Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a623030303a3a2f33362d3336203d3e20323634313431.roa
File:                     323830343a316530633a623030303a3a2f33362d3336203d3e20323634313431.roa (raw, json)
Hash identifier:          UYakXZQMzXuptXY2I4pEQxdYRmLOCcDo8X2/8IAwVOU=
Subject key identifier:   DA:EE:D9:C2:C1:EB:00:B4:DF:A2:41:87:E5:2D:4D:E2:62:B0:F5:9F
Certificate issuer:       /CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
Certificate serial:       11EBEE3EDFEA58CA934FC0AB4C1C2133BD0A95A3
Authority key identifier: A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a623030303a3a2f33362d3336203d3e20323634313431.roa
Signing time:             Thu 02 Jan 2025 22:48:07 +0000
ROA not before:           Thu 02 Jan 2025 22:43:07 +0000
ROA not after:            Thu 01 Jan 2026 22:48:07 +0000
asID:                     264141
IP address blocks:        2804:1e0c:b000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:eb:ee:3e:df:ea:58:ca:93:4f:c0:ab:4c:1c:21:33:bd:0a:95:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
        Validity
            Not Before: Jan  2 22:43:07 2025 GMT
            Not After : Jan  1 22:48:07 2026 GMT
        Subject: CN=DAEED9C2C1EB00B4DFA24187E52D4DE262B0F59F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c3:e0:00:89:17:93:76:b6:3b:08:5a:3f:c5:
                    cb:3a:55:d8:82:03:bd:9b:6a:22:80:2c:ef:c8:c0:
                    e3:69:33:65:ea:f2:2b:1b:e9:9a:0b:26:e7:c7:1a:
                    dc:d2:c3:7c:f3:33:8e:ac:4c:90:9b:a9:c6:e3:77:
                    a3:77:27:fa:42:b5:55:6f:ce:7e:77:1c:b9:25:e4:
                    34:c5:a3:1d:2a:ee:1f:ba:d7:e6:15:92:a7:f1:6b:
                    3e:03:4e:24:9c:03:87:f4:40:05:b2:6d:5b:1e:df:
                    ad:49:3c:6f:ed:b5:8f:5f:1e:85:25:06:1c:c7:fe:
                    42:fa:43:91:38:4f:90:a5:4b:16:4e:b5:db:dc:e9:
                    c5:82:cb:cb:50:6f:59:cb:62:2a:12:87:52:52:2c:
                    64:ad:58:40:3c:52:d9:2a:8b:65:fc:7d:51:22:52:
                    4b:35:9b:16:f0:0f:f0:7f:08:61:62:3a:e8:4d:a6:
                    40:f3:7c:18:69:e5:0f:55:ce:2f:5e:21:7b:5f:8f:
                    16:1f:4d:a9:71:35:19:71:99:dc:90:45:42:70:01:
                    ac:e6:c4:95:08:26:e7:3e:1d:39:bb:0d:00:4f:28:
                    a0:95:7a:04:29:56:5c:03:c4:99:f9:47:e2:80:2f:
                    b5:07:19:f9:0f:4f:61:e6:db:af:a5:5b:63:5d:d2:
                    18:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:EE:D9:C2:C1:EB:00:B4:DF:A2:41:87:E5:2D:4D:E2:62:B0:F5:9F
            X509v3 Authority Key Identifier:
                keyid:A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a623030303a3a2f33362d3336203d3e20323634313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e0c:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         17:e1:54:11:8c:51:fd:1a:40:cf:17:6f:4a:f9:30:93:96:fa:
         ba:f6:bc:6e:a2:d9:55:b2:cc:a3:be:40:82:e3:5c:9f:b3:b6:
         cd:ea:89:09:3d:2e:7f:93:44:ae:36:86:64:d2:49:ff:bd:d3:
         51:72:6d:d4:45:d3:5e:68:82:37:6d:25:af:76:6f:45:92:62:
         ad:ae:7a:1c:a8:87:95:ec:0d:e9:48:55:d1:4a:37:31:2a:6a:
         bb:d0:91:6a:f7:ad:4d:29:27:46:1c:6b:b7:80:0f:4c:e1:24:
         75:fd:50:4f:78:bc:aa:49:6f:e1:73:c3:96:49:46:af:af:e6:
         47:33:0e:b4:a4:45:ef:82:16:45:3c:a3:4c:a1:85:21:89:37:
         6a:b1:b6:bd:e4:49:b9:ac:45:23:e8:4e:b7:d5:e0:83:ef:dd:
         a8:f9:d8:e9:fc:e5:8f:79:e6:1c:ed:c5:17:08:33:56:c1:6a:
         a9:34:4e:10:68:53:ff:41:0d:84:ec:03:8d:36:e4:eb:67:a6:
         eb:77:2a:d1:cd:2b:f6:4a:d6:2b:92:64:c0:3d:66:f4:f7:93:
         5b:12:11:5f:39:a5:ed:b0:c4:13:a6:7f:e7:bb:9f:fe:b5:d7:
         97:fa:86:e4:e4:c9:02:e7:9f:fb:ee:f7:5c:fe:45:27:88:56:
         66:48:e3:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:23:26 2025 by rpki-client