Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/323830343a313934633a3a2f33322d3438203d3e203631373835.roa
File:                     323830343a313934633a3a2f33322d3438203d3e203631373835.roa (raw, json)
Hash identifier:          7DpAN6ZwJNLLi5LZc+dNaHGwCDCpsDXmvJWGhaU2TR4=
Subject key identifier:   42:3C:03:4C:09:6F:A9:62:A0:EA:9D:FC:2B:11:03:F8:6C:80:57:C7
Certificate issuer:       /CN=78DCBCCBBA458183D7705328DD214CA0953E3E21
Certificate serial:       198D77478823AAEE5937697B3C2E12D264335281
Authority key identifier: 78:DC:BC:CB:BA:45:81:83:D7:70:53:28:DD:21:4C:A0:95:3E:3E:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78DCBCCBBA458183D7705328DD214CA0953E3E21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/323830343a313934633a3a2f33322d3438203d3e203631373835.roa
Signing time:             Tue 31 Dec 2024 16:16:47 +0000
ROA not before:           Tue 31 Dec 2024 16:11:47 +0000
ROA not after:            Tue 30 Dec 2025 16:16:47 +0000
asID:                     61785
IP address blocks:        2804:194c::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:8d:77:47:88:23:aa:ee:59:37:69:7b:3c:2e:12:d2:64:33:52:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78DCBCCBBA458183D7705328DD214CA0953E3E21
        Validity
            Not Before: Dec 31 16:11:47 2024 GMT
            Not After : Dec 30 16:16:47 2025 GMT
        Subject: CN=423C034C096FA962A0EA9DFC2B1103F86C8057C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:57:65:88:74:46:c6:b4:ae:42:a2:03:22:5d:
                    0d:0b:38:6a:55:f0:46:8d:ab:2b:bd:e9:36:ad:fd:
                    af:71:c1:01:1c:bf:9a:b2:05:d5:31:3e:12:81:45:
                    ca:fe:9b:49:1a:97:d5:eb:14:ec:d6:9f:35:f6:af:
                    e4:35:48:ed:b2:31:c6:1b:f9:d2:5c:42:10:d3:e5:
                    53:a5:01:9c:79:06:21:7b:37:0b:b5:0e:aa:98:47:
                    ba:f7:8c:2d:68:86:07:90:39:ba:ba:3a:63:2c:28:
                    36:6d:65:1f:85:71:91:db:8c:4d:d9:03:a0:92:11:
                    61:1d:5f:e9:90:e9:85:1c:a9:e7:82:1c:5c:9a:9f:
                    1d:2d:b1:b3:7d:71:5f:27:6e:5f:88:4d:26:c6:2e:
                    16:2f:15:c2:7d:66:93:a5:a7:b7:19:f6:32:35:12:
                    e6:06:bf:27:24:95:96:92:6b:15:cf:94:65:f3:7f:
                    bc:13:b1:b3:13:0b:ca:18:f5:b1:7c:1b:27:35:6f:
                    b0:4f:86:2b:e4:ff:e6:5e:74:8f:f9:5c:a5:0d:d7:
                    1b:a2:80:75:42:97:d8:24:46:b5:51:18:c0:f8:0f:
                    0f:07:bd:ac:0c:0c:79:f1:fa:5b:1c:ee:f3:d5:74:
                    72:54:89:cf:df:60:83:1b:57:57:7f:ea:45:50:89:
                    bb:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:3C:03:4C:09:6F:A9:62:A0:EA:9D:FC:2B:11:03:F8:6C:80:57:C7
            X509v3 Authority Key Identifier:
                keyid:78:DC:BC:CB:BA:45:81:83:D7:70:53:28:DD:21:4C:A0:95:3E:3E:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/78DCBCCBBA458183D7705328DD214CA0953E3E21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78DCBCCBBA458183D7705328DD214CA0953E3E21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/323830343a313934633a3a2f33322d3438203d3e203631373835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:194c::/32

    Signature Algorithm: sha256WithRSAEncryption
         de:c2:e9:91:9d:5f:00:5b:a2:4e:07:99:88:8a:fd:84:a6:16:
         47:60:a7:38:dd:04:78:19:9f:46:31:05:d5:6e:06:81:76:50:
         cf:63:6a:8a:da:01:be:9a:51:a6:cc:5d:a7:f9:fb:50:c5:13:
         56:91:8d:b8:00:93:ab:eb:9e:e7:67:c1:96:2e:c8:1f:1c:44:
         96:09:e0:12:a0:fa:97:96:b1:44:51:2a:43:3c:51:7a:ff:30:
         7a:12:86:d9:8f:cf:65:b6:12:e3:ae:f9:31:d5:15:0d:f9:cc:
         3c:c5:9d:a7:6d:4e:53:ab:86:f1:c8:73:2a:b3:fb:28:26:e9:
         6a:61:51:9d:fa:21:fb:25:65:b2:a4:22:25:d3:c9:4d:e6:00:
         f0:34:1d:1c:8a:f2:a2:7e:37:e9:c5:2a:40:f3:f7:93:1e:9f:
         1b:46:7d:3a:f5:93:69:20:e3:81:5b:81:17:b6:3a:ef:ea:34:
         65:bd:de:40:de:99:27:6b:b3:e7:04:a8:27:1e:c1:6e:e0:38:
         a3:fd:28:02:59:73:3e:5b:d6:f9:4d:c5:fa:bc:0d:f8:d8:ac:
         23:24:6b:cb:a1:51:6f:ad:52:7e:20:c5:2b:c8:07:66:f4:36:
         10:04:6c:5c:e3:84:19:5d:5d:54:c0:91:3f:84:89:66:7e:9a:
         1d:c4:dd:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 05:13:33 2025 by rpki-client