Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/323830343a393038303a343030303a3a2f33342d3334203d3e20323733353536.roa
File:                     323830343a393038303a343030303a3a2f33342d3334203d3e20323733353536.roa (raw, json)
Hash identifier:          wJx8ODQ4aPO/eJGtY1Cg79qT8oGr3MSYC4z4fKDKt0Q=
Subject key identifier:   C7:81:FD:8C:D9:1A:A5:0C:20:F7:A0:D9:5B:9D:B5:38:41:45:C7:F4
Certificate issuer:       /CN=949059A6CFC6D8D4784BD4699906DA66C2271CD9
Certificate serial:       6EB486C679F56C1817E75A1F3337D175C9952667
Authority key identifier: 94:90:59:A6:CF:C6:D8:D4:78:4B:D4:69:99:06:DA:66:C2:27:1C:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/949059A6CFC6D8D4784BD4699906DA66C2271CD9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/323830343a393038303a343030303a3a2f33342d3334203d3e20323733353536.roa
Signing time:             Sun 22 Dec 2024 12:38:35 +0000
ROA not before:           Sun 22 Dec 2024 12:33:35 +0000
ROA not after:            Sun 21 Dec 2025 12:38:35 +0000
asID:                     273556
IP address blocks:        2804:9080:4000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:b4:86:c6:79:f5:6c:18:17:e7:5a:1f:33:37:d1:75:c9:95:26:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=949059A6CFC6D8D4784BD4699906DA66C2271CD9
        Validity
            Not Before: Dec 22 12:33:35 2024 GMT
            Not After : Dec 21 12:38:35 2025 GMT
        Subject: CN=C781FD8CD91AA50C20F7A0D95B9DB5384145C7F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:a2:37:6c:6a:9f:f3:3a:64:cf:5a:80:c4:cb:
                    9a:a7:98:c6:f3:94:8d:f9:2d:70:29:1b:c9:e8:98:
                    1c:d6:4f:32:dc:47:ef:be:60:44:5b:6a:e2:78:b7:
                    05:c8:5b:50:f5:8c:d5:7b:5d:e6:dc:cc:59:97:8c:
                    12:62:c3:07:4b:38:bb:70:00:d3:6d:2a:84:8a:a4:
                    c2:d1:21:15:46:a4:0f:70:50:59:8e:8b:1e:47:bf:
                    cc:49:f3:74:a6:ed:5d:2e:73:51:93:c9:ef:7c:64:
                    1a:74:d4:d3:58:b1:bd:10:fb:de:fd:93:c8:a6:85:
                    eb:f4:31:6a:06:7b:a9:52:81:88:c3:f3:6c:56:ac:
                    4d:6a:d2:49:0b:7e:08:7f:0b:90:f4:1a:f2:81:a3:
                    ea:3d:92:77:2a:70:8f:57:82:71:b8:01:ad:a6:8a:
                    4d:f2:e7:2e:23:ac:f4:c9:ad:f9:c6:28:6d:24:70:
                    a2:41:b2:78:bf:1e:33:18:41:80:16:b9:87:65:6d:
                    7c:ea:46:be:f3:8e:95:ab:e7:64:85:2b:5d:15:a8:
                    a1:4c:f3:37:be:c7:47:a3:bc:47:38:1a:96:cf:69:
                    48:65:d7:83:b3:83:56:a7:fa:d2:1a:7c:78:0e:c1:
                    03:51:e2:da:09:2e:ac:01:6f:5d:48:e6:70:22:48:
                    b0:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:81:FD:8C:D9:1A:A5:0C:20:F7:A0:D9:5B:9D:B5:38:41:45:C7:F4
            X509v3 Authority Key Identifier:
                keyid:94:90:59:A6:CF:C6:D8:D4:78:4B:D4:69:99:06:DA:66:C2:27:1C:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/949059A6CFC6D8D4784BD4699906DA66C2271CD9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/949059A6CFC6D8D4784BD4699906DA66C2271CD9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/323830343a393038303a343030303a3a2f33342d3334203d3e20323733353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9080:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         cc:ad:ee:a5:a5:d6:0a:15:14:d1:67:79:bc:8d:36:17:7e:44:
         ff:4a:43:2f:f3:0f:93:03:b8:82:5c:5d:7e:ce:93:7b:16:01:
         43:7a:3a:72:40:3a:ab:f9:ef:36:62:d2:8e:ce:3f:6b:1b:e8:
         e3:03:53:20:62:21:8a:59:ec:19:41:26:8b:3e:4e:a1:c7:21:
         bf:46:76:49:2d:16:3a:dc:e5:d7:6d:f9:c3:5d:1d:48:3e:72:
         ef:3c:e3:2e:ce:6f:4b:2b:5a:e7:28:f7:ef:fb:2c:7d:24:23:
         c3:3a:0a:8e:d8:df:55:77:3b:7f:9d:b0:3f:60:6d:74:9a:39:
         0c:50:d4:d4:90:8d:a2:f9:1d:41:b9:0b:67:48:5f:b9:90:15:
         c3:c2:f6:d0:5c:75:29:cd:cd:d1:88:1b:a2:9c:fd:e6:b5:f1:
         d3:94:a4:a9:e4:92:d7:d0:5d:9c:7a:7d:a0:44:78:53:2f:6f:
         08:4d:c8:d3:45:32:7a:93:ad:e1:2f:86:51:63:10:1f:b1:e7:
         01:50:ab:26:ec:3a:32:fd:03:fc:8b:b6:c8:82:ba:f4:56:e7:
         ab:e6:19:b2:77:a0:e0:af:d9:8d:96:91:cd:d3:dd:4d:28:bf:
         9a:7b:d7:ca:00:5e:72:a4:2f:ad:13:32:3d:3a:e7:d1:56:cf:
         e1:37:25:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:34:38 2025 by rpki-client