Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7BhVYTTyNGkQ3Gd9CZP4FxfSwh2PDDyEBSwRZigHyrug/0/323830343a373634633a3a2f33322d3438203d3e20323731313032.roa
File:                     323830343a373634633a3a2f33322d3438203d3e20323731313032.roa (raw, json)
Hash identifier:          It9gMQkiFYezhL5b5FlYqfO8RlYg5XALZuD8+pyIDj4=
Subject key identifier:   C7:95:50:24:B2:DC:3B:DE:69:CD:F4:7B:AC:D1:51:9A:E2:3C:ED:C0
Certificate issuer:       /CN=1C88D461B94EF8EE43920884F50159FE4B7AA009
Certificate serial:       46F1A4F4C02ABE7B7807D3B748C3FE75C1B19998
Authority key identifier: 1C:88:D4:61:B9:4E:F8:EE:43:92:08:84:F5:01:59:FE:4B:7A:A0:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C88D461B94EF8EE43920884F50159FE4B7AA009.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7BhVYTTyNGkQ3Gd9CZP4FxfSwh2PDDyEBSwRZigHyrug/0/323830343a373634633a3a2f33322d3438203d3e20323731313032.roa
Signing time:             Tue 14 Jan 2025 18:19:17 +0000
ROA not before:           Tue 14 Jan 2025 18:14:17 +0000
ROA not after:            Tue 13 Jan 2026 18:19:17 +0000
asID:                     271102
IP address blocks:        2804:764c::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:f1:a4:f4:c0:2a:be:7b:78:07:d3:b7:48:c3:fe:75:c1:b1:99:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C88D461B94EF8EE43920884F50159FE4B7AA009
        Validity
            Not Before: Jan 14 18:14:17 2025 GMT
            Not After : Jan 13 18:19:17 2026 GMT
        Subject: CN=C7955024B2DC3BDE69CDF47BACD1519AE23CEDC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e4:d3:46:42:17:57:67:c2:57:8b:44:d6:f5:
                    6d:82:61:b3:28:a3:69:61:de:a6:0a:70:67:57:3f:
                    e4:9c:be:48:0b:61:6a:ab:44:e7:80:a9:eb:bd:b4:
                    eb:cd:92:4f:3a:b2:01:76:12:44:ed:d5:83:14:48:
                    ed:9b:db:b2:48:61:ad:15:0c:67:9e:0f:ed:8b:e6:
                    9b:82:35:87:f6:14:69:57:f4:b5:d5:c0:29:31:3c:
                    c7:65:28:cb:64:90:99:67:60:d2:c8:99:47:81:6b:
                    83:a2:6a:51:38:dc:22:56:36:f0:9c:43:be:6b:46:
                    ce:b3:9f:7d:5f:80:9a:46:7b:53:57:d5:7d:6f:d3:
                    56:ed:fe:7f:98:32:fb:14:13:1a:80:43:b7:e0:ec:
                    18:14:3b:29:42:fd:6f:b9:95:d5:58:cf:84:15:71:
                    f8:6d:b1:3b:b3:3c:d3:49:26:08:d4:83:aa:50:1a:
                    cb:12:29:33:fb:03:1f:a3:67:6f:30:d7:3d:7a:39:
                    7d:4c:77:8a:7d:cf:e6:02:73:66:cf:a8:a9:e9:40:
                    ec:e3:0d:63:65:ea:42:09:e9:91:a9:62:76:8b:64:
                    ee:f4:3d:ac:d4:db:99:7c:2c:13:87:d8:d8:59:13:
                    36:de:e9:01:e4:12:55:6b:d3:c0:92:af:42:60:a0:
                    c3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:95:50:24:B2:DC:3B:DE:69:CD:F4:7B:AC:D1:51:9A:E2:3C:ED:C0
            X509v3 Authority Key Identifier:
                keyid:1C:88:D4:61:B9:4E:F8:EE:43:92:08:84:F5:01:59:FE:4B:7A:A0:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7BhVYTTyNGkQ3Gd9CZP4FxfSwh2PDDyEBSwRZigHyrug/0/1C88D461B94EF8EE43920884F50159FE4B7AA009.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C88D461B94EF8EE43920884F50159FE4B7AA009.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7BhVYTTyNGkQ3Gd9CZP4FxfSwh2PDDyEBSwRZigHyrug/0/323830343a373634633a3a2f33322d3438203d3e20323731313032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:764c::/32

    Signature Algorithm: sha256WithRSAEncryption
         b4:48:da:3b:26:e6:66:59:40:a4:18:76:b8:0e:f7:36:43:d3:
         f6:36:c9:2b:3d:f2:08:18:62:72:50:25:89:b8:0f:c3:9e:bf:
         25:a8:36:e5:6d:92:00:50:31:06:27:de:5f:1f:68:c8:5e:74:
         25:34:bd:d9:94:d0:47:d7:b1:b0:bc:c9:c4:e2:b8:5c:b4:80:
         b9:63:7f:d6:75:7f:c5:1c:e3:97:4e:93:10:cf:7f:d5:fd:c7:
         6d:2d:5e:5e:c0:52:92:50:32:16:b8:a0:f1:9f:21:4f:13:69:
         8d:13:87:3f:5e:66:ec:7c:a6:d7:c1:ee:83:2b:b3:19:a4:b5:
         19:b5:26:78:d8:8b:97:c2:31:08:24:e0:61:5d:eb:9b:b3:fd:
         37:b9:3b:82:ac:d9:32:8b:19:f0:8d:5f:7e:27:1f:fb:a0:35:
         2b:ea:f4:97:ba:68:91:16:b8:93:2a:a4:07:c9:4f:22:4c:b9:
         a4:85:e8:50:4d:fd:e3:cd:24:55:ee:b6:85:1d:90:86:27:46:
         9b:3a:6d:3f:f5:b0:0d:bc:5b:20:20:9d:43:ba:f9:97:8d:d2:
         6a:2d:53:47:8a:b0:54:e7:72:35:02:d7:ec:50:21:18:39:22:
         80:b9:d4:00:03:f2:93:15:f2:be:0e:33:9c:be:29:2f:60:a4:
         a3:c5:3b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:19:40 2025 by rpki-client