Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/323830343a373232383a3a2f33322d3332203d3e20323730383336.roa
File:                     323830343a373232383a3a2f33322d3332203d3e20323730383336.roa (raw, json)
Hash identifier:          120gjbBXx0yfQx1YOCTOC1yi9vUcqsmbY6nBhxoOhNc=
Subject key identifier:   DA:37:5A:1A:6C:E6:D6:92:2E:8A:C4:DA:7A:18:88:82:60:AA:AA:48
Certificate issuer:       /CN=67B531125B42B4898E018F1D5F2837CCA874EB8B
Certificate serial:       4B1A1D69574D5720A0D4ED1D3C28E17D487D8E2C
Authority key identifier: 67:B5:31:12:5B:42:B4:89:8E:01:8F:1D:5F:28:37:CC:A8:74:EB:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/323830343a373232383a3a2f33322d3332203d3e20323730383336.roa
Signing time:             Wed 05 Mar 2025 19:00:13 +0000
ROA not before:           Wed 05 Mar 2025 18:55:13 +0000
ROA not after:            Wed 04 Mar 2026 19:00:13 +0000
asID:                     270836
IP address blocks:        2804:7228::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:1a:1d:69:57:4d:57:20:a0:d4:ed:1d:3c:28:e1:7d:48:7d:8e:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67B531125B42B4898E018F1D5F2837CCA874EB8B
        Validity
            Not Before: Mar  5 18:55:13 2025 GMT
            Not After : Mar  4 19:00:13 2026 GMT
        Subject: CN=DA375A1A6CE6D6922E8AC4DA7A18888260AAAA48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:cf:47:b1:bc:d6:e5:e0:e2:3b:22:b9:e0:f8:
                    74:c8:42:9c:f9:f3:b1:ec:72:32:4b:3f:85:d4:48:
                    1b:d4:5b:5d:f0:ff:65:64:5c:9b:d5:c4:22:17:4d:
                    fa:fe:09:a0:51:ea:7b:a0:ec:43:9b:21:5d:bd:ec:
                    75:ac:cc:63:80:12:7f:ba:53:c1:9c:10:8c:a4:35:
                    07:44:db:d9:65:21:01:4a:78:94:dc:93:59:a6:fb:
                    70:c4:59:7c:9a:61:eb:ff:26:d8:a6:04:3c:35:92:
                    37:70:2e:6b:ca:32:ad:a2:d3:c1:4a:81:59:20:c2:
                    f9:4e:7d:7a:f4:e7:f6:fc:82:2f:3e:45:e1:02:38:
                    0a:27:c1:50:62:02:e7:53:c1:71:e9:90:53:52:09:
                    b2:03:f2:7c:57:68:3c:e5:65:ea:7e:82:05:40:e3:
                    7d:12:37:05:7f:f7:74:b0:09:1c:f1:14:b0:72:4e:
                    89:62:f4:c5:0f:00:80:83:aa:69:92:5c:e8:be:0d:
                    b7:05:2e:4e:53:c1:a8:f5:48:96:cb:7a:fc:a4:f6:
                    7b:6e:26:0e:8b:eb:e9:92:9f:38:b7:bd:9e:ba:f4:
                    fd:6e:b2:7f:f2:ed:ad:8b:b5:b4:19:f9:72:9c:e3:
                    db:59:cb:ab:7c:92:e7:c8:32:8f:c3:d6:f2:d3:6b:
                    44:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:37:5A:1A:6C:E6:D6:92:2E:8A:C4:DA:7A:18:88:82:60:AA:AA:48
            X509v3 Authority Key Identifier:
                keyid:67:B5:31:12:5B:42:B4:89:8E:01:8F:1D:5F:28:37:CC:A8:74:EB:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/323830343a373232383a3a2f33322d3332203d3e20323730383336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7228::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:60:23:29:e9:3d:51:6e:c2:d2:4a:f3:33:8f:b5:30:d0:c7:
         d0:75:36:7f:64:42:fa:fe:3f:bc:8a:5a:1c:4c:e2:b0:24:33:
         a2:c7:6c:58:c8:13:20:94:a2:67:a5:ce:0a:91:9e:c6:55:1b:
         9e:f4:71:5d:68:75:24:ed:d2:c2:ec:31:c1:48:15:03:9e:29:
         be:c8:03:0b:2a:d3:38:e7:c2:21:52:e2:fa:52:68:b8:48:f8:
         99:de:93:9b:fb:b2:29:58:f7:e3:5f:03:e1:97:1b:3b:d5:78:
         da:be:82:d8:2d:90:bd:f5:d4:2b:d4:3a:a2:3a:38:63:32:1e:
         a5:97:bf:b2:01:24:c0:81:bb:fa:94:64:70:90:e6:0f:8e:69:
         9f:f8:a1:72:a9:03:71:52:a5:d5:00:d5:10:33:e3:21:d2:62:
         0f:fe:2c:bd:5f:ab:af:d8:c4:23:cc:b0:12:66:d2:ea:2b:9a:
         a5:7a:6a:83:1b:23:f2:cb:1f:72:dd:0b:09:9e:f0:87:6f:99:
         cf:9d:08:fc:38:08:62:56:76:a4:cb:af:78:a8:c9:4b:e4:aa:
         8a:a4:29:13:8e:94:d9:e1:e0:41:c2:70:3c:b9:c4:94:3d:e4:
         f8:59:db:c9:30:e8:43:59:14:42:f0:47:78:44:82:0e:b5:98:
         1d:3f:44:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:13:29 2025 by rpki-client