Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/1/323830343a323362303a3a2f33322d3438203d3e20323632363435.roa
File:                     323830343a323362303a3a2f33322d3438203d3e20323632363435.roa (raw, json)
Hash identifier:          zYDJ+g5p0KH2cIlMM6F6gQecLexG/OYMgLAk60VWxD4=
Subject key identifier:   F3:F4:34:B1:D7:1F:01:AF:8C:C3:58:CD:7A:2E:7D:F7:44:2F:99:9B
Certificate issuer:       /CN=E09F2B81ED12D4B02A5B104DB200DEF0A03303AD
Certificate serial:       49E36A81E1EF135E209AD0AD565ADC297C7C91D0
Authority key identifier: E0:9F:2B:81:ED:12:D4:B0:2A:5B:10:4D:B2:00:DE:F0:A0:33:03:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E09F2B81ED12D4B02A5B104DB200DEF0A03303AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/1/323830343a323362303a3a2f33322d3438203d3e20323632363435.roa
Signing time:             Thu 06 Mar 2025 07:45:46 +0000
ROA not before:           Thu 06 Mar 2025 07:40:46 +0000
ROA not after:            Thu 05 Mar 2026 07:45:46 +0000
asID:                     262645
IP address blocks:        2804:23b0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:e3:6a:81:e1:ef:13:5e:20:9a:d0:ad:56:5a:dc:29:7c:7c:91:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E09F2B81ED12D4B02A5B104DB200DEF0A03303AD
        Validity
            Not Before: Mar  6 07:40:46 2025 GMT
            Not After : Mar  5 07:45:46 2026 GMT
        Subject: CN=F3F434B1D71F01AF8CC358CD7A2E7DF7442F999B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:08:4b:d9:2b:78:d2:c0:93:3f:04:20:57:f4:
                    fa:8d:1e:aa:14:a9:d6:a9:d9:a5:11:48:c7:de:e8:
                    24:5f:43:6e:3e:c3:98:fd:f6:59:da:59:fb:da:c0:
                    e7:f4:71:70:f5:bc:3d:c9:3e:8b:a5:50:c9:e9:ba:
                    63:a7:fe:9f:88:73:88:a0:d4:27:87:7d:64:4c:8c:
                    bd:d5:5c:bb:63:23:17:7b:f5:c3:09:d9:d0:f1:57:
                    54:cb:7e:9a:2e:10:7a:3b:61:df:f1:e3:b4:97:43:
                    03:76:c7:f2:6d:f7:30:6b:4b:5c:30:6a:78:7e:49:
                    61:65:7d:bf:6b:5c:9e:26:8e:13:b8:97:0d:93:6b:
                    b6:fc:92:b8:82:96:31:01:25:e6:0f:27:f5:10:d6:
                    96:02:fe:01:ad:57:3e:2b:68:1b:fb:3e:d4:e9:2f:
                    02:93:89:d0:3f:9d:53:45:bb:a5:51:cb:32:30:78:
                    f4:e4:4a:f0:63:0e:90:fb:d5:5d:fe:a4:51:ec:f6:
                    3c:ae:22:e4:24:f8:07:dd:0a:cf:e9:fe:2e:9d:7b:
                    0b:ab:d2:21:89:cb:3c:f3:6e:23:d2:80:cc:99:2d:
                    92:fa:83:79:79:51:04:62:01:78:02:bf:5a:a1:17:
                    02:fc:40:dd:ae:4b:2f:96:10:a4:cc:9c:71:4b:47:
                    01:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:F4:34:B1:D7:1F:01:AF:8C:C3:58:CD:7A:2E:7D:F7:44:2F:99:9B
            X509v3 Authority Key Identifier:
                keyid:E0:9F:2B:81:ED:12:D4:B0:2A:5B:10:4D:B2:00:DE:F0:A0:33:03:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/1/E09F2B81ED12D4B02A5B104DB200DEF0A03303AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E09F2B81ED12D4B02A5B104DB200DEF0A03303AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/1/323830343a323362303a3a2f33322d3438203d3e20323632363435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:23b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:bd:76:96:b7:0b:df:88:6d:c3:58:df:9b:66:e4:9c:37:5c:
         ae:39:f5:41:d6:ac:ee:2f:ed:e3:00:3b:30:a8:b7:b5:c2:e5:
         c7:36:04:36:88:99:3b:0c:48:cf:3e:53:d5:6f:8f:39:9d:47:
         3e:e7:b6:42:e4:99:26:fd:61:05:d6:3a:8c:3b:c6:e1:bc:df:
         d6:4d:4f:8c:29:73:5d:27:65:07:a2:4f:70:28:20:86:c5:1b:
         b0:bb:0c:41:0f:59:7b:32:a0:34:60:86:91:07:d4:b9:92:53:
         b8:eb:5e:1f:2b:7a:d4:cd:7f:73:c7:c5:df:70:96:ec:df:83:
         ce:7e:13:c9:5e:73:ed:d7:02:2f:85:05:ef:82:9e:e9:1e:4a:
         a8:4c:b2:c5:76:80:83:dd:d6:db:96:de:6a:34:76:e0:89:10:
         2b:87:1d:4d:a4:43:73:2e:e4:0e:77:85:dd:cb:c6:6b:c5:0e:
         f1:a7:ef:b0:0b:87:04:8c:06:04:f9:88:10:43:c4:bd:54:d2:
         bd:c4:79:32:26:42:ba:f3:67:eb:c5:64:1b:60:84:ce:05:2d:
         fa:b9:50:d4:73:48:12:f8:c3:56:42:5c:dc:3d:5b:4b:be:f9:
         eb:51:fd:6e:e1:0e:80:58:78:3d:71:56:a3:26:68:2d:44:c6:
         ee:30:32:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:39:05 2025 by rpki-client