Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9SiVPoDMxeaMLAffk543WR9jZXTvZuhBJetqkDAjgxrP/0/323830343a373165383a383030303a3a2f33332d3333203d3e20323730383139.roa
File:                     323830343a373165383a383030303a3a2f33332d3333203d3e20323730383139.roa (raw, json)
Hash identifier:          /qUY/uU7ubtk9y8oa1I0gPoCk6AqDjk5asJ8/kbaNmA=
Subject key identifier:   C0:05:BB:7F:06:EE:4D:EE:CB:C5:B2:A7:F6:35:8B:0F:F8:E2:21:CB
Certificate issuer:       /CN=8C12B45617D2E2C140AFEF8A76D18046F084B1C7
Certificate serial:       7A607CC36F93C3E8CD38BF9C0E783809BB900471
Authority key identifier: 8C:12:B4:56:17:D2:E2:C1:40:AF:EF:8A:76:D1:80:46:F0:84:B1:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C12B45617D2E2C140AFEF8A76D18046F084B1C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9SiVPoDMxeaMLAffk543WR9jZXTvZuhBJetqkDAjgxrP/0/323830343a373165383a383030303a3a2f33332d3333203d3e20323730383139.roa
Signing time:             Tue 10 Dec 2024 13:02:29 +0000
ROA not before:           Tue 10 Dec 2024 12:57:29 +0000
ROA not after:            Tue 09 Dec 2025 13:02:29 +0000
asID:                     270819
IP address blocks:        2804:71e8:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:60:7c:c3:6f:93:c3:e8:cd:38:bf:9c:0e:78:38:09:bb:90:04:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C12B45617D2E2C140AFEF8A76D18046F084B1C7
        Validity
            Not Before: Dec 10 12:57:29 2024 GMT
            Not After : Dec  9 13:02:29 2025 GMT
        Subject: CN=C005BB7F06EE4DEECBC5B2A7F6358B0FF8E221CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a9:17:f8:5a:e4:7b:2d:4a:f0:9d:43:a8:c8:
                    7c:a9:53:17:40:1c:f7:3a:58:db:35:b3:76:92:23:
                    46:a3:69:e2:8d:b1:bc:81:e8:80:bc:29:ed:fc:43:
                    b8:c5:9b:cb:8e:ce:46:73:af:03:c5:7a:06:02:a8:
                    02:a5:f2:fc:7a:60:ff:ec:48:34:92:4b:58:45:9f:
                    7a:49:7c:c0:8e:de:1f:52:82:ad:7f:74:b4:f0:03:
                    4d:c7:fa:8a:50:26:b9:1e:39:d7:e4:6e:68:8c:3e:
                    6e:77:b9:dc:74:b7:6c:78:81:39:a8:89:e5:05:5b:
                    58:64:8f:9f:90:7b:51:74:be:d3:a8:50:f9:99:9b:
                    4a:27:27:51:a4:1a:00:5e:d6:b8:4c:11:6f:d1:a7:
                    11:7c:12:83:f6:4a:84:c1:57:f4:fb:2d:ce:a3:f9:
                    a6:2b:37:81:10:29:2f:b2:d3:70:ce:97:31:59:a3:
                    35:25:31:e4:b2:d9:4d:b7:25:df:be:b6:92:ae:9b:
                    7e:fb:43:11:17:08:84:58:c9:ce:ba:bc:d2:16:82:
                    f1:14:ec:7e:2d:19:c2:b3:78:8f:69:d7:25:b7:f0:
                    d5:02:d6:3c:ba:f6:a0:22:56:91:f1:07:17:ba:fc:
                    25:36:3d:e0:8e:23:75:40:a8:c2:37:82:bd:40:cb:
                    b8:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:05:BB:7F:06:EE:4D:EE:CB:C5:B2:A7:F6:35:8B:0F:F8:E2:21:CB
            X509v3 Authority Key Identifier:
                keyid:8C:12:B4:56:17:D2:E2:C1:40:AF:EF:8A:76:D1:80:46:F0:84:B1:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9SiVPoDMxeaMLAffk543WR9jZXTvZuhBJetqkDAjgxrP/0/8C12B45617D2E2C140AFEF8A76D18046F084B1C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C12B45617D2E2C140AFEF8A76D18046F084B1C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SiVPoDMxeaMLAffk543WR9jZXTvZuhBJetqkDAjgxrP/0/323830343a373165383a383030303a3a2f33332d3333203d3e20323730383139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:71e8:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         00:22:f8:4e:96:5c:80:4b:74:75:88:1c:6c:74:51:1d:f9:e4:
         16:6c:fc:58:2f:2a:f4:28:20:69:63:5f:60:9e:03:df:b5:7e:
         05:7b:4f:c6:ef:9b:a6:4e:83:3f:2a:fd:40:e5:56:84:1c:93:
         10:94:11:e5:97:e5:6d:d0:5f:68:c0:a6:a3:9a:1b:73:93:ce:
         b7:52:c9:5c:da:96:08:22:53:a8:71:7c:e9:42:b5:e3:7d:1d:
         00:81:a6:48:56:3f:ff:41:c5:2a:9f:40:66:87:15:56:d6:5c:
         5f:8d:99:df:f4:fd:a5:0a:36:03:02:93:78:9e:54:d6:f3:0a:
         fd:46:01:bf:7c:d6:44:45:5b:14:26:52:27:69:43:4d:14:b3:
         29:67:02:19:e4:5c:5f:dd:07:30:4b:6e:70:39:63:81:ec:ae:
         29:54:b7:dc:31:72:a5:5f:cf:67:6c:97:04:44:05:e8:8a:65:
         0a:5e:4d:70:bf:5a:bd:ee:51:ef:43:f7:d6:9f:74:28:53:e5:
         3a:e3:c0:b8:ae:86:3f:89:69:05:8d:4a:84:96:91:ec:2a:6b:
         6b:cd:ed:df:93:ce:44:0c:e7:18:14:ac:58:ca:34:74:3f:37:
         5b:77:9b:95:fe:5f:56:fe:41:2d:0f:ba:ac:2a:7c:3a:4e:55:
         cf:5c:a3:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:04:49 2025 by rpki-client