Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8AtbAA38STB9ZaCMtRpEypFNqPqbCKC1y9WYcpxfjenc/1/323830343a386233383a3a2f33322d3438203d3e20323733373139.roa
File:                     323830343a386233383a3a2f33322d3438203d3e20323733373139.roa (raw, json)
Hash identifier:          IEUG8tpm8hk0t2b0PVgy9JJ26yNgISfPczlj5pIw9vg=
Subject key identifier:   C3:C6:AB:F0:79:DA:B3:D1:A9:1B:C8:0F:02:3B:D6:26:C6:1C:9E:B4
Certificate issuer:       /CN=130DA06C9537B1DF6544F6290A638F863755DA73
Certificate serial:       3E5FFE385529905F9382F64C74032D09A85BF810
Authority key identifier: 13:0D:A0:6C:95:37:B1:DF:65:44:F6:29:0A:63:8F:86:37:55:DA:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/130DA06C9537B1DF6544F6290A638F863755DA73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8AtbAA38STB9ZaCMtRpEypFNqPqbCKC1y9WYcpxfjenc/1/323830343a386233383a3a2f33322d3438203d3e20323733373139.roa
Signing time:             Tue 04 Feb 2025 18:59:35 +0000
ROA not before:           Tue 04 Feb 2025 18:54:35 +0000
ROA not after:            Tue 03 Feb 2026 18:59:35 +0000
asID:                     273719
IP address blocks:        2804:8b38::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:5f:fe:38:55:29:90:5f:93:82:f6:4c:74:03:2d:09:a8:5b:f8:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=130DA06C9537B1DF6544F6290A638F863755DA73
        Validity
            Not Before: Feb  4 18:54:35 2025 GMT
            Not After : Feb  3 18:59:35 2026 GMT
        Subject: CN=C3C6ABF079DAB3D1A91BC80F023BD626C61C9EB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:bd:37:c2:bf:14:eb:58:c5:be:7b:9b:c4:bf:
                    67:34:5e:96:a6:e2:67:de:ac:c9:e6:a5:8b:02:d1:
                    25:a0:17:79:01:30:79:5e:ce:38:72:2a:29:8c:e7:
                    55:28:91:ac:3d:55:3b:d2:1b:50:b1:bf:72:98:a7:
                    0b:9d:72:00:1d:cf:3b:c3:1b:48:39:4d:68:b6:0d:
                    93:dc:5c:3e:d2:01:ed:8e:a6:32:58:b3:56:b5:79:
                    77:24:81:3c:59:b3:a4:b2:81:1f:b8:2e:ce:43:2a:
                    47:85:b1:b8:31:cd:26:d9:f0:3e:54:e6:be:59:98:
                    05:15:03:06:c3:08:dc:ac:1f:35:a7:31:6d:be:13:
                    9b:d4:c2:a9:84:4a:07:f6:54:a1:07:af:eb:92:d4:
                    a4:8e:aa:41:68:92:f9:42:27:4b:1f:15:ff:0f:f5:
                    f6:1d:3f:1c:fa:83:bd:e7:0c:ac:5b:a2:15:a1:85:
                    4a:87:5d:75:70:4e:07:f1:f2:e9:b3:3c:eb:10:8c:
                    c4:79:8c:82:21:84:1f:1e:8d:2e:2f:cb:2c:35:02:
                    da:2f:49:2d:5f:07:3e:00:bc:32:ff:8b:d0:80:48:
                    bf:fc:48:c4:2b:9c:b1:d3:85:21:05:9e:93:ad:14:
                    4f:ce:73:76:b4:63:b9:83:73:08:0d:dc:f4:3e:13:
                    02:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:C6:AB:F0:79:DA:B3:D1:A9:1B:C8:0F:02:3B:D6:26:C6:1C:9E:B4
            X509v3 Authority Key Identifier:
                keyid:13:0D:A0:6C:95:37:B1:DF:65:44:F6:29:0A:63:8F:86:37:55:DA:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8AtbAA38STB9ZaCMtRpEypFNqPqbCKC1y9WYcpxfjenc/1/130DA06C9537B1DF6544F6290A638F863755DA73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/130DA06C9537B1DF6544F6290A638F863755DA73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8AtbAA38STB9ZaCMtRpEypFNqPqbCKC1y9WYcpxfjenc/1/323830343a386233383a3a2f33322d3438203d3e20323733373139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b38::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:cf:ab:a8:83:b2:1e:df:d6:d3:59:dc:26:c2:da:8d:06:ce:
         9e:56:66:02:55:af:18:15:14:29:04:69:c2:44:a5:9c:f4:e3:
         86:fb:a8:99:80:e7:13:fa:ef:40:d4:b5:e1:50:69:fc:c2:e8:
         45:d2:0c:8c:72:7e:07:ac:3d:c3:d3:eb:77:b7:21:97:84:25:
         e1:11:c6:75:fe:f9:30:a5:de:7a:c4:2c:e8:c6:d2:64:d1:f4:
         78:f0:f9:3e:6e:84:03:a0:3e:78:8b:4a:f3:36:be:4f:13:e7:
         ee:ed:a8:96:75:dd:88:0e:64:30:8b:43:15:06:fc:8a:b2:0c:
         1c:24:f2:3d:24:99:8d:39:ba:a8:19:b0:53:b6:f1:18:b3:e5:
         6c:27:d3:d5:5c:85:00:15:55:bc:33:3b:68:2f:f5:55:e5:e0:
         82:43:e0:0c:07:13:e0:57:36:2a:01:02:3d:b9:a0:dc:d9:d2:
         98:49:b0:1b:f9:1b:28:41:56:b8:b6:2b:ec:e0:db:e7:af:9c:
         f9:91:bf:16:c4:f8:2a:de:d3:e9:af:52:71:7d:fc:85:0a:4f:
         52:6a:02:c5:f9:18:87:fb:44:6e:ca:f4:ed:13:ad:43:21:e4:
         bc:a8:b8:e1:cb:4d:0a:af:4e:3c:d1:d6:c7:7c:53:5c:c9:b6:
         e3:95:dd:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:13:10 2025 by rpki-client