Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/323830343a363061633a3a2f33322d3332203d3e20323639313833.roa
File:                     323830343a363061633a3a2f33322d3332203d3e20323639313833.roa (raw, json)
Hash identifier:          d7AP0FNhvj8K+DqXMurkXvTIzIygU4GoA0/tJ3J/QMo=
Subject key identifier:   DC:BC:B1:22:D8:C7:B8:E3:B6:26:92:4E:30:08:D8:F3:6B:3B:1D:7A
Certificate issuer:       /CN=95D5107C3F975DC279B2EE7748B02AB010470E6D
Certificate serial:       4539503BFDDD47CDF50941578DEA3E6BCF19D54F
Authority key identifier: 95:D5:10:7C:3F:97:5D:C2:79:B2:EE:77:48:B0:2A:B0:10:47:0E:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95D5107C3F975DC279B2EE7748B02AB010470E6D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/323830343a363061633a3a2f33322d3332203d3e20323639313833.roa
Signing time:             Wed 19 Mar 2025 18:25:55 +0000
ROA not before:           Wed 19 Mar 2025 18:20:55 +0000
ROA not after:            Wed 18 Mar 2026 18:25:55 +0000
asID:                     269183
IP address blocks:        2804:60ac::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:39:50:3b:fd:dd:47:cd:f5:09:41:57:8d:ea:3e:6b:cf:19:d5:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95D5107C3F975DC279B2EE7748B02AB010470E6D
        Validity
            Not Before: Mar 19 18:20:55 2025 GMT
            Not After : Mar 18 18:25:55 2026 GMT
        Subject: CN=DCBCB122D8C7B8E3B626924E3008D8F36B3B1D7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5e:a8:08:e8:35:6b:53:2c:c2:3a:8a:06:15:
                    94:d5:b2:3c:9c:8f:f5:0a:00:b6:05:4c:ef:b7:e5:
                    c9:7e:66:e9:2b:ec:cc:dd:f9:fd:24:13:c6:bc:64:
                    dc:d9:88:3f:d2:d6:01:dd:86:90:98:92:01:09:c1:
                    ea:28:af:e9:52:79:34:66:d1:f8:2b:56:7d:5d:f7:
                    f0:70:7c:0b:87:2a:33:75:7e:e2:7f:ab:ff:b2:af:
                    c5:8a:85:87:9f:20:f4:1d:a8:e6:ce:9d:3f:64:db:
                    4d:e5:09:97:42:b8:c6:45:c1:b2:72:40:05:3d:9a:
                    21:3e:3a:bc:6f:4c:0c:7f:d4:0c:3e:7d:07:c2:32:
                    f9:fb:69:84:65:04:23:37:a9:08:8c:df:64:27:39:
                    07:80:89:5d:f9:20:39:85:8f:45:27:f1:f3:1f:43:
                    7b:0d:45:48:78:76:51:1d:9c:2f:de:ce:76:d8:27:
                    b1:80:73:17:d1:5a:b7:9e:c2:c9:35:9e:45:9e:fa:
                    78:9e:3f:19:9c:0e:29:34:3f:48:36:9c:0a:ed:52:
                    9b:fa:88:e4:52:3e:20:a8:23:8d:2b:b7:4e:28:fa:
                    8d:11:37:57:96:e4:74:53:e1:55:b4:e8:e4:ab:92:
                    9c:73:7a:71:85:2f:22:0a:65:c2:99:5f:43:99:49:
                    59:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:BC:B1:22:D8:C7:B8:E3:B6:26:92:4E:30:08:D8:F3:6B:3B:1D:7A
            X509v3 Authority Key Identifier:
                keyid:95:D5:10:7C:3F:97:5D:C2:79:B2:EE:77:48:B0:2A:B0:10:47:0E:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/95D5107C3F975DC279B2EE7748B02AB010470E6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95D5107C3F975DC279B2EE7748B02AB010470E6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/323830343a363061633a3a2f33322d3332203d3e20323639313833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:a0:1b:0c:92:67:56:1a:0c:47:11:59:4f:19:c0:25:3d:dc:
         a0:9d:fd:e0:81:15:ea:99:d1:cb:50:1d:14:fe:3d:de:20:32:
         37:40:ab:64:d4:5e:80:52:6b:cf:f3:09:b3:95:5a:f1:b1:af:
         fc:7b:d9:49:1d:90:91:a0:1e:e3:59:26:1a:8a:fc:4e:fd:25:
         d7:70:33:12:57:89:7a:0b:bf:df:4c:66:97:8c:17:43:ef:b2:
         f4:d1:88:1d:a2:a7:ec:8c:d1:05:ef:a1:4d:39:eb:8b:7b:15:
         12:37:f8:30:42:fd:3b:a3:8d:a9:a6:2d:95:cb:c7:67:62:4b:
         a9:00:a4:f9:d7:88:3f:8c:cd:b6:f3:45:17:9a:23:bb:77:3e:
         55:69:ec:5c:c8:4f:bd:6c:25:f9:f9:f7:fa:5d:71:7d:e4:2f:
         1e:f8:d5:46:37:d1:e7:4e:6e:40:f6:6b:55:f2:94:2a:73:a7:
         fc:75:5c:64:67:c4:8d:8c:ef:3b:8c:58:db:f1:97:81:1d:65:
         29:65:a3:6f:de:d6:16:a9:30:d4:6e:dd:3e:fd:2d:c0:94:c2:
         b6:e2:bc:5a:8f:73:cb:81:f9:17:ee:b6:cc:17:76:e7:61:ac:
         88:6e:80:be:ea:0f:cd:5b:aa:f4:bc:98:35:87:fc:4e:17:42:
         fa:2b:94:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:37:02 2025 by rpki-client