Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a383030303a3a2f33352d3335203d3e20323634313431.roa
File:                     323830343a316530633a383030303a3a2f33352d3335203d3e20323634313431.roa (raw, json)
Hash identifier:          HToDzXr+4tK086ZCcwIVTKBtS++tX8Sd+9U6+DchcyE=
Subject key identifier:   E0:75:2A:DD:49:43:3B:8D:27:D0:9A:73:E7:B0:4E:1B:B5:8C:6F:89
Certificate issuer:       /CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
Certificate serial:       66D4B6A15A0985AFA6408F44F0A316012DECBA04
Authority key identifier: A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a383030303a3a2f33352d3335203d3e20323634313431.roa
Signing time:             Thu 02 Jan 2025 20:04:53 +0000
ROA not before:           Thu 02 Jan 2025 19:59:53 +0000
ROA not after:            Thu 01 Jan 2026 20:04:53 +0000
asID:                     264141
IP address blocks:        2804:1e0c:8000::/35 maxlen: 35
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:d4:b6:a1:5a:09:85:af:a6:40:8f:44:f0:a3:16:01:2d:ec:ba:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
        Validity
            Not Before: Jan  2 19:59:53 2025 GMT
            Not After : Jan  1 20:04:53 2026 GMT
        Subject: CN=E0752ADD49433B8D27D09A73E7B04E1BB58C6F89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:36:51:70:77:e6:bd:bb:a4:68:dc:54:d0:f9:
                    2e:47:2d:d9:c1:88:ab:93:b2:88:b9:c3:40:70:6f:
                    d9:01:e1:42:ef:03:c7:e4:9e:0a:ad:dd:08:53:e9:
                    09:5b:27:a1:34:fe:13:ba:5a:a4:ac:35:71:f6:26:
                    42:93:ee:a2:3c:6f:9e:ff:10:4e:7c:3b:c8:c8:fe:
                    d6:02:fb:ed:07:4c:94:c1:fc:bf:33:08:02:9d:35:
                    07:88:db:ed:bc:ab:6b:6d:b2:33:f6:55:66:f9:e4:
                    31:ab:3b:e7:85:96:03:d6:c6:24:a4:ec:59:d3:a7:
                    ed:09:65:97:e0:c1:1a:69:4a:5e:b9:7a:28:6f:c6:
                    f7:10:c8:1e:ac:b4:e3:62:7d:a5:dd:87:a6:ab:76:
                    a6:bb:11:ca:c0:c9:3e:17:a7:81:e8:29:1e:4e:d9:
                    ab:67:06:e3:6e:c3:1c:91:c6:95:c7:10:e4:28:bf:
                    cd:3e:ab:54:91:4f:5f:dd:56:7b:07:45:d0:88:c8:
                    d8:6c:50:33:06:4d:11:ef:cc:85:f4:27:8b:a9:6a:
                    d3:99:ed:0f:49:d8:b8:96:c8:ca:05:e1:e8:c2:14:
                    3e:c3:91:33:75:c5:c1:b1:5e:02:42:3b:0f:37:10:
                    5f:6f:cb:01:32:02:e1:15:55:1a:fb:fc:d4:76:62:
                    71:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:75:2A:DD:49:43:3B:8D:27:D0:9A:73:E7:B0:4E:1B:B5:8C:6F:89
            X509v3 Authority Key Identifier:
                keyid:A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a383030303a3a2f33352d3335203d3e20323634313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e0c:8000::/35

    Signature Algorithm: sha256WithRSAEncryption
         95:69:85:0a:f0:a6:9c:b1:f9:f6:8e:e1:26:e2:8a:ff:3a:e3:
         78:1a:e8:f9:6c:8c:c0:93:ec:90:78:f1:12:61:40:81:48:2f:
         f5:74:6e:6d:bb:a5:d7:15:bc:4c:a9:06:09:21:bf:97:f5:48:
         c2:f5:b2:8c:4b:2d:50:31:4a:0e:8a:5e:85:31:ae:7b:ab:94:
         a1:68:ed:fb:21:92:84:e8:ed:4b:9b:a3:16:6e:13:00:22:12:
         fb:b3:32:6c:6f:a4:14:8c:5c:80:85:e6:61:36:33:1a:e1:82:
         a2:b7:3e:10:76:0a:4e:05:3f:78:59:9a:3a:82:61:48:7a:69:
         cb:bd:d9:7e:ad:11:b3:e6:28:ba:d4:8e:7a:d6:41:c6:de:f0:
         bc:74:f8:18:0d:88:32:8d:88:ef:9d:1d:b0:00:c9:e9:1e:39:
         eb:d7:28:f0:72:69:b7:93:cf:f1:d8:eb:80:6e:74:7b:61:8e:
         3b:5b:31:dd:0c:e5:b9:bb:e6:50:09:cb:5e:90:53:43:1c:92:
         e3:64:f9:b2:6d:22:d3:75:5d:ab:1c:4b:79:6c:36:bd:ac:40:
         c3:03:a0:ed:ad:aa:09:9b:f9:c2:c4:a9:d3:57:bb:0c:ac:9e:
         2a:ab:ea:cd:26:6d:d6:ae:2a:e7:2f:a4:98:2e:1d:ff:18:a0:
         15:71:39:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:21:48 2025 by rpki-client