Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9yXQpNmbPEc4yQWodGchjyTXZArA1v5PukSsz9SQVMfb/0/323830343a313930383a3a2f33322d3332203d3e203631373730.roa
File:                     323830343a313930383a3a2f33322d3332203d3e203631373730.roa (raw, json)
Hash identifier:          qDlbAkISkHpS8nDp5PXtKsH7XpfOZ/US4Zhsukbs+v0=
Subject key identifier:   15:77:64:3E:FC:D5:E1:A4:6C:95:69:61:B0:EF:A9:5C:4C:D3:6E:7B
Certificate issuer:       /CN=13149E872076863268B5B7FFD3A618CAA69AAB08
Certificate serial:       66378277C960D286D7DF5D3975156B6FC507ADCD
Authority key identifier: 13:14:9E:87:20:76:86:32:68:B5:B7:FF:D3:A6:18:CA:A6:9A:AB:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13149E872076863268B5B7FFD3A618CAA69AAB08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9yXQpNmbPEc4yQWodGchjyTXZArA1v5PukSsz9SQVMfb/0/323830343a313930383a3a2f33322d3332203d3e203631373730.roa
Signing time:             Thu 19 Dec 2024 19:44:34 +0000
ROA not before:           Thu 19 Dec 2024 19:39:34 +0000
ROA not after:            Thu 18 Dec 2025 19:44:34 +0000
asID:                     61770
IP address blocks:        2804:1908::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:37:82:77:c9:60:d2:86:d7:df:5d:39:75:15:6b:6f:c5:07:ad:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13149E872076863268B5B7FFD3A618CAA69AAB08
        Validity
            Not Before: Dec 19 19:39:34 2024 GMT
            Not After : Dec 18 19:44:34 2025 GMT
        Subject: CN=1577643EFCD5E1A46C956961B0EFA95C4CD36E7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:75:ce:6b:cc:48:44:20:99:c6:f7:e4:8c:c4:
                    ae:2c:6d:75:ed:78:7c:24:d5:82:84:4d:a6:f1:d0:
                    ee:f4:36:d9:d6:60:a0:66:68:c0:5d:9a:b1:77:d8:
                    8a:47:22:e1:85:12:82:da:92:cc:a6:13:68:32:57:
                    c6:b2:1c:5c:1b:ef:d3:44:d9:0d:a5:8e:85:4f:6d:
                    c7:e7:63:00:b8:c0:b6:8d:59:22:5f:fe:ae:69:2f:
                    52:48:9c:ac:72:bd:b7:05:8f:b6:a5:7e:cd:d3:1b:
                    03:09:7d:1b:82:e7:6b:82:18:95:30:f6:85:35:76:
                    89:3f:fc:33:34:32:ca:7b:35:61:84:4c:52:8b:d8:
                    19:66:fc:53:53:de:f1:2e:ab:7a:b7:93:af:ab:ae:
                    4f:8b:12:29:52:2f:08:52:f8:98:c2:d9:47:7e:ac:
                    a5:d9:bd:93:3e:d3:ab:8a:9d:db:24:2f:0c:32:49:
                    1b:3f:ab:57:1b:8d:49:95:18:4b:f0:ab:76:eb:87:
                    36:aa:48:55:f9:3d:21:38:1c:4e:39:31:9c:53:2c:
                    2d:f1:92:cb:c1:a6:ff:98:51:d0:f4:88:5e:86:de:
                    8a:1a:c2:c9:2f:ad:76:a4:ce:d8:28:d2:63:b5:0c:
                    83:97:d0:11:e8:83:71:94:a8:5e:bb:88:99:10:7b:
                    ea:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:77:64:3E:FC:D5:E1:A4:6C:95:69:61:B0:EF:A9:5C:4C:D3:6E:7B
            X509v3 Authority Key Identifier:
                keyid:13:14:9E:87:20:76:86:32:68:B5:B7:FF:D3:A6:18:CA:A6:9A:AB:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9yXQpNmbPEc4yQWodGchjyTXZArA1v5PukSsz9SQVMfb/0/13149E872076863268B5B7FFD3A618CAA69AAB08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13149E872076863268B5B7FFD3A618CAA69AAB08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9yXQpNmbPEc4yQWodGchjyTXZArA1v5PukSsz9SQVMfb/0/323830343a313930383a3a2f33322d3332203d3e203631373730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1908::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:04:18:e7:e1:ef:a5:a8:da:be:5a:de:b9:cb:49:82:42:75:
         fc:ff:28:8b:2b:a0:6a:da:9e:a8:54:b0:09:f3:26:32:c6:86:
         11:71:fc:50:36:ad:4c:db:ca:80:2f:28:3b:7b:4e:45:0f:38:
         72:dc:49:59:6f:48:5e:48:4f:df:3d:5a:e9:f9:37:37:16:40:
         1f:1b:74:0b:0b:b0:6b:4f:c6:ca:54:c2:af:84:4d:a3:6e:61:
         8d:11:0a:cb:1f:43:17:0b:29:fd:2b:2b:dd:c6:62:b8:3d:df:
         78:24:ad:e4:4d:e1:84:3e:0b:c0:8a:a0:53:e7:e2:8d:68:04:
         61:b2:37:4d:24:f8:33:f3:ed:86:8a:1e:91:cd:9c:db:45:60:
         ca:d5:35:18:0a:2e:c2:4a:19:8d:a1:ca:0a:cc:fc:7e:77:ff:
         77:80:fb:3e:41:3f:fc:4e:9c:35:15:f4:bf:ae:cf:9b:73:29:
         0e:0e:b2:2f:c3:d1:e3:77:00:05:8e:d7:ad:a0:02:34:fa:d4:
         4e:aa:96:8b:fe:34:b2:f6:1c:00:d3:6f:4c:18:c7:c0:0e:fa:
         a9:58:07:59:89:61:e3:e5:2f:7a:26:4f:b4:94:6e:84:bc:3c:
         9c:16:17:b5:6d:c7:77:ce:77:5f:6e:e6:83:e7:3d:e3:b8:ee:
         bf:13:67:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:19:59 2025 by rpki-client