Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7vSJxH95ahqMLU24jc8syjDiT1u6mWBdBRrFw7va8Gcz/1/323830343a313763303a3a2f33322d313238203d3e20323633313535.roa
File:                     323830343a313763303a3a2f33322d313238203d3e20323633313535.roa (raw, json)
Hash identifier:          IuCpTeR6G96FqMXdmX05hnM3Lt8V1dlKDP+Ahr6GfBk=
Subject key identifier:   20:D7:B0:7A:7E:E6:F5:83:15:03:21:82:55:B2:20:A6:F8:ED:22:24
Certificate issuer:       /CN=B6EB3DEA1B113D8089F2EB7F26A52CBABA6DF2D8
Certificate serial:       10E6D3F253855B0A94FA6FCAF513C92549AD2107
Authority key identifier: B6:EB:3D:EA:1B:11:3D:80:89:F2:EB:7F:26:A5:2C:BA:BA:6D:F2:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6EB3DEA1B113D8089F2EB7F26A52CBABA6DF2D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7vSJxH95ahqMLU24jc8syjDiT1u6mWBdBRrFw7va8Gcz/1/323830343a313763303a3a2f33322d313238203d3e20323633313535.roa
Signing time:             Wed 05 Mar 2025 23:21:38 +0000
ROA not before:           Wed 05 Mar 2025 23:16:38 +0000
ROA not after:            Wed 04 Mar 2026 23:21:38 +0000
asID:                     263155
IP address blocks:        2804:17c0::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:e6:d3:f2:53:85:5b:0a:94:fa:6f:ca:f5:13:c9:25:49:ad:21:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6EB3DEA1B113D8089F2EB7F26A52CBABA6DF2D8
        Validity
            Not Before: Mar  5 23:16:38 2025 GMT
            Not After : Mar  4 23:21:38 2026 GMT
        Subject: CN=20D7B07A7EE6F5831503218255B220A6F8ED2224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ac:ca:88:f8:e0:69:f7:7c:9b:cd:73:a9:70:
                    e6:29:89:01:ff:fa:76:bc:64:d0:b5:e9:95:45:18:
                    db:73:ed:7d:da:0c:24:6f:5e:d9:59:82:20:25:8d:
                    22:d7:ff:44:97:0a:f3:0c:ef:cf:ed:81:e6:f0:a3:
                    bb:a7:81:33:5d:51:bd:31:df:e2:2c:ad:db:82:5e:
                    d8:37:39:95:44:73:72:d3:c6:6e:40:e3:4a:b2:d6:
                    3a:ae:4d:71:02:fc:0e:3c:7d:38:fa:f3:46:e0:c7:
                    bc:81:9d:16:fb:44:89:b3:93:47:ec:87:22:04:9d:
                    4f:8c:dc:f2:9c:df:1c:37:64:94:76:db:8e:9c:05:
                    bc:75:3b:e3:af:ca:a6:16:6f:65:0c:af:e4:59:1d:
                    cd:de:57:56:a8:30:e4:1c:05:2e:c5:ff:43:d2:18:
                    b1:b1:7b:3b:aa:e0:d0:ad:e3:33:81:d2:54:d3:52:
                    ca:b2:f3:7a:f3:42:70:b6:47:f9:fc:3f:1f:55:3e:
                    43:7c:8e:31:28:03:fe:9e:a4:09:bc:03:64:74:dc:
                    e2:7b:cc:fb:3a:29:b0:19:78:db:c3:48:14:5d:fe:
                    1f:d8:51:25:fa:b8:eb:87:8e:9a:f5:24:a2:57:d2:
                    e0:e2:83:80:4b:48:e4:cd:63:2e:18:00:73:0a:cf:
                    b6:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:D7:B0:7A:7E:E6:F5:83:15:03:21:82:55:B2:20:A6:F8:ED:22:24
            X509v3 Authority Key Identifier:
                keyid:B6:EB:3D:EA:1B:11:3D:80:89:F2:EB:7F:26:A5:2C:BA:BA:6D:F2:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7vSJxH95ahqMLU24jc8syjDiT1u6mWBdBRrFw7va8Gcz/1/B6EB3DEA1B113D8089F2EB7F26A52CBABA6DF2D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6EB3DEA1B113D8089F2EB7F26A52CBABA6DF2D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7vSJxH95ahqMLU24jc8syjDiT1u6mWBdBRrFw7va8Gcz/1/323830343a313763303a3a2f33322d313238203d3e20323633313535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:17c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:0b:1a:05:31:4f:6f:51:16:8e:40:7e:7f:d0:ba:71:3d:b4:
         c9:c6:c6:68:c4:5d:31:e4:80:de:51:3d:92:8e:79:ec:4f:22:
         5d:06:72:ab:ba:ae:97:b7:b2:99:c3:45:e5:35:7c:e2:19:ca:
         6c:bc:24:5f:4a:67:99:09:ac:12:71:7e:b8:85:db:f4:47:96:
         db:7b:06:7f:1a:bc:30:a5:09:bd:dd:99:24:c5:1d:b8:9c:f4:
         c6:0e:bf:c7:94:ff:80:78:d0:80:b9:43:30:ff:fb:10:cd:69:
         62:41:ca:03:5a:95:85:4a:37:96:f5:5f:1c:d7:4e:79:22:b8:
         fb:45:ab:bb:8b:80:b8:ad:ff:38:3a:d0:61:63:de:0c:36:29:
         9e:d5:53:ef:d4:cb:0b:c4:20:b6:2b:e6:22:9c:ee:b1:1b:ff:
         c3:36:cf:10:97:7e:1f:d0:c9:b1:55:28:7e:5b:38:64:ff:0f:
         0e:a8:83:0f:40:14:cb:75:fe:09:a0:54:a4:1f:8d:fb:c8:4b:
         fe:d3:9f:7f:ad:73:f6:c5:f5:78:46:22:a2:5b:4b:19:2c:25:
         93:4f:8e:63:a2:ff:8f:1c:5c:bd:d8:02:33:9f:14:be:5a:01:
         15:ca:bb:89:96:2f:54:81:27:08:92:47:5b:5e:ab:1f:bd:8e:
         df:7a:7c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:06:50 2025 by rpki-client