Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/323830343a353737633a313230303a3a2f34302d3430203d3e20323638303638.roa
File:                     323830343a353737633a313230303a3a2f34302d3430203d3e20323638303638.roa (raw, json)
Hash identifier:          OLU9WR+I5HcSTg7ERtXxFiCwPVWhH1LMxPofxOneXvw=
Subject key identifier:   54:65:D7:8A:7D:A8:77:6B:B7:45:C5:69:51:B8:DC:CA:4A:24:60:A1
Certificate issuer:       /CN=2109BE321BAA489853B95DD9EB2882D4F824F0F2
Certificate serial:       4F47A4BC5D8B5C402CA9854180D06A7AE0558AC1
Authority key identifier: 21:09:BE:32:1B:AA:48:98:53:B9:5D:D9:EB:28:82:D4:F8:24:F0:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/323830343a353737633a313230303a3a2f34302d3430203d3e20323638303638.roa
Signing time:             Thu 06 Mar 2025 06:00:19 +0000
ROA not before:           Thu 06 Mar 2025 05:55:19 +0000
ROA not after:            Thu 05 Mar 2026 06:00:19 +0000
asID:                     268068
IP address blocks:        2804:577c:1200::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:47:a4:bc:5d:8b:5c:40:2c:a9:85:41:80:d0:6a:7a:e0:55:8a:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2109BE321BAA489853B95DD9EB2882D4F824F0F2
        Validity
            Not Before: Mar  6 05:55:19 2025 GMT
            Not After : Mar  5 06:00:19 2026 GMT
        Subject: CN=5465D78A7DA8776BB745C56951B8DCCA4A2460A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:3c:57:e3:3d:c9:40:f3:90:5d:53:3d:b4:cb:
                    39:04:fb:cc:ad:e9:af:15:9e:ab:2b:67:5e:00:58:
                    20:dc:58:fd:7f:f2:10:6f:43:3d:4e:64:dc:bb:eb:
                    49:ad:cf:f1:4b:6c:99:2a:60:de:20:8a:3d:69:45:
                    8d:65:6e:2a:19:1c:cd:e4:7a:e8:cc:61:46:ba:57:
                    a9:ad:37:a0:4a:2e:1e:1d:48:15:8b:0e:56:dd:5a:
                    62:13:df:ac:8e:a9:2b:84:2d:ee:ae:d3:eb:ae:67:
                    3f:2f:fe:09:62:88:54:c6:6d:44:e0:55:be:8a:21:
                    37:6e:b1:00:ce:01:91:09:b3:ac:c1:cf:79:52:63:
                    54:1d:d8:11:d6:0c:a0:97:ba:ac:f6:4f:bd:86:91:
                    80:25:5a:e6:87:04:a4:0e:74:1c:59:89:f5:af:54:
                    28:02:e5:d9:fb:18:81:b7:da:10:83:fc:c1:39:22:
                    11:22:97:43:c7:01:15:3a:e6:17:30:bf:4c:3e:00:
                    80:a1:b8:aa:3d:ba:cb:88:e4:7b:70:ec:7d:fe:48:
                    fa:77:85:f8:29:75:ce:e8:e0:8b:52:d1:11:d0:b2:
                    68:18:1c:b7:60:0d:15:5a:98:29:9c:6f:6c:a2:5c:
                    47:d3:b2:7d:c9:08:74:cf:94:00:fd:32:42:10:f3:
                    9f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:65:D7:8A:7D:A8:77:6B:B7:45:C5:69:51:B8:DC:CA:4A:24:60:A1
            X509v3 Authority Key Identifier:
                keyid:21:09:BE:32:1B:AA:48:98:53:B9:5D:D9:EB:28:82:D4:F8:24:F0:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/323830343a353737633a313230303a3a2f34302d3430203d3e20323638303638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:577c:1200::/40

    Signature Algorithm: sha256WithRSAEncryption
         78:66:5e:d3:16:f2:a6:9a:ac:a5:d8:4b:17:cb:4b:57:5f:a3:
         7c:bc:45:34:ce:3b:5b:43:96:af:de:08:93:65:0d:41:8b:a1:
         0e:02:0e:16:27:f4:6f:1f:ba:6e:a6:36:17:43:d4:84:a8:da:
         09:e2:38:3e:db:e4:64:4d:6d:63:4a:02:12:a2:04:55:a0:81:
         0b:8d:a5:d5:11:4f:77:67:33:f9:21:0c:26:61:eb:04:51:40:
         78:30:ac:8b:92:f1:89:2f:4b:64:82:32:d5:ab:b7:1e:9d:cc:
         de:5f:f2:c1:81:e6:06:ce:c0:96:38:d9:ca:89:03:9d:4c:ab:
         0d:72:a6:9d:b1:58:46:78:36:a3:0c:13:fb:ec:bf:df:65:1a:
         bf:65:1c:ef:03:f5:b2:19:55:c9:ca:52:a6:83:02:39:6f:82:
         0e:54:f2:92:95:70:82:eb:5a:46:13:a0:37:58:0d:75:5a:b2:
         97:90:80:f1:90:17:02:c6:e3:a2:4f:86:e1:e6:fe:89:a0:f3:
         39:b8:6b:22:a6:bc:26:b6:06:10:46:f9:ab:3d:a2:e2:0a:6f:
         17:69:1d:d2:f6:c6:91:8f:35:dd:a1:41:23:76:b2:f8:8d:f0:
         50:f9:fc:08:67:f2:cd:12:7d:ba:d1:a8:a8:cc:51:46:3a:72:
         16:8d:50:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:14:55 2025 by rpki-client