Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ALMiZ2rD3quMNzpUJmyeyChNreVc2WXCGdyXc8py912Y/1/323830343a353165303a3a2f33322d3430203d3e20323638343832.roa
File:                     323830343a353165303a3a2f33322d3430203d3e20323638343832.roa (raw, json)
Hash identifier:          FowjDxZlba0yw1zJGMBV1QGus0KHtceVbkFTKALf62E=
Subject key identifier:   CA:52:C6:9D:BC:F8:CA:7F:F8:8C:72:41:85:B6:D7:E0:28:F9:2B:E3
Certificate issuer:       /CN=83318EF9934F62654EC63A75033AEDCCD1657C52
Certificate serial:       5B4D8F1D131F1E73A3D6EB6055ED8DCD58792D3F
Authority key identifier: 83:31:8E:F9:93:4F:62:65:4E:C6:3A:75:03:3A:ED:CC:D1:65:7C:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83318EF9934F62654EC63A75033AEDCCD1657C52.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ALMiZ2rD3quMNzpUJmyeyChNreVc2WXCGdyXc8py912Y/1/323830343a353165303a3a2f33322d3430203d3e20323638343832.roa
Signing time:             Wed 05 Mar 2025 19:59:38 +0000
ROA not before:           Wed 05 Mar 2025 19:54:38 +0000
ROA not after:            Wed 04 Mar 2026 19:59:38 +0000
asID:                     268482
IP address blocks:        2804:51e0::/32 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:4d:8f:1d:13:1f:1e:73:a3:d6:eb:60:55:ed:8d:cd:58:79:2d:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83318EF9934F62654EC63A75033AEDCCD1657C52
        Validity
            Not Before: Mar  5 19:54:38 2025 GMT
            Not After : Mar  4 19:59:38 2026 GMT
        Subject: CN=CA52C69DBCF8CA7FF88C724185B6D7E028F92BE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:47:02:18:cd:7f:cc:df:b0:c6:a3:cd:f9:31:
                    40:58:98:0d:a7:79:02:9b:0d:25:e5:71:b9:ad:c1:
                    b6:c3:14:c5:b9:1f:e7:d3:e1:ec:e5:7b:90:f0:ae:
                    6a:47:9c:17:dc:d4:5e:e9:b0:35:85:b0:fd:b2:63:
                    74:fa:0a:94:0f:ca:9a:1a:2a:20:a6:3c:30:48:81:
                    84:ab:60:35:6b:9e:d0:83:f0:b3:4c:3d:3c:81:9b:
                    d5:cc:71:e1:e1:dd:d4:4b:a3:57:4e:30:4d:de:c4:
                    13:be:cf:11:28:51:b1:53:ae:03:9f:14:54:63:8c:
                    c1:d2:ba:c2:6e:63:e1:1f:6e:64:e7:12:c0:43:18:
                    85:84:97:83:f4:9f:eb:7b:5e:64:b9:fc:72:7e:d4:
                    73:2b:0f:a1:00:78:c6:ad:5f:02:89:6c:21:e7:62:
                    70:36:cb:a6:63:17:22:d1:de:26:39:24:ca:4a:5e:
                    25:f8:7f:bb:13:12:c6:f3:33:2e:01:62:91:08:fb:
                    10:87:a0:2b:35:d1:aa:d0:fb:5d:7d:bb:01:0d:aa:
                    17:21:f2:f7:0c:b2:04:a1:39:75:c3:68:a5:7d:e6:
                    9b:0e:98:1a:35:2b:b6:7f:3d:91:86:2c:b1:3b:2b:
                    60:96:06:fc:b5:9b:8b:fa:a5:75:37:69:c9:06:00:
                    78:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:52:C6:9D:BC:F8:CA:7F:F8:8C:72:41:85:B6:D7:E0:28:F9:2B:E3
            X509v3 Authority Key Identifier:
                keyid:83:31:8E:F9:93:4F:62:65:4E:C6:3A:75:03:3A:ED:CC:D1:65:7C:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ALMiZ2rD3quMNzpUJmyeyChNreVc2WXCGdyXc8py912Y/1/83318EF9934F62654EC63A75033AEDCCD1657C52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83318EF9934F62654EC63A75033AEDCCD1657C52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ALMiZ2rD3quMNzpUJmyeyChNreVc2WXCGdyXc8py912Y/1/323830343a353165303a3a2f33322d3430203d3e20323638343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:51e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:1a:3a:1a:90:1e:bd:49:2f:38:ee:96:78:19:94:f9:3c:a7:
         c1:9d:cf:44:2e:32:a9:f7:da:2e:64:0e:cb:5d:ba:79:93:dd:
         2a:fa:d1:0d:02:b3:d3:e1:31:ad:66:2f:cd:85:d0:fa:50:fb:
         93:5e:66:9a:37:69:95:90:c4:5b:8e:2a:af:55:c6:6a:e5:f3:
         77:a2:fa:fb:64:a7:8f:02:e3:4c:19:d6:66:42:33:cf:db:dd:
         8c:8f:a7:80:d5:5b:18:29:26:25:ab:13:1d:a4:e1:21:4e:fa:
         f9:39:b6:82:20:40:83:1b:b4:79:14:ba:3f:af:db:ee:19:c0:
         1b:28:23:ef:32:69:19:ba:25:65:0e:60:37:bd:00:74:33:d5:
         56:02:1c:ba:2f:16:60:82:55:bf:f1:d9:7c:e1:15:55:5f:c3:
         a1:71:32:be:dc:2a:c9:b9:a4:6c:17:c1:d5:a5:1b:df:d0:79:
         57:08:e9:8a:d9:56:a6:d8:44:08:51:da:62:8c:cb:8f:6d:ba:
         0e:4f:ea:d3:c0:7d:42:1a:5a:0e:34:49:7c:0e:8d:ba:95:c6:
         28:b4:71:eb:08:c5:ed:f2:db:5b:82:b8:e3:04:fb:41:49:22:
         69:9d:31:14:31:b9:bb:8c:ec:03:d6:62:ac:fe:38:fc:7a:1d:
         7c:ff:52:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:40:15 2025 by rpki-client