Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/323830343a3736383a3830303a3a2f34312d3431203d3e203532393737.roa
File:                     323830343a3736383a3830303a3a2f34312d3431203d3e203532393737.roa (raw, json)
Hash identifier:          dhOJFkK2/Rm+RGaDoduCCcRCHbhP69fcYqyR6MEOrog=
Subject key identifier:   2A:98:DB:46:58:7E:13:51:97:BC:99:B1:4B:54:B3:7E:1F:A9:DF:3E
Certificate issuer:       /CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
Certificate serial:       20DFE1B89A2DF03E607820294769129C60B19A56
Authority key identifier: 9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/323830343a3736383a3830303a3a2f34312d3431203d3e203532393737.roa
Signing time:             Wed 05 Mar 2025 19:00:02 +0000
ROA not before:           Wed 05 Mar 2025 18:55:02 +0000
ROA not after:            Wed 04 Mar 2026 19:00:02 +0000
asID:                     52977
IP address blocks:        2804:768:800::/41 maxlen: 41
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:df:e1:b8:9a:2d:f0:3e:60:78:20:29:47:69:12:9c:60:b1:9a:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
        Validity
            Not Before: Mar  5 18:55:02 2025 GMT
            Not After : Mar  4 19:00:02 2026 GMT
        Subject: CN=2A98DB46587E135197BC99B14B54B37E1FA9DF3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6b:62:b7:fd:76:95:2b:b3:7e:e1:20:d6:fd:
                    e1:e0:5b:3c:04:be:b5:2a:9e:c6:f0:41:f5:6a:17:
                    62:ab:65:a0:ec:02:74:81:3b:cf:63:3e:95:8e:63:
                    79:12:2e:32:c4:94:23:10:ee:96:64:fa:2c:44:c3:
                    7b:bd:d4:26:3d:8d:81:dd:f4:21:d2:65:47:04:02:
                    aa:b7:04:cc:fc:ce:90:ea:ab:1a:62:73:a3:39:66:
                    35:60:9b:5c:30:16:59:87:dd:0b:87:48:70:68:d1:
                    aa:63:69:e7:4a:dc:e7:2c:a6:db:79:a1:6e:4f:85:
                    a7:78:76:0a:53:c5:52:3e:b0:4b:7c:67:62:54:67:
                    b7:51:e9:d5:b9:cc:9f:c7:53:5b:6e:25:b1:3d:3e:
                    dd:8e:e6:5c:0c:de:ad:b1:0b:8f:82:4f:19:41:da:
                    03:70:6f:e2:9f:05:8a:63:03:ac:84:65:c7:e1:47:
                    d9:fe:e3:49:64:e8:9d:9e:e4:b3:12:29:68:ac:43:
                    85:cc:39:bc:20:62:5b:1b:74:46:bd:45:f3:c0:f4:
                    ca:96:61:61:07:fc:f6:3a:08:90:f5:7d:22:88:ac:
                    58:ee:bd:d8:5a:e7:47:86:cd:8d:96:0f:a7:c1:c9:
                    b6:a7:ba:d6:ca:0f:ff:8d:4c:36:72:4e:a3:b4:7a:
                    89:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:98:DB:46:58:7E:13:51:97:BC:99:B1:4B:54:B3:7E:1F:A9:DF:3E
            X509v3 Authority Key Identifier:
                keyid:9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/323830343a3736383a3830303a3a2f34312d3431203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:768:800::/41

    Signature Algorithm: sha256WithRSAEncryption
         7e:c1:59:1e:8b:36:0d:9e:7c:e2:75:4e:33:4f:a7:9d:98:46:
         25:c9:fc:0e:a1:ff:fc:92:62:40:7d:47:f3:1c:93:dd:4e:0e:
         a9:af:57:2b:c4:0d:54:9d:98:ed:8c:24:c8:cf:c3:e0:b6:58:
         5c:a4:db:c4:b1:df:86:b9:f9:5b:db:8f:bc:5d:b9:60:80:55:
         9d:9b:2f:f4:06:cc:a1:a6:df:48:b3:cd:32:c9:20:32:3d:8d:
         f7:2a:58:a6:93:dd:ad:a9:a5:be:65:e0:4b:33:bf:21:77:fb:
         68:84:72:7a:58:94:01:9e:fd:f8:5d:f7:62:b4:71:21:a5:a0:
         e5:14:7a:40:0b:62:fa:02:3f:e9:99:7c:bd:52:f8:b5:08:0c:
         3e:2d:bc:c4:ec:ff:a7:c3:af:66:b9:d8:7a:39:1b:46:49:0d:
         29:39:92:74:25:26:f0:7a:22:c2:a8:c7:b2:02:f4:e6:06:16:
         70:e9:fa:fb:51:c7:95:38:1f:d8:18:1e:9d:1e:2b:9f:61:bc:
         da:e5:56:b1:93:4e:f7:4b:a0:ab:d2:0a:04:a1:58:13:8a:19:
         fb:74:dd:ea:a1:07:24:26:1c:22:95:69:89:da:1e:80:83:53:
         71:a5:06:05:90:c5:50:19:c2:79:13:b0:6c:94:50:e7:56:eb:
         34:f9:1a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:12:51 2025 by rpki-client