Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8wtiZocXLjczVn1159gW8RDXXMiNh5CKwzYu4eoKWBb4/1/323830343a323266303a3a2f33322d3332203d3e20323634313333.roa
File:                     323830343a323266303a3a2f33322d3332203d3e20323634313333.roa (raw, json)
Hash identifier:          WhG5B9k2Se6KlLMNj3qTFEYEpVroCjUeU5rD+EtJPMM=
Subject key identifier:   1E:2D:29:64:E6:EA:3A:9E:16:1D:5D:72:BF:0D:8A:65:C0:E8:FA:11
Certificate issuer:       /CN=7AF39D52856181EDEBB441A696F7B87D2FF633BA
Certificate serial:       0831C3A69661A0EAC30EF0EC60585933B7631D3D
Authority key identifier: 7A:F3:9D:52:85:61:81:ED:EB:B4:41:A6:96:F7:B8:7D:2F:F6:33:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AF39D52856181EDEBB441A696F7B87D2FF633BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8wtiZocXLjczVn1159gW8RDXXMiNh5CKwzYu4eoKWBb4/1/323830343a323266303a3a2f33322d3332203d3e20323634313333.roa
Signing time:             Thu 02 Jan 2025 19:03:25 +0000
ROA not before:           Thu 02 Jan 2025 18:58:25 +0000
ROA not after:            Thu 01 Jan 2026 19:03:25 +0000
asID:                     264133
IP address blocks:        2804:22f0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:31:c3:a6:96:61:a0:ea:c3:0e:f0:ec:60:58:59:33:b7:63:1d:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AF39D52856181EDEBB441A696F7B87D2FF633BA
        Validity
            Not Before: Jan  2 18:58:25 2025 GMT
            Not After : Jan  1 19:03:25 2026 GMT
        Subject: CN=1E2D2964E6EA3A9E161D5D72BF0D8A65C0E8FA11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:74:36:6d:85:07:b7:7e:52:79:ab:e9:b3:35:
                    9a:70:e1:2a:7d:af:97:8f:78:b7:42:68:c5:70:b8:
                    f1:18:6f:f6:ea:5a:06:d8:40:c2:0c:4d:b5:4e:7a:
                    24:b8:74:a8:d9:92:1c:c4:f1:3a:ee:39:3f:dd:2f:
                    9b:9d:f5:4b:73:3a:46:9d:3f:5d:8d:3b:ee:e2:22:
                    73:68:56:f3:55:3a:08:c6:ef:b5:b5:00:54:e7:ed:
                    4a:b7:b9:df:64:55:7f:9e:db:63:43:86:12:7f:b7:
                    c8:5a:48:68:e5:de:a3:79:78:51:da:e9:b5:49:2e:
                    cf:a0:ac:ac:6b:81:4d:c2:80:0d:92:64:c9:34:aa:
                    c6:b8:5d:00:c9:14:a3:a8:b4:e7:2a:c2:57:5e:30:
                    bd:02:7a:1a:7b:fc:ec:13:fa:ba:c5:18:ea:4b:93:
                    76:79:24:5d:30:82:44:f1:93:95:18:9f:69:c1:f2:
                    16:c0:a0:93:74:57:c6:e4:05:f8:d3:07:07:06:d6:
                    05:e5:c4:71:72:91:d8:32:77:10:7f:1d:f1:ae:a9:
                    0b:be:9e:3d:20:9f:75:99:f1:b2:fc:ba:d8:ad:58:
                    50:f0:1c:bb:cd:bc:cc:10:70:09:4e:3a:1d:35:29:
                    9d:4d:b2:8b:d9:c8:72:d6:ee:6c:b3:0e:bb:4c:8c:
                    72:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:2D:29:64:E6:EA:3A:9E:16:1D:5D:72:BF:0D:8A:65:C0:E8:FA:11
            X509v3 Authority Key Identifier:
                keyid:7A:F3:9D:52:85:61:81:ED:EB:B4:41:A6:96:F7:B8:7D:2F:F6:33:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8wtiZocXLjczVn1159gW8RDXXMiNh5CKwzYu4eoKWBb4/1/7AF39D52856181EDEBB441A696F7B87D2FF633BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AF39D52856181EDEBB441A696F7B87D2FF633BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wtiZocXLjczVn1159gW8RDXXMiNh5CKwzYu4eoKWBb4/1/323830343a323266303a3a2f33322d3332203d3e20323634313333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:22f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:d5:5a:2e:09:d7:c7:16:60:5d:de:a3:41:9f:31:0d:c5:87:
         c4:79:73:4d:ad:95:18:12:b0:7f:ca:b6:57:b6:8c:60:ea:85:
         7b:04:b2:76:1c:77:32:17:56:35:fa:5f:13:51:e7:d7:aa:4b:
         41:85:d3:c6:8f:b3:26:66:d8:f0:32:8d:5d:a4:f5:e1:f3:3b:
         3f:fd:9c:42:7c:5b:ff:79:42:2f:de:40:8b:8f:21:b7:18:bf:
         ed:21:e8:cb:a5:f5:a1:22:f8:7a:2f:cf:4a:4a:19:dd:48:81:
         88:41:79:8c:af:e6:88:66:2a:70:2d:25:c7:8e:d1:73:ab:24:
         08:b2:07:90:92:f0:7a:01:e6:33:fc:f3:ac:3f:84:99:d7:74:
         82:59:37:bb:c1:74:cc:51:4f:41:b6:eb:fd:9d:46:48:94:84:
         9a:69:e2:9d:fd:88:f0:98:4c:06:22:e8:84:32:e7:d7:61:f0:
         de:a1:c7:e1:d0:48:15:1c:ab:10:e9:57:57:51:80:d7:4a:aa:
         e3:35:10:e6:68:36:e8:36:c7:1b:25:14:11:f3:7c:6d:3b:f9:
         ab:9b:1c:9e:71:37:81:db:17:4e:f1:97:6b:15:79:f7:a3:dd:
         c4:b0:b7:ac:18:79:ad:e7:94:05:e1:cc:65:73:6d:55:5a:5f:
         8f:c3:11:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 11:52:58 2025 by rpki-client