Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/323830343a356163303a323030303a3a2f33352d3335203d3e20323638373933.roa
File:                     323830343a356163303a323030303a3a2f33352d3335203d3e20323638373933.roa (raw, json)
Hash identifier:          2BxzzxohUSPIMxc79Cap3xLPrY0OtHxMWSeI2xH5U0k=
Subject key identifier:   C2:60:3D:C9:8D:EE:8C:96:68:44:09:ED:34:23:8E:2A:F3:B5:BB:56
Certificate issuer:       /CN=62542D04D7B086689C6E3FE7D77F27061824D478
Certificate serial:       2F078120C136FCB76566631EF34BBBC93F0EBE85
Authority key identifier: 62:54:2D:04:D7:B0:86:68:9C:6E:3F:E7:D7:7F:27:06:18:24:D4:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62542D04D7B086689C6E3FE7D77F27061824D478.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/323830343a356163303a323030303a3a2f33352d3335203d3e20323638373933.roa
Signing time:             Mon 13 Jan 2025 18:14:35 +0000
ROA not before:           Mon 13 Jan 2025 18:09:35 +0000
ROA not after:            Mon 12 Jan 2026 18:14:35 +0000
asID:                     268793
IP address blocks:        2804:5ac0:2000::/35 maxlen: 35
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:07:81:20:c1:36:fc:b7:65:66:63:1e:f3:4b:bb:c9:3f:0e:be:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62542D04D7B086689C6E3FE7D77F27061824D478
        Validity
            Not Before: Jan 13 18:09:35 2025 GMT
            Not After : Jan 12 18:14:35 2026 GMT
        Subject: CN=C2603DC98DEE8C96684409ED34238E2AF3B5BB56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:97:8b:36:23:b5:0a:ad:27:c2:0f:fc:9b:3e:
                    47:97:73:7f:10:52:b4:c3:4d:a7:c0:c5:71:87:ce:
                    fa:eb:b4:a8:72:82:e5:4a:de:90:48:e4:34:06:05:
                    29:9e:5e:8d:fe:dc:62:e5:1f:80:f6:54:8b:20:54:
                    aa:7b:04:e5:d4:2d:d9:33:b1:93:dc:48:bf:ae:26:
                    a1:f5:8d:27:c1:ad:65:9e:3b:06:ce:4d:4a:4b:9d:
                    f6:0b:73:57:4f:0d:8f:85:15:5d:ab:18:88:f8:48:
                    aa:92:38:9a:8c:7d:12:8e:8f:1a:86:e7:bf:b7:9a:
                    11:64:3c:c3:c6:b0:45:f5:d4:60:56:c3:0f:77:76:
                    37:aa:a5:93:e3:0a:00:58:c8:f3:85:e1:0b:ef:c3:
                    1b:a9:a5:5a:bd:f2:ef:a9:1e:bb:df:e9:b1:9e:c2:
                    62:94:ca:ae:4e:6d:05:b1:c2:92:d1:2c:d4:36:ce:
                    e5:33:86:02:4a:d9:38:62:77:b5:09:0b:c5:72:56:
                    02:2f:08:30:8f:0a:78:a0:38:d5:84:af:b3:0c:e3:
                    4f:c2:46:3e:79:52:94:77:a8:69:dd:d9:6a:58:7f:
                    7d:2a:7c:39:32:d1:76:2a:b0:34:54:05:ce:f5:8c:
                    d1:5c:c8:cd:08:de:b9:24:0a:c4:20:92:cd:62:67:
                    43:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:60:3D:C9:8D:EE:8C:96:68:44:09:ED:34:23:8E:2A:F3:B5:BB:56
            X509v3 Authority Key Identifier:
                keyid:62:54:2D:04:D7:B0:86:68:9C:6E:3F:E7:D7:7F:27:06:18:24:D4:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/62542D04D7B086689C6E3FE7D77F27061824D478.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62542D04D7B086689C6E3FE7D77F27061824D478.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/323830343a356163303a323030303a3a2f33352d3335203d3e20323638373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ac0:2000::/35

    Signature Algorithm: sha256WithRSAEncryption
         8c:f9:28:e6:79:55:14:46:8f:c0:57:8b:30:e5:f7:7e:c6:df:
         18:66:7e:b6:b5:f8:09:db:71:47:b9:fe:90:c2:47:07:1f:b0:
         87:11:20:d7:e5:30:58:ad:d4:2c:e4:1c:3f:3e:24:5b:d0:37:
         a7:07:52:75:54:f5:48:24:45:54:f8:c1:c3:c4:28:bf:24:9c:
         a8:3e:aa:07:b7:bd:1c:c8:32:2e:86:b5:1e:b5:4a:30:13:d7:
         44:83:8c:77:9d:93:f7:3a:10:6e:ea:b2:f4:d8:72:fe:67:bd:
         92:70:51:09:d8:85:c1:a3:fb:3a:a0:5a:8b:07:6a:42:2a:22:
         ee:e7:92:5c:0b:93:97:eb:07:bf:9a:22:32:ba:ff:2c:11:6b:
         80:ce:d8:b1:40:0c:80:a6:1f:25:a2:13:d4:be:68:96:0e:95:
         df:0c:7b:78:dd:57:14:d2:23:a8:cb:c7:34:3b:00:62:ad:c7:
         58:db:b0:e3:c4:06:2d:60:d0:94:6e:ea:e2:bc:83:33:60:34:
         ee:35:d7:ec:51:a1:e8:53:15:05:e2:fa:98:93:51:ac:3a:af:
         3e:26:52:3e:6b:ad:61:dc:b4:5d:c9:85:60:6d:cf:78:d5:c8:
         f6:7f:c7:c5:17:b8:d0:bb:70:7b:b4:fb:f0:fe:80:51:1d:98:
         5c:06:34:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:16:04 2025 by rpki-client