Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/323830343a333231303a3a2f33322d313238203d3e20323632373739.roa
File:                     323830343a333231303a3a2f33322d313238203d3e20323632373739.roa (raw, json)
Hash identifier:          zG878TrgyV+0ISLLjvlCVZXkLKWMN06Be20vEAVVT+4=
Subject key identifier:   74:D3:F3:A8:8C:26:64:B0:10:A5:6A:BA:F4:ED:57:94:39:C5:78:E5
Certificate issuer:       /CN=E069EE1BA9C7A36827171560AD990CCC81000EA7
Certificate serial:       0A252A23909A256D97BA1139D50CAC8B75AAC75F
Authority key identifier: E0:69:EE:1B:A9:C7:A3:68:27:17:15:60:AD:99:0C:CC:81:00:0E:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E069EE1BA9C7A36827171560AD990CCC81000EA7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/323830343a333231303a3a2f33322d313238203d3e20323632373739.roa
Signing time:             Mon 27 Jan 2025 13:22:16 +0000
ROA not before:           Mon 27 Jan 2025 13:17:16 +0000
ROA not after:            Mon 26 Jan 2026 13:22:16 +0000
asID:                     262779
IP address blocks:        2804:3210::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:25:2a:23:90:9a:25:6d:97:ba:11:39:d5:0c:ac:8b:75:aa:c7:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E069EE1BA9C7A36827171560AD990CCC81000EA7
        Validity
            Not Before: Jan 27 13:17:16 2025 GMT
            Not After : Jan 26 13:22:16 2026 GMT
        Subject: CN=74D3F3A88C2664B010A56ABAF4ED579439C578E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:9c:b2:c6:e2:04:7a:d1:f3:80:3e:6c:e4:67:
                    7a:01:47:25:0a:75:a3:9d:da:70:0f:fc:33:55:52:
                    2b:9d:68:09:47:0b:2e:be:4a:18:9e:98:99:21:f7:
                    e1:b2:63:85:17:1d:88:f5:6e:f7:44:99:7b:04:25:
                    d6:0e:94:af:b9:7c:68:87:a0:92:9f:5d:72:b0:fb:
                    cd:53:a6:94:3e:5b:ef:4c:9b:11:c0:f6:2e:83:0d:
                    0b:14:50:63:b3:95:70:b9:c3:e7:c1:f6:5f:e6:16:
                    df:a3:b2:af:e0:e8:c2:95:77:46:b1:c1:94:bf:4c:
                    66:bf:33:81:6a:99:ad:6e:41:44:c4:cb:8a:1e:25:
                    a6:ab:9c:b8:17:62:32:75:bc:20:aa:93:04:da:74:
                    68:a3:87:c1:30:30:14:bf:57:57:8c:e2:94:85:58:
                    a1:fb:49:1b:d9:12:1f:5c:c8:ab:9a:36:c3:f0:c6:
                    66:c4:30:8a:87:8d:55:9a:92:f0:d2:13:f9:4f:e3:
                    0f:8a:b8:c6:24:a2:bd:54:f6:8e:52:1a:53:fd:08:
                    58:0b:e7:ff:36:0a:37:01:15:99:d1:78:6d:1c:b1:
                    c4:f5:b5:ba:73:39:d6:e6:ec:96:98:85:1b:9d:22:
                    6e:99:f3:bc:4d:17:89:f2:b0:00:a8:5e:aa:df:b5:
                    f1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:D3:F3:A8:8C:26:64:B0:10:A5:6A:BA:F4:ED:57:94:39:C5:78:E5
            X509v3 Authority Key Identifier:
                keyid:E0:69:EE:1B:A9:C7:A3:68:27:17:15:60:AD:99:0C:CC:81:00:0E:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/E069EE1BA9C7A36827171560AD990CCC81000EA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E069EE1BA9C7A36827171560AD990CCC81000EA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/323830343a333231303a3a2f33322d313238203d3e20323632373739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3210::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:c3:ab:f4:55:56:4b:f1:f8:76:c8:d6:91:8a:69:84:11:9f:
         76:85:f7:6c:46:d0:5e:e1:fc:29:68:18:df:03:4e:08:34:40:
         47:a9:ef:ba:f8:08:16:a4:51:57:0c:3e:87:93:9b:ad:66:29:
         fb:21:83:54:18:2b:ee:06:ec:d0:40:63:66:3f:69:f6:63:54:
         f5:5a:8a:16:6c:1d:52:e8:7c:f5:d1:b9:0b:7e:84:b1:6d:b7:
         3d:38:d0:0f:31:40:33:e7:ea:e4:f1:27:51:ea:f9:53:81:93:
         2d:d7:6a:33:3d:75:e0:fe:56:26:df:70:e5:0a:16:6d:9c:a0:
         35:42:73:ca:1c:59:2a:39:78:d0:cf:7e:7b:b9:65:ff:17:40:
         58:18:92:75:61:91:54:b3:30:d8:a4:ac:74:9e:14:59:77:23:
         6c:06:dd:81:5c:f5:17:aa:4b:63:02:92:86:ff:9b:1a:26:c3:
         87:62:34:0e:ee:4f:26:24:7a:6f:57:ee:90:6f:a5:9e:00:19:
         90:ee:08:0c:aa:b6:78:2f:24:ec:df:ee:f8:c4:73:92:e8:b6:
         bb:a6:14:6f:d6:d0:3a:7b:be:94:5a:0e:26:64:1c:29:5b:a6:
         12:46:9b:2a:c4:df:c5:d0:7a:e9:67:a2:f8:93:0d:a6:8f:0e:
         9e:8c:12:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:45:26 2025 by rpki-client