Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/323830343a346430633a633030303a3a2f33342d3334203d3e20323637343039.roa
File:                     323830343a346430633a633030303a3a2f33342d3334203d3e20323637343039.roa (raw, json)
Hash identifier:          iSX7qweu+mw77g6gPxQyPz2AJrG02tAHbXrn8D23jn0=
Subject key identifier:   4C:CD:16:81:B0:30:55:B7:1A:4E:98:CD:D0:60:F2:6A:1E:01:AF:11
Certificate issuer:       /CN=914016D20FC6BF392388EBF2192D8F5AA78B8FD3
Certificate serial:       3043C2C31EEE6D1F826C8842479E903E4A69488E
Authority key identifier: 91:40:16:D2:0F:C6:BF:39:23:88:EB:F2:19:2D:8F:5A:A7:8B:8F:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/914016D20FC6BF392388EBF2192D8F5AA78B8FD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/323830343a346430633a633030303a3a2f33342d3334203d3e20323637343039.roa
Signing time:             Fri 21 Feb 2025 13:45:01 +0000
ROA not before:           Fri 21 Feb 2025 13:40:01 +0000
ROA not after:            Fri 20 Feb 2026 13:45:01 +0000
asID:                     267409
IP address blocks:        2804:4d0c:c000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:43:c2:c3:1e:ee:6d:1f:82:6c:88:42:47:9e:90:3e:4a:69:48:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=914016D20FC6BF392388EBF2192D8F5AA78B8FD3
        Validity
            Not Before: Feb 21 13:40:01 2025 GMT
            Not After : Feb 20 13:45:01 2026 GMT
        Subject: CN=4CCD1681B03055B71A4E98CDD060F26A1E01AF11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a0:12:fb:f9:8a:eb:81:9a:2f:54:92:1a:83:
                    d1:f7:56:58:75:8a:d3:f9:69:e9:7c:70:6c:8f:7a:
                    bd:c9:b1:1e:0d:7a:4d:54:42:82:34:3c:94:9b:a7:
                    db:f5:c4:b9:29:77:ca:a3:5f:8d:d2:fc:ce:a8:c8:
                    f4:52:5e:1a:c3:31:1a:de:c7:02:3b:90:d7:78:b7:
                    21:f9:03:d2:55:2f:66:ad:6f:51:ed:89:b4:93:d3:
                    24:d3:4c:d8:42:84:a6:c7:be:ce:3d:67:b6:7e:ea:
                    44:0b:bf:77:16:95:5b:3f:ba:56:fa:ae:31:7b:fd:
                    f5:91:f3:d4:bb:fe:08:0e:1d:31:e1:47:bc:1a:17:
                    49:7a:91:4b:f7:5c:e8:1f:2b:86:f8:43:86:a5:31:
                    01:6b:50:b0:eb:62:c9:1a:22:d3:82:e5:de:35:47:
                    36:7c:4c:87:f7:03:fb:d9:bd:e0:3b:e8:31:0d:29:
                    08:60:d1:eb:74:59:c2:74:43:b1:23:48:d1:73:78:
                    2d:d5:e7:19:01:34:f1:de:50:28:b6:a1:03:cd:2b:
                    5b:4f:0a:8f:10:b2:e0:a6:28:6b:1c:05:63:e1:89:
                    8c:c5:4f:57:a4:9e:49:db:31:eb:07:f5:19:89:de:
                    7e:8d:3e:df:78:65:0a:59:cf:2b:19:24:29:3d:93:
                    78:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:CD:16:81:B0:30:55:B7:1A:4E:98:CD:D0:60:F2:6A:1E:01:AF:11
            X509v3 Authority Key Identifier:
                keyid:91:40:16:D2:0F:C6:BF:39:23:88:EB:F2:19:2D:8F:5A:A7:8B:8F:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/914016D20FC6BF392388EBF2192D8F5AA78B8FD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/914016D20FC6BF392388EBF2192D8F5AA78B8FD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/323830343a346430633a633030303a3a2f33342d3334203d3e20323637343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d0c:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         73:c6:00:8e:e6:0a:c3:d3:28:c5:8b:3a:6e:40:fb:ec:e0:ec:
         e7:c7:f8:e6:86:e6:01:77:84:18:17:3a:12:4d:44:71:7c:f8:
         43:e9:e4:bc:f5:31:13:14:81:0b:bf:fb:46:a8:ed:e4:be:0a:
         7f:e0:1a:f8:d0:33:44:af:89:a6:fd:71:22:54:25:75:75:b0:
         60:e8:38:0f:47:64:55:7a:8c:42:b2:1d:2c:cc:e0:34:b4:76:
         e6:15:ef:d3:da:0c:0a:01:45:6a:e0:f9:a9:c6:3c:af:32:75:
         3c:92:e2:45:dc:52:e4:57:db:02:92:dc:b5:54:63:ef:8d:40:
         d4:68:4b:7b:61:1b:eb:bb:ea:a7:b0:64:47:d4:d5:07:55:ae:
         cf:37:d2:8a:29:52:08:d2:4a:9f:d6:51:c3:b1:4a:5e:72:58:
         0c:3f:24:a6:ec:ae:c3:51:d0:13:5f:87:3d:51:6d:24:ce:4a:
         01:4d:7a:b8:b4:b5:c4:59:4b:e7:2a:a1:c0:19:47:4a:bb:b6:
         e5:c9:93:d8:31:a5:74:0e:d3:ce:7a:9e:c6:78:a9:df:8c:85:
         12:cb:1b:32:c2:14:48:99:ba:28:64:bb:e1:23:3f:c5:24:d2:
         22:d4:73:77:2b:19:76:6e:42:e9:d3:d2:58:2a:e0:fa:33:82:
         93:cb:ea:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:10:59 2025 by rpki-client