Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/323830343a316134633a6530303a3a2f34382d3438203d3e203631383531.roa
File:                     323830343a316134633a6530303a3a2f34382d3438203d3e203631383531.roa (raw, json)
Hash identifier:          hG9IWZAUOa8j/w2D/BXWtywba7wEbyXDoGyw3ZiGimQ=
Subject key identifier:   75:E8:DD:04:3E:7C:5A:C5:17:16:2F:9E:FA:CF:0F:C7:3B:E2:E5:0A
Certificate issuer:       /CN=AFA55E041FA0E5D394A1480902275296B12C222A
Certificate serial:       6C7D1A85F1C99C80092B9AA644A871C48CFF382D
Authority key identifier: AF:A5:5E:04:1F:A0:E5:D3:94:A1:48:09:02:27:52:96:B1:2C:22:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFA55E041FA0E5D394A1480902275296B12C222A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/323830343a316134633a6530303a3a2f34382d3438203d3e203631383531.roa
Signing time:             Wed 26 Feb 2025 19:36:25 +0000
ROA not before:           Wed 26 Feb 2025 19:31:25 +0000
ROA not after:            Wed 25 Feb 2026 19:36:25 +0000
asID:                     61851
IP address blocks:        2804:1a4c:e00::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:7d:1a:85:f1:c9:9c:80:09:2b:9a:a6:44:a8:71:c4:8c:ff:38:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFA55E041FA0E5D394A1480902275296B12C222A
        Validity
            Not Before: Feb 26 19:31:25 2025 GMT
            Not After : Feb 25 19:36:25 2026 GMT
        Subject: CN=75E8DD043E7C5AC517162F9EFACF0FC73BE2E50A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:92:7f:c8:00:93:fe:0f:db:5e:f0:4e:31:9e:
                    c3:22:ec:dc:99:17:c6:d6:cc:64:12:d2:04:0a:53:
                    85:ff:dd:ea:5e:2d:ff:c1:cc:bc:d2:c4:7d:81:ed:
                    73:65:42:fd:ff:b3:a4:15:9f:4c:67:82:e5:9f:f5:
                    c3:42:68:de:a7:9a:c1:07:66:84:20:d7:50:c2:ab:
                    98:55:f7:e7:a2:d6:fa:bf:4d:89:86:c4:2f:b4:ba:
                    71:be:e4:3c:9c:91:89:84:7f:25:c5:4a:f4:ab:11:
                    c5:bf:1f:ea:78:42:4d:58:d3:9f:3c:dc:d9:c4:fa:
                    dc:b4:07:11:15:3e:10:24:b7:e8:65:13:71:3a:3d:
                    51:94:68:ae:0c:3d:8e:94:fd:6f:21:da:00:2f:bc:
                    e1:3c:a1:81:dc:9d:cf:5f:94:a3:82:61:b0:d5:f1:
                    f9:d2:55:bb:25:3b:ef:a5:7d:1d:c3:5f:5e:77:5d:
                    05:be:37:75:5a:42:97:32:99:ae:a2:7f:4c:45:9e:
                    8e:be:e6:e5:a4:a2:6d:17:85:8d:12:2a:9d:b4:12:
                    6b:d3:ca:44:cf:f5:dd:cd:bf:b2:c4:0c:53:d5:5c:
                    22:b7:d8:13:cc:44:57:46:34:7a:76:df:9b:3e:7f:
                    7f:db:99:11:5b:ef:0f:72:50:b9:d2:83:33:57:cd:
                    70:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E8:DD:04:3E:7C:5A:C5:17:16:2F:9E:FA:CF:0F:C7:3B:E2:E5:0A
            X509v3 Authority Key Identifier:
                keyid:AF:A5:5E:04:1F:A0:E5:D3:94:A1:48:09:02:27:52:96:B1:2C:22:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/AFA55E041FA0E5D394A1480902275296B12C222A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFA55E041FA0E5D394A1480902275296B12C222A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/323830343a316134633a6530303a3a2f34382d3438203d3e203631383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1a4c:e00::/48

    Signature Algorithm: sha256WithRSAEncryption
         b4:5a:24:29:1c:52:50:60:8e:ae:cb:1a:b6:8d:43:7f:06:29:
         f4:cf:d9:cd:3f:28:78:fa:e6:f7:ad:15:58:80:b4:b7:d5:39:
         7e:ac:94:4a:8e:8b:0c:35:63:be:31:26:a5:7a:0d:a3:b9:9b:
         7a:be:39:b1:41:37:26:26:85:c2:01:36:8d:9d:5c:b4:af:3e:
         d4:4a:cc:d7:10:f8:87:ae:dd:78:d5:ff:83:40:b0:16:65:70:
         55:d9:4f:5e:59:ed:3f:0a:73:3d:e8:fb:94:01:ee:3c:d1:78:
         c5:d4:a2:55:65:68:fb:85:cf:e8:b7:c1:00:c8:3c:e8:a8:18:
         76:4a:2f:de:2a:e0:de:4e:3f:8f:06:b4:11:0e:1f:55:9a:1a:
         ae:5c:98:a9:3a:7f:73:51:74:02:cd:fc:58:8b:d2:8b:0c:ef:
         82:6a:ad:2d:a9:44:e5:52:05:6e:21:e6:06:43:5b:4f:9e:16:
         31:99:4e:a7:59:20:82:9e:26:8e:fa:2e:7c:a1:6a:fe:10:1b:
         a4:b9:34:4d:c2:54:77:be:3d:9a:10:34:0d:91:6f:96:71:36:
         2f:5f:ef:e4:40:ce:c8:86:c3:c1:32:fb:0e:3e:11:f3:75:cc:
         08:fa:e0:6d:71:b8:10:31:26:bc:1e:7e:a4:54:47:11:57:36:
         15:c0:f8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 20:02:53 2025 by rpki-client