Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/323830343a363832343a3a2f33332d3333203d3e20323639363731.roa
File:                     323830343a363832343a3a2f33332d3333203d3e20323639363731.roa (raw, json)
Hash identifier:          Vwuc93CL32dGIRqHOmNM+xqMhWnZH7TUDLB68qes81Y=
Subject key identifier:   A6:6C:B1:FC:F5:D5:51:10:19:5D:93:E8:FF:2D:CD:E8:CD:31:18:ED
Certificate issuer:       /CN=A8FC278A9DF8FB8583D4E245CEC50839A8C89EE6
Certificate serial:       53E26306079971091AA4EC813A1D19704DEDBD6F
Authority key identifier: A8:FC:27:8A:9D:F8:FB:85:83:D4:E2:45:CE:C5:08:39:A8:C8:9E:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8FC278A9DF8FB8583D4E245CEC50839A8C89EE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/323830343a363832343a3a2f33332d3333203d3e20323639363731.roa
Signing time:             Fri 20 Dec 2024 14:12:54 +0000
ROA not before:           Fri 20 Dec 2024 14:07:54 +0000
ROA not after:            Fri 19 Dec 2025 14:12:54 +0000
asID:                     269671
IP address blocks:        2804:6824::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:e2:63:06:07:99:71:09:1a:a4:ec:81:3a:1d:19:70:4d:ed:bd:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8FC278A9DF8FB8583D4E245CEC50839A8C89EE6
        Validity
            Not Before: Dec 20 14:07:54 2024 GMT
            Not After : Dec 19 14:12:54 2025 GMT
        Subject: CN=A66CB1FCF5D55110195D93E8FF2DCDE8CD3118ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f3:4d:a5:da:6e:81:0e:95:b2:60:db:ab:d3:
                    39:ae:0b:56:22:02:73:b1:4b:ff:32:de:7b:01:46:
                    be:7d:b4:01:6d:8c:9d:5d:92:07:eb:68:c3:39:0f:
                    ec:a3:14:b7:8e:ea:52:ae:bc:0a:89:2d:1c:c8:ac:
                    e3:2e:3d:8d:8e:a1:77:e3:31:86:c3:4f:c7:5f:e4:
                    26:b8:19:7d:42:a0:88:ae:39:3d:b6:4e:09:d2:e5:
                    2c:1b:f0:cf:44:76:0b:50:56:27:cb:8b:77:bb:63:
                    19:f8:b2:06:92:4d:06:f5:b5:8f:b8:5c:d4:17:f6:
                    d8:0f:f7:02:c6:10:f9:68:f6:40:ec:83:a5:f4:82:
                    c2:b3:10:c9:a3:89:7f:99:cf:13:7e:54:3e:87:96:
                    b6:5c:ef:5d:b1:a6:02:19:8c:a0:79:f8:1f:43:5a:
                    5e:84:c1:37:ef:fe:14:87:e3:9f:2e:30:80:32:3f:
                    6f:75:32:de:96:38:c4:d0:d1:68:cf:e7:27:3a:02:
                    ed:07:3a:ce:cc:ad:ac:76:f4:55:16:da:00:fc:9e:
                    66:88:41:d4:0f:e8:34:30:3b:14:55:d7:7c:39:fe:
                    4a:e1:fb:26:2f:b9:04:2f:09:3a:0e:e0:31:7c:62:
                    1d:34:c1:2b:ab:6a:4a:12:74:79:30:5e:55:c5:25:
                    8c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:6C:B1:FC:F5:D5:51:10:19:5D:93:E8:FF:2D:CD:E8:CD:31:18:ED
            X509v3 Authority Key Identifier:
                keyid:A8:FC:27:8A:9D:F8:FB:85:83:D4:E2:45:CE:C5:08:39:A8:C8:9E:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/A8FC278A9DF8FB8583D4E245CEC50839A8C89EE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8FC278A9DF8FB8583D4E245CEC50839A8C89EE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/323830343a363832343a3a2f33332d3333203d3e20323639363731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6824::/33

    Signature Algorithm: sha256WithRSAEncryption
         93:40:61:bd:41:43:35:2d:47:6b:c8:2b:76:e3:56:02:a0:58:
         29:45:21:db:bc:45:0a:27:c4:39:aa:88:1b:64:53:25:b8:5a:
         24:97:d3:ab:89:33:d5:4c:3a:1e:2e:de:5c:ae:b1:ae:3c:45:
         98:df:3c:65:5b:09:e2:02:da:88:f8:b8:5f:0b:86:5c:70:6c:
         29:f6:6a:59:a4:75:8f:dd:71:ab:59:a2:04:fd:eb:22:50:a7:
         b6:a1:5b:7d:fb:3a:7e:09:6e:55:61:3d:10:aa:77:9c:e4:b7:
         5f:64:7d:8d:e9:d2:64:69:8e:e5:bb:57:41:49:34:ad:bc:cc:
         4b:8d:09:28:3d:19:29:e6:7e:d7:da:95:58:1e:93:ca:cb:5d:
         af:5d:56:9b:e6:f2:f2:62:c2:10:1a:26:29:5b:88:0d:ba:ff:
         92:e3:91:d2:48:f7:6e:84:76:08:db:3f:d2:9c:5a:37:8a:12:
         de:9a:9d:a2:83:5a:67:e6:1a:39:11:56:9b:da:01:ff:eb:e9:
         f6:37:23:bf:f8:49:86:25:0b:14:b3:05:41:cc:6b:a6:0d:d8:
         18:1c:ee:f9:7f:66:cc:2f:37:b7:27:a0:b0:0e:a9:f8:dc:1d:
         8b:4b:79:cd:f5:0a:50:ce:f3:9f:33:ec:29:8c:eb:3e:93:92:
         36:72:79:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 13:56:51 2025 by rpki-client