Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/82zruaSTdacU1aPsACJG8mqWcP7kW6JQxfFyXmyrpNmZ/2/323830343a373334383a3a2f33322d3332203d3e20323632363930.roa
File:                     323830343a373334383a3a2f33322d3332203d3e20323632363930.roa (raw, json)
Hash identifier:          ZETWz9B1XsvXE3LNR6Qez4qvCwG8K0rSb9shyRIBvpo=
Subject key identifier:   85:F2:ED:3C:4F:E6:BC:D2:4C:9A:91:86:B3:06:C0:A4:D7:90:4B:4B
Certificate issuer:       /CN=CD2AED580BE45AE6DD57D4E6A55AC92C707FCDBC
Certificate serial:       7F80715B0F9D66D465DEF14E5428BFAD458C51CC
Authority key identifier: CD:2A:ED:58:0B:E4:5A:E6:DD:57:D4:E6:A5:5A:C9:2C:70:7F:CD:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2AED580BE45AE6DD57D4E6A55AC92C707FCDBC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/82zruaSTdacU1aPsACJG8mqWcP7kW6JQxfFyXmyrpNmZ/2/323830343a373334383a3a2f33322d3332203d3e20323632363930.roa
Signing time:             Fri 28 Feb 2025 11:51:43 +0000
ROA not before:           Fri 28 Feb 2025 11:46:43 +0000
ROA not after:            Fri 27 Feb 2026 11:51:43 +0000
asID:                     262690
IP address blocks:        2804:7348::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:80:71:5b:0f:9d:66:d4:65:de:f1:4e:54:28:bf:ad:45:8c:51:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD2AED580BE45AE6DD57D4E6A55AC92C707FCDBC
        Validity
            Not Before: Feb 28 11:46:43 2025 GMT
            Not After : Feb 27 11:51:43 2026 GMT
        Subject: CN=85F2ED3C4FE6BCD24C9A9186B306C0A4D7904B4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9f:a4:b1:43:81:dd:4b:55:dd:a5:21:57:26:
                    db:63:ac:39:d5:86:7d:86:9b:5f:64:a8:8c:13:9e:
                    a7:03:47:44:25:20:f1:88:6e:d7:85:0a:ab:fc:b1:
                    fd:2a:68:c9:cb:bc:71:00:68:14:a1:e4:e8:29:a7:
                    ff:b8:6a:c2:21:ba:b7:1c:16:55:9f:81:70:4b:f7:
                    0a:74:2f:8e:45:9d:5b:ab:a4:24:03:d3:cf:0e:8a:
                    0f:8c:f9:2e:0a:3a:6a:73:57:e0:0b:bd:04:57:fe:
                    a1:e4:ae:d3:e4:94:11:ff:f9:9a:b5:de:25:ec:dd:
                    7c:b7:1c:e4:1b:28:8a:fa:4e:fa:32:ed:b8:f4:99:
                    d7:97:43:b8:40:6b:e3:36:f4:3a:fc:7f:fe:6e:ee:
                    e0:67:52:f3:dc:3f:aa:ea:f9:bf:cd:e4:a0:06:33:
                    fa:31:65:cb:9f:f1:54:f9:20:78:13:ca:fc:27:7e:
                    db:58:5e:2d:56:32:f5:7e:f9:20:13:5e:d8:00:3b:
                    8b:50:9a:e9:c4:90:ef:83:d4:93:d6:5b:a6:bf:c1:
                    ec:f6:95:28:22:8d:7e:04:53:09:ad:05:49:09:1a:
                    a6:05:0b:ba:75:06:2b:6a:33:f1:d4:ac:a5:d7:b8:
                    67:62:26:97:c4:e6:59:6f:2d:a2:48:43:4a:8b:e4:
                    f4:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:F2:ED:3C:4F:E6:BC:D2:4C:9A:91:86:B3:06:C0:A4:D7:90:4B:4B
            X509v3 Authority Key Identifier:
                keyid:CD:2A:ED:58:0B:E4:5A:E6:DD:57:D4:E6:A5:5A:C9:2C:70:7F:CD:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/82zruaSTdacU1aPsACJG8mqWcP7kW6JQxfFyXmyrpNmZ/2/CD2AED580BE45AE6DD57D4E6A55AC92C707FCDBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2AED580BE45AE6DD57D4E6A55AC92C707FCDBC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/82zruaSTdacU1aPsACJG8mqWcP7kW6JQxfFyXmyrpNmZ/2/323830343a373334383a3a2f33322d3332203d3e20323632363930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7348::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:83:70:91:0b:40:26:e9:0d:57:ea:90:9f:dc:5d:61:69:d9:
         36:ad:01:57:8d:b8:5a:dd:28:d0:43:d3:71:42:16:11:9a:58:
         ec:03:b3:75:fc:c4:80:6b:cd:26:14:45:b0:19:42:2b:c9:62:
         c3:7d:65:38:11:d2:2a:a4:b4:ba:9a:c3:f9:51:72:9c:2d:7a:
         bd:e4:3f:c2:3c:51:4e:27:d0:30:25:4c:d4:bc:55:61:02:a6:
         9d:a6:76:af:6e:8d:7e:39:ed:5d:8d:78:b2:88:b1:9f:38:1f:
         1e:e9:15:e8:cf:9c:f8:7c:75:06:5d:61:82:c0:86:a3:ab:6f:
         cf:e7:72:ac:9a:31:c3:04:b0:9a:ed:15:8d:92:65:35:ff:54:
         d5:56:cf:a9:7b:ff:30:52:77:af:f9:40:08:71:2b:05:41:86:
         cb:52:e6:b5:1e:5d:38:ad:60:7e:c4:3d:90:bd:07:7f:79:f0:
         ce:28:b5:b3:2a:fd:2f:e0:4f:e6:4f:93:d7:ca:fb:d1:04:8d:
         6e:06:a1:fa:28:b2:63:22:ea:15:48:fa:a2:84:e3:63:1b:20:
         a5:d8:70:b2:cc:79:dc:9c:15:25:25:b8:e0:52:de:35:bd:34:
         de:91:a9:9d:a6:f5:9d:8f:69:31:9b:34:b1:ff:09:da:23:d2:
         43:7b:92:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:13:27 2025 by rpki-client