Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/323830343a363830303a343030303a3a2f33342d3334203d3e20323639363634.roa
File:                     323830343a363830303a343030303a3a2f33342d3334203d3e20323639363634.roa (raw, json)
Hash identifier:          8ydBmXj+Z7QO79b7C+pT/sDY8X41qKFI4t68tMvqyhU=
Subject key identifier:   2F:16:EB:E8:07:F0:54:4F:B2:D5:A7:4C:EC:E0:A0:8C:69:AC:C0:DC
Certificate issuer:       /CN=4F366058E8C8DCE8E24C1CBB8D8F8A282A6FE59D
Certificate serial:       47E9D5DF53BEAE69F1114E912EBFDEE2DD7A82C4
Authority key identifier: 4F:36:60:58:E8:C8:DC:E8:E2:4C:1C:BB:8D:8F:8A:28:2A:6F:E5:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F366058E8C8DCE8E24C1CBB8D8F8A282A6FE59D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/323830343a363830303a343030303a3a2f33342d3334203d3e20323639363634.roa
Signing time:             Mon 07 Apr 2025 19:56:50 +0000
ROA not before:           Mon 07 Apr 2025 19:51:50 +0000
ROA not after:            Mon 06 Apr 2026 19:56:50 +0000
asID:                     269664
IP address blocks:        2804:6800:4000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:e9:d5:df:53:be:ae:69:f1:11:4e:91:2e:bf:de:e2:dd:7a:82:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F366058E8C8DCE8E24C1CBB8D8F8A282A6FE59D
        Validity
            Not Before: Apr  7 19:51:50 2025 GMT
            Not After : Apr  6 19:56:50 2026 GMT
        Subject: CN=2F16EBE807F0544FB2D5A74CECE0A08C69ACC0DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:60:36:a0:b8:91:fc:01:c7:2d:70:38:f7:b8:
                    0a:71:2c:1e:a8:bc:19:9b:c1:f7:de:b2:03:ea:2a:
                    a1:85:ca:ce:9d:61:6a:b0:4c:d0:9e:8e:01:fd:cc:
                    7f:7d:e7:5b:b7:38:3a:4b:e2:1d:04:40:c4:71:85:
                    18:fa:3e:31:d3:79:8c:27:39:9c:c7:e2:ca:2e:c2:
                    74:2a:f4:1b:97:72:34:aa:83:36:5b:81:a9:2c:f2:
                    33:06:62:91:7a:f0:7a:df:1e:ca:39:f0:c2:fd:bd:
                    76:e6:f7:f1:db:ec:29:9b:fc:45:ba:71:7e:aa:36:
                    f6:6b:63:6d:63:7b:14:f1:cd:70:4d:b9:1f:b4:ea:
                    a1:f8:d3:1a:f8:df:2d:71:3e:75:79:94:69:57:3d:
                    d7:09:fe:7e:55:bf:88:e6:13:c5:87:a3:5c:c0:32:
                    99:92:c9:a9:2d:27:02:0d:d5:b7:2d:fd:d7:b2:ad:
                    f5:f4:f5:da:63:6c:65:8e:df:cd:2f:3b:17:5f:0b:
                    29:05:1b:cd:10:0e:24:d6:42:85:d7:85:02:6e:f0:
                    53:30:11:7c:b6:a9:57:2d:8d:36:e9:f2:52:f8:5c:
                    d0:ed:96:1d:59:f3:8b:61:13:07:de:64:22:8f:f1:
                    7e:5f:0a:03:40:56:28:69:2d:49:21:cd:7e:b6:ba:
                    2b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:16:EB:E8:07:F0:54:4F:B2:D5:A7:4C:EC:E0:A0:8C:69:AC:C0:DC
            X509v3 Authority Key Identifier:
                keyid:4F:36:60:58:E8:C8:DC:E8:E2:4C:1C:BB:8D:8F:8A:28:2A:6F:E5:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/4F366058E8C8DCE8E24C1CBB8D8F8A282A6FE59D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F366058E8C8DCE8E24C1CBB8D8F8A282A6FE59D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/323830343a363830303a343030303a3a2f33342d3334203d3e20323639363634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6800:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         a3:0b:dd:1f:bc:df:ad:a4:cc:d0:0d:4a:16:dd:a5:a8:6d:ae:
         ed:f2:70:bf:93:cc:70:14:36:6a:70:fe:ba:72:f7:c5:89:c1:
         e0:22:64:80:b9:9c:de:1c:87:c1:61:d3:39:51:3c:f6:09:84:
         a4:97:1c:8b:44:01:fe:da:0a:f6:28:f7:c3:1a:7a:6f:74:19:
         af:e7:31:9d:58:6f:50:e9:0b:7e:17:80:55:f4:0e:0f:8e:32:
         a8:87:98:40:65:69:4f:53:28:b0:bc:45:2b:18:40:ad:4f:59:
         d4:75:f0:72:2d:0b:e0:28:55:76:88:80:43:2e:b9:52:9c:04:
         56:84:44:bc:71:ce:2f:8f:3f:56:c6:02:fc:6f:d6:cf:b5:c1:
         92:98:f8:7d:d7:53:2f:65:04:03:2c:9a:3a:2b:7a:4f:4f:10:
         a5:c3:eb:8c:3b:23:59:48:ca:fa:02:38:dd:e6:cb:06:e3:1d:
         43:ba:a4:e3:85:3e:06:94:ab:18:49:f3:a1:39:e3:91:77:ed:
         07:db:b3:16:3a:af:56:80:56:8b:b1:51:8c:d7:31:dd:a0:a7:
         e9:17:2b:50:cf:bc:3f:46:b1:60:87:61:9b:f8:7e:2a:6d:81:
         31:06:82:54:c9:a6:2b:6e:64:e2:29:4c:60:cf:20:e8:a4:88:
         76:20:c6:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 02:49:54 2025 by rpki-client