Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a3a2f33342d3334203d3e20323634313431.roa
File:                     323830343a316530633a3a2f33342d3334203d3e20323634313431.roa (raw, json)
Hash identifier:          uCAlP8P5sP4jkifWt+yUJo2skgHmk5vveB/N5e7Na6U=
Subject key identifier:   AC:70:AB:12:61:18:71:62:BF:0A:D6:C2:2D:99:94:F3:2D:90:A5:5F
Certificate issuer:       /CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
Certificate serial:       551EE144E078998DD30C305FAA1C12856515669D
Authority key identifier: A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a3a2f33342d3334203d3e20323634313431.roa
Signing time:             Thu 02 Jan 2025 19:26:51 +0000
ROA not before:           Thu 02 Jan 2025 19:21:51 +0000
ROA not after:            Thu 01 Jan 2026 19:26:51 +0000
asID:                     264141
IP address blocks:        2804:1e0c::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:1e:e1:44:e0:78:99:8d:d3:0c:30:5f:aa:1c:12:85:65:15:66:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
        Validity
            Not Before: Jan  2 19:21:51 2025 GMT
            Not After : Jan  1 19:26:51 2026 GMT
        Subject: CN=AC70AB1261187162BF0AD6C22D9994F32D90A55F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e7:8b:cb:2d:16:28:94:b8:bf:d3:60:4d:27:
                    62:2e:c6:e7:df:b1:1f:d0:1c:98:7b:cd:17:11:51:
                    63:2c:bc:2d:27:57:b9:4f:34:bf:40:9c:47:6a:23:
                    a0:95:0e:c7:1a:14:d6:64:47:01:cf:0b:88:16:58:
                    eb:5e:67:f1:79:89:92:6f:0a:86:07:71:c3:40:fa:
                    7d:c1:ba:c6:eb:99:6b:27:e0:97:a3:3d:dc:af:d2:
                    65:b0:9f:d4:a6:f0:22:f1:b9:2a:e7:ff:5e:4e:ba:
                    6c:7b:cd:8e:f1:c7:50:9a:7a:f8:56:bd:e7:42:67:
                    75:4b:c1:c1:e1:1a:ae:5a:a4:a7:fa:b3:48:14:ef:
                    a3:25:da:1e:84:5f:c3:ec:77:51:ee:56:82:c8:85:
                    b5:ae:4b:c2:62:79:f5:29:0b:33:88:9e:c9:02:c5:
                    70:f6:8a:84:fd:12:0c:ba:6d:b9:b7:35:65:c7:02:
                    87:cb:c1:96:5f:0c:ad:e9:5f:29:22:f4:d4:30:52:
                    48:2d:46:27:77:de:51:9e:d5:7d:36:34:0b:3f:e6:
                    8c:80:48:1b:09:f6:82:f9:6c:8c:ef:e2:33:74:d1:
                    ec:bc:91:82:8e:e5:0b:43:52:d7:19:1c:f8:af:1c:
                    e5:c3:1e:c7:43:53:a0:2d:f8:0f:99:7a:11:62:21:
                    22:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:70:AB:12:61:18:71:62:BF:0A:D6:C2:2D:99:94:F3:2D:90:A5:5F
            X509v3 Authority Key Identifier:
                keyid:A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a3a2f33342d3334203d3e20323634313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e0c::/34

    Signature Algorithm: sha256WithRSAEncryption
         28:43:fe:0c:0e:41:5a:e2:96:f4:35:e9:1d:8a:73:86:39:07:
         1e:3b:d8:a0:9c:56:26:a8:7d:85:e6:f3:be:45:38:9d:01:e0:
         9b:3e:db:f3:ad:8c:06:db:33:67:bf:f0:53:ef:7e:8b:8c:cc:
         95:3b:c8:54:c6:c8:ce:8d:fb:cd:a6:4c:b5:e2:06:44:92:b7:
         16:49:cc:cd:8d:8c:b4:1a:62:8b:d4:eb:d3:05:da:21:37:1c:
         ca:8b:ff:a6:31:95:4f:5f:ed:8c:99:3f:34:34:3c:5d:90:67:
         db:42:b9:22:ee:73:85:59:93:96:28:b3:0b:26:60:49:ec:b3:
         2a:52:f2:30:9b:d1:46:c8:53:c9:f7:09:09:d5:e4:4f:d2:f7:
         1a:65:a4:d8:9b:b5:bb:a4:41:fb:4d:f2:93:d1:cf:dd:20:15:
         ca:56:a2:77:a0:da:c4:98:46:3c:c1:65:4b:fb:f3:58:ad:d8:
         c0:26:43:c5:4e:d1:df:41:ea:26:43:7a:fe:bf:34:ac:13:3e:
         4f:67:ce:53:50:70:61:e0:0f:e7:3d:af:e3:66:cc:4e:d7:c4:
         f0:08:21:b5:8b:93:79:3b:07:ba:74:74:4c:2e:bb:a0:2e:ea:
         66:8b:5b:54:32:09:eb:99:9d:6b:0c:03:b8:49:30:cb:63:de:
         53:c9:5d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:27:18 2025 by rpki-client