Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/323830343a303a313830303a3a2f34382d3438203d3e2032373136.roa
File:                     323830343a303a313830303a3a2f34382d3438203d3e2032373136.roa (raw, json)
Hash identifier:          yrTyjunFfNZ/kEKlX8bCFyggA6YwZPq/D0n15nDLi5I=
Subject key identifier:   BF:98:BF:C4:D9:66:E1:11:E5:3E:04:A9:9B:7B:0E:47:49:9B:1F:D2
Certificate issuer:       /CN=D54C376960A26972A0B767BDA084048DFFE3673E
Certificate serial:       282D97468DAC5D64D93FDA578A807B18EEB1BDDA
Authority key identifier: D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/323830343a303a313830303a3a2f34382d3438203d3e2032373136.roa
Signing time:             Wed 05 Mar 2025 19:00:02 +0000
ROA not before:           Wed 05 Mar 2025 18:55:02 +0000
ROA not after:            Wed 04 Mar 2026 19:00:02 +0000
asID:                     2716
IP address blocks:        2804:0:1800::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:2d:97:46:8d:ac:5d:64:d9:3f:da:57:8a:80:7b:18:ee:b1:bd:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D54C376960A26972A0B767BDA084048DFFE3673E
        Validity
            Not Before: Mar  5 18:55:02 2025 GMT
            Not After : Mar  4 19:00:02 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d1:8d:4d:de:cf:0a:33:37:a9:d9:5b:ef:a5:
                    e8:cf:59:9e:db:5b:37:8a:3c:58:54:1c:1f:2a:3a:
                    37:93:2b:42:21:f8:1d:fc:c5:e0:1b:64:08:db:b5:
                    07:09:2e:75:c1:80:b2:33:e4:7c:1d:70:bc:0f:e6:
                    5d:59:47:7e:84:a8:98:f5:a8:15:a8:b4:ea:da:b1:
                    bc:23:3a:96:8e:f7:16:cf:79:12:f4:d8:ba:71:c0:
                    56:b7:69:78:f8:3f:6d:bd:e4:25:c8:75:a0:09:16:
                    e6:07:e3:b7:88:12:ef:c3:ea:11:27:51:d8:61:54:
                    a9:df:bc:51:96:98:88:3a:f2:d5:69:d8:a0:31:95:
                    cf:37:8a:43:18:1b:32:d2:ce:f6:6b:70:ae:ba:bf:
                    f5:3c:93:ae:07:4d:71:e0:b8:84:6f:40:a7:a6:a6:
                    18:74:ae:60:b5:0a:dc:cf:14:5a:de:9c:da:91:b0:
                    8a:49:24:15:fc:df:1e:6c:09:5a:87:7a:99:48:b1:
                    8d:e8:c4:5a:ca:11:0a:7d:db:82:a2:45:bc:fc:e2:
                    b6:1b:27:50:f9:e4:41:ac:c4:a9:7b:e0:db:c1:62:
                    46:9b:fc:ac:fd:fa:32:f9:7d:29:a9:ea:19:07:79:
                    34:ab:92:8b:3c:13:d2:71:d1:23:7a:1a:d8:f7:1a:
                    f8:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:98:BF:C4:D9:66:E1:11:E5:3E:04:A9:9B:7B:0E:47:49:9B:1F:D2
            X509v3 Authority Key Identifier:
                keyid:D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/323830343a303a313830303a3a2f34382d3438203d3e2032373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:0:1800::/48

    Signature Algorithm: sha256WithRSAEncryption
         bb:db:83:35:29:fb:21:01:20:62:ae:57:68:63:ff:41:a8:2b:
         ed:7f:b1:ba:74:0e:ac:c9:08:a5:cc:da:5b:7f:92:dd:f0:d9:
         d1:4b:95:83:d2:ab:a7:eb:a1:38:bd:7c:73:45:4e:08:c5:1e:
         51:e1:24:63:52:66:98:0e:80:45:36:73:49:c8:03:9b:bf:f0:
         45:d0:39:62:41:8a:50:64:16:c2:0f:4e:55:59:d8:06:5d:f8:
         ce:09:19:ad:30:d4:30:d5:18:7f:e5:0b:54:93:3b:0b:19:3d:
         fc:02:b9:85:3a:ed:6a:24:3b:8f:82:f1:31:a2:0f:64:07:83:
         83:8f:cb:2e:f2:4d:b1:e5:03:8b:7f:f0:48:2e:ca:76:14:32:
         f6:51:ba:70:4e:e3:84:2f:92:0d:86:82:26:5b:b8:a7:dd:c4:
         0e:bc:b8:eb:2c:43:59:00:a5:41:bc:b1:ee:9b:c6:8d:10:6b:
         56:44:d4:3a:ce:55:c3:7c:ec:bc:77:62:f1:64:e9:d5:60:ee:
         7d:42:d6:4d:d8:70:32:f7:c9:a6:6b:2b:dc:18:28:a3:ee:06:
         16:f3:24:ca:a9:93:52:17:c2:a5:40:4d:41:cd:bf:ad:8d:d5:
         08:e7:ab:45:f3:f1:ed:06:27:1c:5f:ef:d3:af:88:d4:70:e3:
         18:78:ec:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:06:18 2025 by rpki-client