Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AXTFhB56s2xZy1kKEGBF8sV2uNvfYEXRiGYkwiWniKMs/0/323830343a326336343a3a2f33322d3332203d3e20323635323135.roa
File:                     323830343a326336343a3a2f33322d3332203d3e20323635323135.roa (raw, json)
Hash identifier:          lx0uSHMLuP3KoM3J7CrbkDzNLRg/8AY/RNNANYq512s=
Subject key identifier:   BB:CF:F3:F6:CF:B0:CC:94:7A:DB:B5:B4:6B:BC:BD:25:CF:8A:FF:39
Certificate issuer:       /CN=0765A0B5728F13A1D2861A3DF4CF1D82FDAEA614
Certificate serial:       70ECD2C0E306E1D3790848FF699F24DE419E5C83
Authority key identifier: 07:65:A0:B5:72:8F:13:A1:D2:86:1A:3D:F4:CF:1D:82:FD:AE:A6:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0765A0B5728F13A1D2861A3DF4CF1D82FDAEA614.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AXTFhB56s2xZy1kKEGBF8sV2uNvfYEXRiGYkwiWniKMs/0/323830343a326336343a3a2f33322d3332203d3e20323635323135.roa
Signing time:             Wed 08 Jan 2025 16:35:19 +0000
ROA not before:           Wed 08 Jan 2025 16:30:19 +0000
ROA not after:            Wed 07 Jan 2026 16:35:19 +0000
asID:                     265215
IP address blocks:        2804:2c64::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:ec:d2:c0:e3:06:e1:d3:79:08:48:ff:69:9f:24:de:41:9e:5c:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0765A0B5728F13A1D2861A3DF4CF1D82FDAEA614
        Validity
            Not Before: Jan  8 16:30:19 2025 GMT
            Not After : Jan  7 16:35:19 2026 GMT
        Subject: CN=BBCFF3F6CFB0CC947ADBB5B46BBCBD25CF8AFF39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a0:92:62:f9:14:fc:c7:58:96:c2:53:78:dc:
                    0c:b5:47:f1:a9:62:6d:5e:a4:10:52:2d:c9:32:70:
                    49:d6:c8:9e:75:da:30:ae:1c:7a:24:76:96:c4:e2:
                    a2:39:14:aa:a9:6b:24:1d:8b:f7:f7:f6:42:18:00:
                    7f:50:9c:8e:07:b8:63:9a:06:fe:a3:c3:0e:6b:23:
                    b5:a8:53:6e:8b:75:9d:04:43:57:7f:c5:a5:24:be:
                    b4:fd:d0:61:3f:fc:ad:b0:d0:02:9c:a5:8e:41:e8:
                    bd:e5:90:fd:0d:e6:f1:c5:59:1a:0c:8b:7d:c2:8f:
                    4e:59:24:70:9c:e9:62:b8:22:0a:1f:4f:94:09:98:
                    f2:58:e7:d6:65:e5:f1:92:f5:a0:e8:7d:06:f9:e3:
                    af:b2:e3:13:97:b6:7d:94:e7:98:76:e6:23:23:20:
                    72:15:2d:c1:8f:59:44:78:f1:03:a3:8b:73:b0:ee:
                    c1:43:25:d0:56:76:5e:1b:39:40:fa:58:58:6f:20:
                    7e:ac:f8:ff:6e:27:11:e8:7b:e3:c3:6a:5b:25:c7:
                    7a:c4:1d:13:28:32:c5:6e:96:ff:6e:f0:13:76:b1:
                    2e:6d:aa:ce:f0:41:61:55:48:65:62:e4:b3:90:61:
                    9a:69:ce:b3:ff:be:77:aa:0e:56:03:a7:91:8d:0f:
                    95:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:CF:F3:F6:CF:B0:CC:94:7A:DB:B5:B4:6B:BC:BD:25:CF:8A:FF:39
            X509v3 Authority Key Identifier:
                keyid:07:65:A0:B5:72:8F:13:A1:D2:86:1A:3D:F4:CF:1D:82:FD:AE:A6:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AXTFhB56s2xZy1kKEGBF8sV2uNvfYEXRiGYkwiWniKMs/0/0765A0B5728F13A1D2861A3DF4CF1D82FDAEA614.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0765A0B5728F13A1D2861A3DF4CF1D82FDAEA614.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AXTFhB56s2xZy1kKEGBF8sV2uNvfYEXRiGYkwiWniKMs/0/323830343a326336343a3a2f33322d3332203d3e20323635323135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2c64::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:40:7d:6d:8e:9a:50:35:3c:f8:85:61:3d:4d:48:29:47:67:
         f6:eb:33:ce:c3:ef:ab:59:57:d4:5c:dd:0f:c5:26:e2:37:43:
         b9:c2:27:ab:0c:68:7c:35:4d:39:24:63:00:43:62:a1:e6:ee:
         50:01:51:2d:c0:c4:7b:f2:6c:5f:6b:6e:d2:55:1f:b0:94:c1:
         46:3e:1c:7a:c5:e4:3b:91:68:55:c1:7f:ef:cb:9b:b8:84:2d:
         f0:ff:7e:fc:59:db:5e:8f:c6:81:57:2d:34:45:88:4b:66:1e:
         fd:c2:99:a3:07:da:3a:8b:24:ae:67:9d:20:e3:31:ae:be:28:
         ec:dd:d0:d3:d5:00:9f:1a:49:9e:fd:e3:cf:ac:75:60:8e:a6:
         43:81:28:86:a7:52:4a:d9:1f:50:3d:91:29:08:ef:ba:2c:61:
         f2:b9:ab:e5:1f:32:17:40:51:2f:19:5f:7f:4a:2d:11:a0:0b:
         b0:da:c3:da:aa:3f:99:7b:95:c0:a2:a0:62:1d:83:8f:41:be:
         fd:b6:62:f3:eb:d0:27:ec:f7:41:20:43:71:53:74:20:2b:29:
         ec:c5:3d:54:b0:7d:44:f5:38:23:d4:9d:db:f4:0b:39:61:91:
         f1:00:41:77:9e:1b:69:9c:50:c0:bb:30:43:da:30:44:89:6e:
         46:c7:71:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:35:42 2025 by rpki-client