Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/323830343a346566633a373030303a3a2f33362d3336203d3e20323638323936.roa
File:                     323830343a346566633a373030303a3a2f33362d3336203d3e20323638323936.roa (raw, json)
Hash identifier:          vj5yvuModXFhp88ENvHyn0+V3gqQkaenxU+O05hB4Y0=
Subject key identifier:   F4:BE:41:35:1A:FB:C4:84:F5:89:D3:38:CD:C2:0B:1D:BE:C8:CF:9E
Certificate issuer:       /CN=6FBB408034D86AB411C8C8B5E5FA96780D0C5466
Certificate serial:       2449B475F49760789471EE1ADCC682DB12359001
Authority key identifier: 6F:BB:40:80:34:D8:6A:B4:11:C8:C8:B5:E5:FA:96:78:0D:0C:54:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/323830343a346566633a373030303a3a2f33362d3336203d3e20323638323936.roa
Signing time:             Thu 06 Mar 2025 09:31:53 +0000
ROA not before:           Thu 06 Mar 2025 09:26:53 +0000
ROA not after:            Thu 05 Mar 2026 09:31:53 +0000
asID:                     268296
IP address blocks:        2804:4efc:7000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:49:b4:75:f4:97:60:78:94:71:ee:1a:dc:c6:82:db:12:35:90:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FBB408034D86AB411C8C8B5E5FA96780D0C5466
        Validity
            Not Before: Mar  6 09:26:53 2025 GMT
            Not After : Mar  5 09:31:53 2026 GMT
        Subject: CN=F4BE41351AFBC484F589D338CDC20B1DBEC8CF9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:92:7d:37:88:d6:07:1c:b1:51:b9:29:af:53:
                    3e:80:54:ec:fc:cb:a1:35:b9:d0:6f:65:b1:42:c0:
                    cd:19:51:99:72:49:3b:a9:5f:f4:92:48:d3:99:0b:
                    58:6a:4a:db:e6:c7:94:e5:88:e8:3a:22:e4:3d:0d:
                    fa:18:57:ee:28:0a:87:e1:63:ad:0d:6c:75:0e:0c:
                    21:30:9f:fc:e8:10:9e:62:5a:54:b3:04:ea:81:b9:
                    15:8c:38:bb:78:e8:c6:21:f0:75:91:13:4a:41:dd:
                    c4:cf:1c:a0:b8:2d:b4:fa:53:61:95:0b:50:cb:19:
                    21:85:ae:9b:81:ed:0e:f5:c6:eb:fa:ed:28:c4:2e:
                    1c:07:3e:02:3f:0d:5b:ab:d2:f5:38:d6:2b:1c:79:
                    fe:37:ab:61:14:19:3f:53:55:01:d0:35:e1:3d:89:
                    e5:96:61:aa:2d:d3:95:a3:0c:5a:08:6a:88:db:ca:
                    9c:1f:ed:31:70:79:85:4e:6a:b1:37:4b:29:1e:3d:
                    96:5c:3f:66:16:75:a4:e3:c8:8b:3d:02:38:59:61:
                    e8:05:10:8c:fc:9a:2e:98:8d:62:a4:e7:8b:7a:cf:
                    d6:f3:e8:fc:c3:6b:09:06:2f:a8:3c:7c:38:b7:fa:
                    b3:b2:70:d3:bb:a3:9c:c9:01:6a:25:e1:33:80:bf:
                    5e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:BE:41:35:1A:FB:C4:84:F5:89:D3:38:CD:C2:0B:1D:BE:C8:CF:9E
            X509v3 Authority Key Identifier:
                keyid:6F:BB:40:80:34:D8:6A:B4:11:C8:C8:B5:E5:FA:96:78:0D:0C:54:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/323830343a346566633a373030303a3a2f33362d3336203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4efc:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         b3:48:8f:a9:f2:78:f6:29:c9:48:49:74:0f:7f:9a:61:7c:ed:
         7d:65:dd:7b:16:ef:2a:0c:7b:f2:2c:0d:61:d9:29:77:44:ae:
         29:ec:f9:df:2f:ea:79:ff:0b:81:32:50:20:e5:f4:24:fd:ad:
         cc:05:6c:d8:fb:28:dc:bf:29:9f:ae:c3:ad:f6:a6:a5:d7:a7:
         57:3c:a6:c1:aa:3c:94:33:7c:00:12:a4:97:bb:2f:88:cc:1c:
         0f:7e:88:e4:56:41:90:3d:15:23:3a:21:94:f9:56:9e:f3:8b:
         28:b9:de:6c:63:cd:68:ab:38:9a:6f:18:1b:2f:e8:e2:44:fe:
         b5:12:26:b3:f0:02:99:2d:74:79:98:16:cf:99:63:36:a0:10:
         b2:e0:d8:09:97:29:1e:0d:0f:3a:81:03:2b:02:0d:72:0f:86:
         88:5d:8f:79:27:72:eb:c5:b6:7a:74:b8:80:2e:7f:6a:08:57:
         71:8a:67:c9:4e:f3:69:31:b0:7b:33:f3:31:8a:6b:e1:17:da:
         9d:9c:88:99:00:49:f2:08:69:f1:e0:9f:14:2c:1f:67:c8:7b:
         28:60:b1:32:d5:ed:f6:fb:a4:b7:a7:51:2a:d6:93:80:a4:15:
         ab:e5:58:11:57:5d:09:f9:7a:52:66:66:1c:b9:a6:8a:6f:52:
         d8:d1:64:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:17:55 2025 by rpki-client