Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/323030313a313239383a666630303a3a2f34302d3430203d3e203238323936.roa
File:                     323030313a313239383a666630303a3a2f34302d3430203d3e203238323936.roa (raw, json)
Hash identifier:          IhhQFadMVsfCk1taW5u7ttgOgnNsKM6Ckzhm8xHAckw=
Subject key identifier:   10:CE:68:36:E6:7B:2B:BF:65:90:D8:13:FE:CE:91:C5:27:73:5A:08
Certificate issuer:       /CN=240776095D0A2A2617F52A2F4657B9D69AA661DD
Certificate serial:       78C933DB7B34874BDA711F067C448A160B447C6F
Authority key identifier: 24:07:76:09:5D:0A:2A:26:17:F5:2A:2F:46:57:B9:D6:9A:A6:61:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/240776095D0A2A2617F52A2F4657B9D69AA661DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/323030313a313239383a666630303a3a2f34302d3430203d3e203238323936.roa
Signing time:             Tue 03 Dec 2024 08:37:29 +0000
ROA not before:           Tue 03 Dec 2024 08:32:29 +0000
ROA not after:            Tue 02 Dec 2025 08:37:29 +0000
asID:                     28296
IP address blocks:        2001:1298:ff00::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:c9:33:db:7b:34:87:4b:da:71:1f:06:7c:44:8a:16:0b:44:7c:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=240776095D0A2A2617F52A2F4657B9D69AA661DD
        Validity
            Not Before: Dec  3 08:32:29 2024 GMT
            Not After : Dec  2 08:37:29 2025 GMT
        Subject: CN=10CE6836E67B2BBF6590D813FECE91C527735A08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:4f:1b:52:e2:38:87:99:59:49:fa:33:a4:75:
                    2e:78:71:4e:56:7a:17:1d:22:c9:0a:e8:73:55:cc:
                    f2:5f:1e:6a:78:ed:ec:93:e1:f4:8b:87:f9:3e:75:
                    f8:e2:88:73:9a:39:9c:20:6c:a3:07:0b:00:5c:fc:
                    57:6b:e2:ec:ff:36:46:49:8e:b8:75:04:33:75:bc:
                    7e:bd:4e:6d:dc:4a:36:9d:45:65:b1:3d:29:1c:a1:
                    59:7e:68:19:7e:b3:5e:9d:b4:4f:1b:39:1c:33:64:
                    53:a1:c3:0b:56:9f:8b:e5:4c:9b:7b:35:2b:07:47:
                    02:da:75:04:25:56:89:6e:db:0f:f0:26:5e:16:72:
                    e6:55:64:46:2a:2a:b4:9e:da:41:49:32:e5:a5:de:
                    e8:31:22:60:09:87:e2:08:c9:3b:be:ba:db:81:20:
                    76:cd:10:d7:c5:b3:f5:a0:49:00:7f:c7:fb:f2:9e:
                    17:d8:fd:31:aa:49:29:01:9a:df:89:4a:51:4a:e7:
                    7e:47:57:00:e8:80:3b:61:06:a5:15:b6:df:1b:82:
                    6d:21:e4:a7:b2:a0:40:36:ab:43:00:9f:e7:33:38:
                    a1:87:b8:37:36:48:e5:86:59:23:cc:fa:03:71:4f:
                    93:a3:ea:89:91:b0:71:00:37:9a:6a:c6:d8:4e:fd:
                    5b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:CE:68:36:E6:7B:2B:BF:65:90:D8:13:FE:CE:91:C5:27:73:5A:08
            X509v3 Authority Key Identifier:
                keyid:24:07:76:09:5D:0A:2A:26:17:F5:2A:2F:46:57:B9:D6:9A:A6:61:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/240776095D0A2A2617F52A2F4657B9D69AA661DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/240776095D0A2A2617F52A2F4657B9D69AA661DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/323030313a313239383a666630303a3a2f34302d3430203d3e203238323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1298:ff00::/40

    Signature Algorithm: sha256WithRSAEncryption
         48:1b:b0:47:dc:72:88:22:fb:56:18:13:63:e3:f0:85:1f:33:
         28:3d:06:eb:af:8b:5a:54:44:2f:70:e2:76:8f:75:d2:5d:df:
         81:d5:8b:42:bf:eb:45:ff:4c:db:a8:9e:77:56:cf:43:11:5e:
         f8:e9:1e:26:76:4a:df:36:88:e8:eb:24:ac:1f:c0:af:62:ed:
         bd:39:2c:b3:42:75:2e:36:f0:62:d7:44:15:d5:7e:fb:c4:4f:
         e4:d4:b6:cd:4b:e3:6a:38:93:11:f0:05:32:fd:0d:e3:6f:67:
         38:36:0a:59:80:e1:7b:d9:be:6a:bd:f1:b7:e0:db:05:ba:4f:
         db:e7:b1:de:d4:46:d6:b9:5f:19:2b:e8:4a:18:2d:5d:a9:65:
         e7:11:83:f7:f0:aa:f2:b1:76:42:64:bd:c9:7e:4d:92:f4:55:
         a7:f3:31:ed:7e:fb:5c:15:4d:15:d9:81:9c:73:a4:b2:fb:66:
         11:84:c2:c0:88:f9:46:8d:bd:29:91:54:04:69:84:77:06:fb:
         29:86:c8:22:07:54:09:05:0b:1c:47:4a:5d:2a:82:22:67:09:
         cc:56:a6:f7:16:7e:0c:a2:80:28:91:6f:2e:de:d4:1e:a2:67:
         79:11:1f:c3:94:70:0a:40:3b:1a:6c:31:3a:52:16:03:6e:e9:
         56:4a:39:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:34:35 2025 by rpki-client