                    44:8a:75:90:5b:7c:2e:71:c2:d5:f2:63:02:81:0d:
                    00:10:27:43:5f:71:42:3b:af:38:8e:ca:1b:a8:9e:
                    65:41:0b:30:ae:19:78:c3:dc:44:a5:1e:9a:56:d2:
                    1d:72:6e:21:bd:1a:0a:ef:e2:b7:81:a6:20:58:a8:
                    ac:68:00:2b:27:68:4d:0f:7e:4d:6b:b5:da:1c:4b:
                    5f:71:dd:5b:c5:ff:d4:e4:61:df:8a:ae:ed:6e:76:
                    5f:5d:5a:71:3e:1c:db:88:59:a8:86:cd:4f:89:a5:
                    e4:52:bc:7f:b0:59:05:c4:6d:45:e5:5d:f8:d3:a4:
                    0b:8f:32:ae:e4:56:fa:e9:09:4a:1e:07:70:fc:f2:
                    71:42:ea:81:69:5f:31:f8:4f:69:c2:93:e5:22:d4:
                    f7:d3:05:04:7d:06:9e:aa:1f:0d:e6:15:7f:17:10:
                    a1:db:85:54:d2:cf:e9:73:1a:81:64:df:87:3e:5a:
                    8b:7f:58:f8:b5:ab:6f:b9:3b:5e:49:4b:28:cd:f2:
                    c3:21:ae:d4:de:aa:e7:1f:73:01:f2:03:db:8b:6f:
                    a2:6f:75:c6:46:e4:f3:95:ba:b9:6b:41:2f:9f:e6:
                    f0:9b:df:93:0b:7e:12:fa:68:ce:98:ed:7d:f3:96:
                    88:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:82:32:86:D5:F2:BC:4C:7C:DF:B2:6D:0C:20:14:8E:A1:A5:0C:53
            X509v3 Authority Key Identifier:
                keyid:E6:58:FE:87:DF:0E:C0:5F:B5:A0:C9:01:1B:63:72:F3:B3:FB:FA:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/E658FE87DF0EC05FB5A0C9011B6372F3B3FBFA26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E658FE87DF0EC05FB5A0C9011B6372F3B3FBFA26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/323830343a323463343a3a2f33322d313238203d3e20323634323431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:24c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         c6:d7:7e:e0:dd:38:9c:80:0a:f6:0c:41:30:0a:55:c0:c4:2b:
         31:df:85:f4:a9:65:fa:e7:41:2e:fa:29:13:0c:e5:ca:c0:b0:
         4e:90:20:85:b9:5f:ab:e8:f6:83:0f:bf:9c:7d:42:c9:d6:20:
         a0:c7:7b:c9:17:a1:5d:84:e3:27:58:73:fd:6e:25:65:c7:60:
         c0:8f:55:a9:05:48:59:c8:e9:a3:b2:e9:df:b4:52:87:b0:51:
         ee:f2:b6:72:fc:e2:a2:69:33:df:94:ca:42:f7:c7:b5:a9:7d:
         58:34:d4:ac:26:ca:4a:6e:59:86:fd:80:2f:8b:06:97:12:97:
         66:18:7d:ed:ab:5d:46:0a:63:2e:21:01:31:f6:44:c3:1d:0b:
         ed:00:1c:24:c7:b6:89:c3:4c:9e:3a:ae:db:4a:0d:6e:cf:ed:
         3c:0e:f5:91:60:d0:b0:78:05:76:71:3d:21:c3:c8:e1:e4:2d:
         45:c5:2e:29:2a:ea:f1:3a:e9:dd:f8:6b:94:be:04:d3:19:b7:
         f1:72:2f:97:1b:dd:80:9d:f7:d6:35:46:1f:73:2f:4a:1d:74:
         ff:3a:a8:65:75:e4:9b:17:c4:17:6b:f6:5a:de:7f:30:bb:13:
         14:ac:7c:12:20:49:cc:b5:eb:5f:e0:34:5b:00:a8:fe:8d:22:
         f2:20:6f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:40:33 2025 by rpki-client