Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a383030303a3a2f33332d3430203d3e20323638373037.roa
File:                     323830343a353938343a383030303a3a2f33332d3430203d3e20323638373037.roa (raw, json)
Hash identifier:          oCb2GMNr3Jd6mQMD3CBhlZ3pjSFmnOByLHJ07VRAnw4=
Subject key identifier:   BF:46:D4:22:B4:FA:50:A6:19:22:18:3E:AE:8D:F0:BD:A6:A9:B0:74
Certificate issuer:       /CN=3A0553EF24FC84C740FC8DE9257801A2C7A0ADA1
Certificate serial:       4E6F89328B8660AEC7F20D8B66B28C32F08F169C
Authority key identifier: 3A:05:53:EF:24:FC:84:C7:40:FC:8D:E9:25:78:01:A2:C7:A0:AD:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A0553EF24FC84C740FC8DE9257801A2C7A0ADA1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a383030303a3a2f33332d3430203d3e20323638373037.roa
Signing time:             Sun 19 Jan 2025 00:40:55 +0000
ROA not before:           Sun 19 Jan 2025 00:35:55 +0000
ROA not after:            Sun 18 Jan 2026 00:40:55 +0000
asID:                     268707
IP address blocks:        2804:5984:8000::/33 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:6f:89:32:8b:86:60:ae:c7:f2:0d:8b:66:b2:8c:32:f0:8f:16:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A0553EF24FC84C740FC8DE9257801A2C7A0ADA1
        Validity
            Not Before: Jan 19 00:35:55 2025 GMT
            Not After : Jan 18 00:40:55 2026 GMT
        Subject: CN=BF46D422B4FA50A61922183EAE8DF0BDA6A9B074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4c:6c:05:26:ff:19:34:6e:cd:2a:42:e5:d7:
                    99:c6:68:c1:05:dc:01:2c:e6:d8:11:74:31:7f:0a:
                    78:44:df:8f:f0:52:4d:56:9c:f6:96:c0:b1:08:d4:
                    44:1f:50:de:66:c2:42:bf:46:2e:f3:ec:61:c5:b9:
                    36:f8:dc:93:ec:83:cf:1b:ef:0f:9c:70:1a:15:92:
                    05:f5:e6:84:87:e3:89:15:73:31:83:49:42:93:43:
                    7d:a4:45:1b:74:eb:40:f1:33:85:b1:ac:dc:f9:b0:
                    1c:44:10:91:ab:61:8c:a5:d2:04:72:c0:5f:52:b8:
                    91:02:b7:80:3d:03:a5:db:28:4b:09:f4:af:2d:9b:
                    1e:08:ae:b6:b0:49:01:42:ee:55:35:0e:e2:ca:c0:
                    f1:16:4e:94:40:4e:ea:e8:29:29:3c:43:46:a0:55:
                    88:31:88:07:79:fd:9c:52:09:a8:d6:7e:3f:32:2b:
                    89:9e:8d:db:79:de:89:9d:eb:dc:0e:a9:42:54:64:
                    32:08:e6:25:69:2d:1a:b7:2a:6f:93:78:37:92:5f:
                    21:78:20:a6:a1:aa:80:0a:42:c7:71:0d:cb:b2:61:
                    0d:86:79:e6:d5:8f:b0:43:92:d9:14:2d:81:66:fb:
                    a6:6b:f7:0a:12:c4:0c:d1:fc:df:16:93:97:f9:f7:
                    3a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:46:D4:22:B4:FA:50:A6:19:22:18:3E:AE:8D:F0:BD:A6:A9:B0:74
            X509v3 Authority Key Identifier:
                keyid:3A:05:53:EF:24:FC:84:C7:40:FC:8D:E9:25:78:01:A2:C7:A0:AD:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/3A0553EF24FC84C740FC8DE9257801A2C7A0ADA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A0553EF24FC84C740FC8DE9257801A2C7A0ADA1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a383030303a3a2f33332d3430203d3e20323638373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5984:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         1a:40:68:7c:33:99:9f:80:37:1b:cc:9c:e0:53:8e:c4:df:41:
         1b:bb:27:2a:70:c0:e4:82:ea:33:89:6a:2c:15:e3:cf:e6:ed:
         2c:8c:fa:5c:ae:99:f7:9d:8a:e8:e7:dc:4c:58:74:70:1f:25:
         db:96:7c:56:78:ff:fe:17:c6:a5:03:0e:1f:51:1a:a2:5c:dc:
         b7:ca:c7:2b:a7:ed:14:b8:9d:8c:18:e7:50:5f:3f:62:b2:71:
         db:18:07:b0:c3:0e:42:32:f4:a2:de:29:d4:7d:b5:73:b3:e2:
         61:a0:f8:13:1c:28:8c:eb:6e:48:58:bb:bf:3a:e4:28:de:59:
         29:76:94:1c:a0:83:9d:bf:1e:32:bb:4a:a2:19:13:b0:d0:f8:
         ef:dc:48:21:1e:ed:c1:9e:7d:19:db:dd:8b:04:c4:2f:a2:7b:
         8b:63:98:88:58:79:3c:6f:8e:d8:e5:5e:3e:ad:5e:f8:79:ac:
         45:14:1b:06:87:bd:34:94:a4:48:7b:71:3a:75:42:da:50:dc:
         ec:b8:fa:79:5c:02:a5:7b:3b:45:82:0f:ff:62:2e:c6:6a:8f:
         6d:ef:94:db:84:6e:de:bb:9a:a2:5e:82:23:cf:00:b6:4d:51:
         06:38:2d:3b:f1:d2:23:de:a3:90:8f:6a:9e:4d:a1:d6:74:b5:
         fc:db:b0:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:29:29 2025 by rpki-client