Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ayoo3qWfo8vDpMcgCGFebJFgrBhWPPywgVeacZzmaaJN/0/323830343a353465343a3a2f33322d3332203d3e20323638363736.roa
File:                     323830343a353465343a3a2f33322d3332203d3e20323638363736.roa (raw, json)
Hash identifier:          MYeR+ee27CRggKQKeiekVgWEbxhvyCbMvBNmJrHL934=
Subject key identifier:   6C:0A:20:60:79:18:7D:9D:87:30:94:C4:DA:4F:38:31:49:E2:CC:D7
Certificate issuer:       /CN=EFECFF06B567336335B796BF5ACABEA67659A437
Certificate serial:       5BD488C7050F614F57D61AA0B6882503B8572418
Authority key identifier: EF:EC:FF:06:B5:67:33:63:35:B7:96:BF:5A:CA:BE:A6:76:59:A4:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFECFF06B567336335B796BF5ACABEA67659A437.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ayoo3qWfo8vDpMcgCGFebJFgrBhWPPywgVeacZzmaaJN/0/323830343a353465343a3a2f33322d3332203d3e20323638363736.roa
Signing time:             Mon 06 May 2024 14:09:15 +0000
ROA not before:           Mon 06 May 2024 14:04:15 +0000
ROA not after:            Mon 05 May 2025 14:09:15 +0000
asID:                     268676
IP address blocks:        2804:54e4::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:d4:88:c7:05:0f:61:4f:57:d6:1a:a0:b6:88:25:03:b8:57:24:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFECFF06B567336335B796BF5ACABEA67659A437
        Validity
            Not Before: May  6 14:04:15 2024 GMT
            Not After : May  5 14:09:15 2025 GMT
        Subject: CN=6C0A206079187D9D873094C4DA4F383149E2CCD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:46:b2:ca:3c:e9:54:69:c6:03:44:b6:e0:6f:
                    fe:10:be:bb:25:d2:ae:29:01:d5:e9:fd:1c:57:17:
                    cc:6c:7f:23:8e:aa:01:f1:71:5a:e5:f4:8a:9c:4b:
                    94:f6:5d:40:1f:6d:05:6e:d2:cf:98:23:8e:ec:d3:
                    c7:56:bb:f9:cb:62:c7:bf:7f:61:f7:d9:37:e4:aa:
                    85:18:51:d0:8a:12:d2:2b:7f:f3:75:ed:49:0c:b4:
                    30:20:6c:c1:d9:df:34:cd:a5:95:6d:1e:95:73:35:
                    77:ed:d3:44:3c:76:89:72:59:87:16:c6:eb:b5:42:
                    47:98:e9:36:39:1f:06:b2:2d:1a:32:b2:cd:ba:69:
                    5a:c2:62:d4:81:b5:91:af:4d:cc:0c:02:20:53:bd:
                    7e:6d:88:8b:78:23:2a:c0:46:97:e8:6d:6e:1b:3a:
                    a6:11:cc:93:05:7b:3d:0d:aa:fe:70:a7:e3:76:d7:
                    43:4c:3d:b9:98:c5:69:ac:b2:dd:ac:f5:43:21:d8:
                    d4:1d:37:4c:2d:48:d1:7f:3c:6d:9d:64:f8:12:ba:
                    a5:07:a3:40:2d:3e:26:5f:e0:ed:76:d4:f2:4d:a9:
                    9d:bc:2d:76:5a:23:6d:d7:6a:45:19:06:b6:98:60:
                    b6:f4:bc:3d:c9:45:d5:19:7a:24:54:e6:98:ff:69:
                    74:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:0A:20:60:79:18:7D:9D:87:30:94:C4:DA:4F:38:31:49:E2:CC:D7
            X509v3 Authority Key Identifier:
                keyid:EF:EC:FF:06:B5:67:33:63:35:B7:96:BF:5A:CA:BE:A6:76:59:A4:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ayoo3qWfo8vDpMcgCGFebJFgrBhWPPywgVeacZzmaaJN/0/EFECFF06B567336335B796BF5ACABEA67659A437.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFECFF06B567336335B796BF5ACABEA67659A437.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ayoo3qWfo8vDpMcgCGFebJFgrBhWPPywgVeacZzmaaJN/0/323830343a353465343a3a2f33322d3332203d3e20323638363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54e4::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:9e:6f:fe:59:1d:57:0d:cb:7a:96:f6:cb:ec:b7:99:a6:b6:
         8f:c3:51:1d:fa:68:65:8f:a1:60:9a:e0:70:7a:a7:52:c9:dc:
         a4:14:c4:d1:83:b3:6f:f1:61:63:16:55:41:05:f8:bb:9c:d2:
         63:a9:6c:a1:80:8c:4c:96:0d:c1:2d:cc:d8:47:a7:a6:e8:70:
         83:3f:dd:46:6e:21:71:4f:a1:6d:75:a6:d6:81:ff:4a:59:ba:
         bf:38:16:b7:ef:18:c5:b2:40:53:8e:63:cc:c6:28:32:de:46:
         97:21:74:9d:27:5c:a2:2c:08:97:db:dd:32:eb:fd:0e:2c:d5:
         a7:ae:a6:bd:0c:d5:5e:5b:af:be:f0:54:0f:f5:75:4e:7f:4a:
         7c:62:e1:c1:f7:4f:38:23:16:58:d9:c9:ae:01:de:99:8c:a0:
         45:02:f2:11:54:a9:a8:4b:27:8b:7a:7e:a5:94:b1:b2:87:d8:
         9a:81:c7:32:81:48:1c:91:cb:1c:53:52:59:df:2b:a0:f1:c8:
         4b:51:79:92:f8:45:e7:d0:c9:ff:3a:df:d1:69:fb:59:8f:d4:
         84:c9:dd:b4:65:c0:d4:31:e6:3f:9c:e8:6b:c2:02:07:68:53:
         ee:e4:66:1e:b3:99:a9:3e:cf:cb:bb:0b:21:1e:8b:28:be:8d:
         e8:80:61:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:42:35 2025 by rpki-client