Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9eSRArVchrLxruBXFLWvUZYpmbrZyXkmkVWgh9AZ2V4W/0/323830343a353462303a3a2f33322d3438203d3e20323638363635.roa
File:                     323830343a353462303a3a2f33322d3438203d3e20323638363635.roa (raw, json)
Hash identifier:          9A0epHY6ISZ3MsuV/pQZvUqWSa8bQFJr50gQaGYar44=
Subject key identifier:   16:58:C7:B1:0D:23:6E:23:84:0B:59:C8:DB:FA:24:74:C6:A0:0E:3B
Certificate issuer:       /CN=57E5BC403DFD7B11DBE0DF23ADFB0A0CFE55AEA2
Certificate serial:       3E6EA23622BD428C30036CE754335BC73D982701
Authority key identifier: 57:E5:BC:40:3D:FD:7B:11:DB:E0:DF:23:AD:FB:0A:0C:FE:55:AE:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57E5BC403DFD7B11DBE0DF23ADFB0A0CFE55AEA2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9eSRArVchrLxruBXFLWvUZYpmbrZyXkmkVWgh9AZ2V4W/0/323830343a353462303a3a2f33322d3438203d3e20323638363635.roa
Signing time:             Thu 09 Jan 2025 12:05:54 +0000
ROA not before:           Thu 09 Jan 2025 12:00:54 +0000
ROA not after:            Thu 08 Jan 2026 12:05:54 +0000
asID:                     268665
IP address blocks:        2804:54b0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:6e:a2:36:22:bd:42:8c:30:03:6c:e7:54:33:5b:c7:3d:98:27:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57E5BC403DFD7B11DBE0DF23ADFB0A0CFE55AEA2
        Validity
            Not Before: Jan  9 12:00:54 2025 GMT
            Not After : Jan  8 12:05:54 2026 GMT
        Subject: CN=1658C7B10D236E23840B59C8DBFA2474C6A00E3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:93:9f:91:dd:7f:8a:08:da:cd:47:08:41:a5:
                    17:83:68:a7:e7:5b:f8:8d:36:7e:3c:e7:c0:a0:34:
                    f3:d2:ce:d2:1a:45:3d:7e:e7:43:cb:c8:20:38:55:
                    6d:ba:9d:ba:00:83:c9:f6:a7:7f:ef:29:00:f5:27:
                    4e:fe:b9:61:9e:bb:d7:57:f1:1e:06:68:a0:3e:26:
                    6f:f6:65:d7:3e:83:a7:5d:19:48:ef:3a:2c:c3:36:
                    f1:5e:a8:f7:a3:27:f8:58:08:90:51:83:4b:8e:9d:
                    ce:72:71:69:44:3b:39:77:ff:87:32:29:c5:4d:a5:
                    49:12:f8:53:71:30:0b:df:d5:11:ed:63:7a:cb:75:
                    35:46:ea:af:67:ee:fa:f4:b5:87:1b:12:7e:ab:6e:
                    ff:ec:91:ff:c9:21:86:73:ff:00:74:1b:b8:4e:50:
                    c7:3c:fa:3a:d0:6e:9b:24:2d:91:fd:b6:7d:15:2d:
                    b0:25:39:d4:cc:45:e1:23:a7:46:9d:f7:c3:ff:db:
                    0d:a3:43:e0:dd:d8:dc:0c:2b:cc:8b:79:5e:b0:35:
                    4f:86:ea:bb:e3:e1:ef:c3:31:d7:2c:f3:ab:18:fd:
                    71:4b:b9:f5:fa:4c:25:b8:11:7c:b2:dc:7d:be:d3:
                    40:05:d9:27:64:4f:4d:65:d1:fc:1d:ef:39:53:14:
                    d5:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:58:C7:B1:0D:23:6E:23:84:0B:59:C8:DB:FA:24:74:C6:A0:0E:3B
            X509v3 Authority Key Identifier:
                keyid:57:E5:BC:40:3D:FD:7B:11:DB:E0:DF:23:AD:FB:0A:0C:FE:55:AE:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9eSRArVchrLxruBXFLWvUZYpmbrZyXkmkVWgh9AZ2V4W/0/57E5BC403DFD7B11DBE0DF23ADFB0A0CFE55AEA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57E5BC403DFD7B11DBE0DF23ADFB0A0CFE55AEA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9eSRArVchrLxruBXFLWvUZYpmbrZyXkmkVWgh9AZ2V4W/0/323830343a353462303a3a2f33322d3438203d3e20323638363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:90:14:50:f7:1c:fb:b4:3a:51:24:3e:6d:c0:6d:58:40:ee:
         72:13:be:d0:01:fc:16:86:74:76:ad:b8:17:69:9f:c2:05:3e:
         3b:23:31:e1:2b:f1:78:99:26:b0:b7:09:b0:82:78:24:4f:1b:
         bd:cb:0e:14:cf:4f:32:3a:9a:41:f3:a5:78:5b:60:bf:08:32:
         da:cc:6a:74:a4:c7:f0:2c:70:a5:e6:1f:d1:e4:81:6e:5f:d8:
         44:6e:94:3a:22:27:40:b9:ec:6e:94:d4:ea:85:93:43:c9:85:
         bd:61:53:f7:07:d9:d4:5f:ef:b4:6d:4b:d5:0b:b8:12:d2:fc:
         91:fb:b5:8a:38:59:76:88:4f:9e:2c:27:c0:17:cc:96:9f:67:
         3e:3e:0a:66:0f:8d:c7:63:aa:44:d9:e4:fb:66:46:9a:bd:53:
         9b:f7:30:a9:18:01:d6:6f:f0:0c:4a:ea:b7:80:71:49:9c:8e:
         ff:cf:fa:7e:dd:1b:72:ba:74:87:70:bf:31:13:b0:3a:49:9f:
         cd:ea:19:36:fa:d1:da:62:67:9c:91:c6:fb:cb:54:68:78:c9:
         d7:e9:94:94:4d:4d:89:66:73:5d:d4:e7:f0:59:00:29:a9:10:
         00:86:4e:1b:11:db:eb:3f:be:bf:7c:08:b1:67:33:c2:29:d3:
         84:dc:97:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 21:15:39 2025 by rpki-client