Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/323830343a323731633a3a2f33322d313238203d3e20323633383737.roa
File:                     323830343a323731633a3a2f33322d313238203d3e20323633383737.roa (raw, json)
Hash identifier:          9czPyLHsQNqWtZD0T0xfr5722IdYCGLe69IPEwzSaLE=
Subject key identifier:   81:ED:93:4D:4C:03:EA:1E:E2:15:84:54:CB:D0:4B:78:DD:E2:31:C8
Certificate issuer:       /CN=849A24446B9E3C80503AA50B35CDFE864B50F299
Certificate serial:       4D4F65F9FC4AB53C1B0DAE5E70A1873545DCA4E8
Authority key identifier: 84:9A:24:44:6B:9E:3C:80:50:3A:A5:0B:35:CD:FE:86:4B:50:F2:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/849A24446B9E3C80503AA50B35CDFE864B50F299.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/323830343a323731633a3a2f33322d313238203d3e20323633383737.roa
Signing time:             Thu 06 Mar 2025 10:04:41 +0000
ROA not before:           Thu 06 Mar 2025 09:59:41 +0000
ROA not after:            Thu 05 Mar 2026 10:04:41 +0000
asID:                     263877
IP address blocks:        2804:271c::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:4f:65:f9:fc:4a:b5:3c:1b:0d:ae:5e:70:a1:87:35:45:dc:a4:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=849A24446B9E3C80503AA50B35CDFE864B50F299
        Validity
            Not Before: Mar  6 09:59:41 2025 GMT
            Not After : Mar  5 10:04:41 2026 GMT
        Subject: CN=81ED934D4C03EA1EE2158454CBD04B78DDE231C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:67:ae:13:28:76:87:cb:e6:b0:af:ea:6c:70:
                    fc:53:7d:c6:82:da:c1:0b:f9:f9:f8:8b:cd:fd:58:
                    bd:ef:8d:a4:b8:bc:3c:19:f3:94:06:ac:57:75:91:
                    fa:af:43:b3:10:18:54:16:db:91:2d:52:8f:ce:38:
                    a2:8b:e3:c2:99:a0:45:b2:f1:46:ba:5a:d3:98:bd:
                    74:c4:54:37:d3:bb:03:7c:b6:9c:d3:6b:7b:8e:6b:
                    63:fe:f6:95:aa:49:e9:50:d1:c7:b9:66:b5:42:8c:
                    c5:0e:6e:29:bd:5e:1f:b3:b3:af:8a:bf:73:74:19:
                    ca:8a:d2:85:50:a0:fa:61:1a:1e:1a:10:b8:76:b8:
                    a9:d7:52:9e:30:23:7a:88:ab:8e:27:b0:8d:5f:22:
                    81:67:3c:8c:51:35:c5:b4:49:4a:87:fc:1d:f0:b3:
                    e9:48:7d:66:3e:bf:8d:a2:83:43:42:9a:75:63:b1:
                    d2:2f:80:07:44:9a:fd:01:56:e6:9d:bb:9a:b0:89:
                    b0:0f:db:bf:90:ac:69:de:f2:de:16:39:0b:2c:3c:
                    aa:6d:52:b3:a9:81:50:06:59:cd:3e:f5:07:ae:2b:
                    63:1d:ef:33:63:9f:92:60:85:b2:1e:72:62:4a:da:
                    3d:41:a8:b1:85:5c:78:2c:40:ea:d5:0d:92:9d:65:
                    77:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:ED:93:4D:4C:03:EA:1E:E2:15:84:54:CB:D0:4B:78:DD:E2:31:C8
            X509v3 Authority Key Identifier:
                keyid:84:9A:24:44:6B:9E:3C:80:50:3A:A5:0B:35:CD:FE:86:4B:50:F2:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/849A24446B9E3C80503AA50B35CDFE864B50F299.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/849A24446B9E3C80503AA50B35CDFE864B50F299.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/323830343a323731633a3a2f33322d313238203d3e20323633383737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:271c::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:5d:7b:94:cd:d4:23:6c:a0:44:2d:c8:f8:c9:b2:f2:20:32:
         95:74:a1:ef:9e:ad:97:0f:da:9c:b8:c2:19:0f:3e:2c:1f:ff:
         30:41:54:97:cf:e7:57:25:5b:3e:47:5b:01:55:32:d3:d3:7e:
         6c:84:5f:b0:93:0a:c7:c0:83:df:47:1c:9d:17:f9:ab:99:d5:
         b3:3c:79:ce:a2:b2:15:eb:45:ba:56:0c:5e:1b:13:58:04:6e:
         24:bf:58:59:a3:8c:98:c3:bd:67:89:80:42:37:77:4d:3b:f6:
         e0:58:ca:c8:84:c0:6e:52:09:8f:49:99:e3:d8:6c:e8:90:fb:
         5c:b6:c2:dd:bf:82:74:88:14:57:d8:fc:df:22:bd:17:fb:89:
         ec:cb:7d:d7:2e:af:8e:4e:bc:fb:46:08:36:74:8d:c9:cb:16:
         6c:18:fc:30:2b:c5:40:d1:1e:40:bc:45:09:66:37:da:f5:b5:
         b9:4d:ac:47:1a:a6:c8:77:d5:70:5b:e1:f2:65:f7:a1:4e:75:
         54:61:5d:26:66:e5:c6:ac:ac:1f:5b:68:31:c9:69:1c:30:d6:
         b7:b6:e4:f1:81:fa:79:4f:73:6a:e4:79:22:37:89:8a:90:0a:
         d4:58:0c:ba:25:45:8c:6e:e3:88:1b:28:2a:89:45:7f:6c:aa:
         66:45:01:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:08:01 2025 by rpki-client