Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a386330303a3a2f34302d3430203d3e20323633363239.roa
File:                     323830343a313034633a386330303a3a2f34302d3430203d3e20323633363239.roa (raw, json)
Hash identifier:          9hiQQrDaf9PMevAZA6u/wdOEul4aYttlyGdiDqlzahU=
Subject key identifier:   63:07:B0:14:09:67:3B:7E:09:48:99:6A:71:EF:8B:5B:15:9C:8D:F0
Certificate issuer:       /CN=EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD
Certificate serial:       0BB4DBC4E2DF065553710501FCE0867A72010985
Authority key identifier: EC:92:5A:78:F8:BF:CB:62:0C:80:CC:8F:AD:47:F5:F3:02:EF:FB:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a386330303a3a2f34302d3430203d3e20323633363239.roa
Signing time:             Mon 17 Mar 2025 17:57:31 +0000
ROA not before:           Mon 17 Mar 2025 17:52:31 +0000
ROA not after:            Mon 16 Mar 2026 17:57:31 +0000
asID:                     263629
IP address blocks:        2804:104c:8c00::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:b4:db:c4:e2:df:06:55:53:71:05:01:fc:e0:86:7a:72:01:09:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD
        Validity
            Not Before: Mar 17 17:52:31 2025 GMT
            Not After : Mar 16 17:57:31 2026 GMT
        Subject: CN=6307B01409673B7E0948996A71EF8B5B159C8DF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:96:7f:97:3e:70:8b:66:24:8d:0d:08:8f:be:
                    12:0e:3d:57:e0:3c:64:6d:c1:42:eb:61:7a:f0:63:
                    1e:3d:55:34:07:29:df:19:cf:12:44:0b:a8:dc:31:
                    d0:e1:c9:94:bd:5e:1f:6d:23:0f:8c:40:ac:ac:12:
                    2e:85:a8:ec:85:52:06:53:d9:bd:ac:57:51:e5:93:
                    aa:9e:32:25:e9:61:01:a5:11:a1:ea:47:93:28:5a:
                    85:4f:6a:ec:2a:2b:8b:dc:61:da:f9:d6:14:fe:da:
                    17:19:5c:61:9e:ca:55:11:d3:ac:31:71:e8:46:3e:
                    5a:39:a7:e4:cd:9b:38:0d:b6:a7:cb:cf:80:5d:3d:
                    35:1a:02:53:1a:ea:65:1a:42:89:c6:25:34:9d:3c:
                    64:44:e7:ef:d4:b5:54:8d:27:09:a1:66:1d:05:b4:
                    d4:ed:d1:19:43:4c:2b:53:87:c4:e2:5f:5a:35:4d:
                    fc:a7:a6:2e:27:04:dc:9b:a7:8b:e8:7e:a7:f4:64:
                    9e:b2:88:fd:ac:44:92:dc:b9:0e:76:8d:42:b1:0a:
                    06:31:28:5c:71:e1:0d:35:bd:2c:bd:25:7a:eb:f2:
                    3c:18:cc:17:dc:9c:22:96:98:d8:c7:3a:43:63:78:
                    f8:67:08:e5:01:3e:5c:2d:d3:4a:0d:8c:e8:0d:8b:
                    37:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:07:B0:14:09:67:3B:7E:09:48:99:6A:71:EF:8B:5B:15:9C:8D:F0
            X509v3 Authority Key Identifier:
                keyid:EC:92:5A:78:F8:BF:CB:62:0C:80:CC:8F:AD:47:F5:F3:02:EF:FB:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a386330303a3a2f34302d3430203d3e20323633363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:104c:8c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         0e:f1:73:79:47:43:74:70:49:19:75:9c:f5:1f:85:58:79:b2:
         bd:ae:5d:a2:66:d8:07:d9:27:16:1c:7a:df:c7:fd:c9:2b:e3:
         cb:05:40:ce:59:d0:49:4e:fd:38:1a:63:3d:b4:99:c4:4c:32:
         06:45:dc:5e:62:40:2a:4a:ce:02:f4:1b:73:f2:dc:e5:1f:db:
         44:29:d6:4c:e7:3e:40:1f:ff:ff:16:41:b5:2f:25:73:a9:7c:
         50:dc:db:97:51:6b:03:eb:d5:59:31:85:29:c2:d4:d6:b0:73:
         63:eb:e3:1d:92:1b:f0:8f:94:cf:ca:ad:e5:8e:88:f4:bf:22:
         17:94:d8:b2:8a:2c:29:c1:3b:27:b0:2c:dc:f8:5a:8e:a3:13:
         1c:72:a0:00:8e:6a:9e:67:c2:be:b2:ab:33:d2:09:ed:79:1e:
         93:bd:b9:bc:98:5f:c7:71:3c:c6:ec:17:63:3d:d1:90:c2:f7:
         0a:a2:67:6b:66:5c:54:ad:da:8a:a8:73:04:84:26:91:9c:a9:
         e1:17:9c:71:07:fc:e5:85:58:0d:e3:a2:9a:78:61:61:b6:c2:
         cb:66:df:ca:87:12:b3:7e:32:1b:a4:5e:01:22:78:7f:9b:1e:
         a5:92:27:6c:21:7b:41:63:de:d5:7c:97:1b:13:32:f7:75:a7:
         6b:25:c0:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:08:11 2025 by rpki-client