Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/1/323830343a346263383a313830303a3a2f34302d3430203d3e20323637333239.roa
File:                     323830343a346263383a313830303a3a2f34302d3430203d3e20323637333239.roa (raw, json)
Hash identifier:          PQLtmREPgD0p5ijQwb/gWee6FfUaVmyzEiP6jd7ZlUA=
Subject key identifier:   50:F9:3F:64:1E:21:D5:0B:8E:CB:99:57:8F:45:A9:9F:82:09:30:47
Certificate issuer:       /CN=8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062
Certificate serial:       6F1E6B5BB276D79417CFC4874C4408A4F1E3E593
Authority key identifier: 8B:C9:F7:AD:42:F2:2B:9F:05:99:DE:DE:F7:DF:60:71:8D:CE:10:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/1/323830343a346263383a313830303a3a2f34302d3430203d3e20323637333239.roa
Signing time:             Thu 06 Mar 2025 04:33:10 +0000
ROA not before:           Thu 06 Mar 2025 04:28:10 +0000
ROA not after:            Thu 05 Mar 2026 04:33:10 +0000
asID:                     267329
IP address blocks:        2804:4bc8:1800::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:1e:6b:5b:b2:76:d7:94:17:cf:c4:87:4c:44:08:a4:f1:e3:e5:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062
        Validity
            Not Before: Mar  6 04:28:10 2025 GMT
            Not After : Mar  5 04:33:10 2026 GMT
        Subject: CN=50F93F641E21D50B8ECB99578F45A99F82093047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:49:51:3d:e5:20:c3:78:1c:3e:4a:b5:c9:e8:
                    f3:30:1e:c9:c3:58:39:b0:1b:ea:a0:4a:b7:d0:c8:
                    cb:17:09:e6:f4:51:21:41:b6:98:5f:7e:5c:5c:90:
                    1f:5f:f8:10:51:13:05:be:6c:75:99:99:73:ef:b0:
                    50:e1:ea:06:05:9e:41:07:6b:75:f1:dc:a9:96:79:
                    be:2c:2a:5d:8f:0b:3c:29:39:dc:6c:94:e0:da:6d:
                    7a:6e:41:43:72:3b:06:01:db:37:27:65:bb:67:cb:
                    04:c6:3b:d0:45:58:36:61:6c:2f:bb:e4:ac:43:c5:
                    65:8b:8d:36:71:68:8e:69:b8:54:a7:3f:e4:61:0e:
                    68:26:00:1c:3d:e4:32:06:e5:4f:46:c5:74:e4:2a:
                    a4:f7:0a:58:16:e8:c3:8f:c9:7d:bc:13:95:50:be:
                    5f:a9:2d:10:82:3a:32:48:9e:40:e2:5d:e3:48:79:
                    b9:c8:00:79:92:ed:4d:05:aa:47:cf:ac:04:72:02:
                    5c:0e:61:49:53:cb:ac:9c:a3:7a:7c:76:14:08:47:
                    0f:f4:ce:4e:38:70:ca:85:db:8e:58:20:84:d1:a7:
                    bc:04:a8:62:ca:d2:7c:99:7e:de:d3:34:7b:d0:92:
                    70:02:93:31:90:9b:41:e1:ce:cb:6e:73:d4:db:28:
                    0c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:F9:3F:64:1E:21:D5:0B:8E:CB:99:57:8F:45:A9:9F:82:09:30:47
            X509v3 Authority Key Identifier:
                keyid:8B:C9:F7:AD:42:F2:2B:9F:05:99:DE:DE:F7:DF:60:71:8D:CE:10:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/1/8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/1/323830343a346263383a313830303a3a2f34302d3430203d3e20323637333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4bc8:1800::/40

    Signature Algorithm: sha256WithRSAEncryption
         1f:8c:83:c7:e7:6f:0f:29:f1:81:29:47:2b:08:e7:13:4a:4a:
         71:01:40:13:4f:96:cf:fe:68:79:3c:f1:00:f7:d1:ff:84:09:
         f2:cf:47:85:1a:7b:c8:a0:7b:4d:70:e7:26:d6:76:d0:34:9e:
         30:e6:af:c0:58:20:25:04:1b:77:69:56:cb:e1:14:86:5b:ca:
         82:69:e3:1a:08:6e:ae:3f:99:be:0f:02:78:f5:d0:ad:e9:63:
         6b:6b:50:b8:64:c4:4a:56:8d:18:22:e2:a7:86:84:79:be:08:
         9b:b4:79:86:98:08:ff:2e:81:1e:c8:f4:cc:c9:c8:3a:d3:24:
         1e:6b:73:98:02:16:35:a2:0b:98:49:53:3d:e9:07:4a:c3:7a:
         20:a1:a9:f3:cb:05:22:9c:84:26:18:ba:d6:ae:5a:46:39:ab:
         ee:d5:c3:fb:24:0a:24:a6:c9:78:fe:46:d2:70:63:39:80:70:
         d7:17:a8:6f:e4:9c:f3:3a:76:b2:3f:bf:1c:76:45:52:0f:4c:
         e5:e4:8d:2e:96:e9:84:bb:c3:dc:38:cd:48:78:88:a8:cb:00:
         3e:e3:47:1c:f4:35:1f:30:82:ac:eb:62:3c:d8:75:9c:54:f9:
         4b:49:9e:0b:ab:6d:08:df:32:a4:03:e4:5e:bb:80:d9:57:bb:
         3a:d5:17:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:15:30 2025 by rpki-client