Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4yKT7tGkbDyw3qTy4Ez27ovuDquWwVjfN5AZ8wTf6Ni/1/323830343a373238343a3a2f33332d3438203d3e20323730383538.roa
File:                     323830343a373238343a3a2f33332d3438203d3e20323730383538.roa (raw, json)
Hash identifier:          nBchnEjMUsrWoIn7OGJ0mC6af9tiFnP2Whw1XwB6DyE=
Subject key identifier:   0A:EA:6D:9A:DC:6E:2B:F0:D8:61:20:65:DC:06:13:45:EE:41:50:44
Certificate issuer:       /CN=D93EABAFE6C4BBB0E20474DA146E626A7B718C49
Certificate serial:       4B947E0BF00891B753AD0ECA6838700D2E4581A8
Authority key identifier: D9:3E:AB:AF:E6:C4:BB:B0:E2:04:74:DA:14:6E:62:6A:7B:71:8C:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D93EABAFE6C4BBB0E20474DA146E626A7B718C49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4yKT7tGkbDyw3qTy4Ez27ovuDquWwVjfN5AZ8wTf6Ni/1/323830343a373238343a3a2f33332d3438203d3e20323730383538.roa
Signing time:             Fri 06 Dec 2024 12:30:29 +0000
ROA not before:           Fri 06 Dec 2024 12:25:29 +0000
ROA not after:            Fri 05 Dec 2025 12:30:29 +0000
asID:                     270858
IP address blocks:        2804:7284::/33 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:94:7e:0b:f0:08:91:b7:53:ad:0e:ca:68:38:70:0d:2e:45:81:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D93EABAFE6C4BBB0E20474DA146E626A7B718C49
        Validity
            Not Before: Dec  6 12:25:29 2024 GMT
            Not After : Dec  5 12:30:29 2025 GMT
        Subject: CN=0AEA6D9ADC6E2BF0D8612065DC061345EE415044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fd:b6:d6:1d:34:b1:ec:32:16:b3:8d:7c:a6:
                    a6:55:75:1b:2a:14:c5:b3:ff:32:13:a2:60:89:46:
                    71:cb:9a:53:18:fb:0f:fd:cb:ff:4a:64:6c:3c:bd:
                    5a:de:2f:ea:fe:f9:5d:72:f5:77:ad:09:1a:e0:88:
                    42:4c:6b:10:f4:73:22:af:53:92:8a:d1:7c:70:bc:
                    a0:2a:66:5f:01:c8:e0:f5:2b:ab:4d:73:4b:7d:a5:
                    74:b5:07:b2:6c:b7:f9:db:28:b9:5a:06:29:09:bb:
                    bf:5b:62:5c:fb:77:0f:18:09:e2:0d:34:f7:2e:8a:
                    5e:2d:74:7a:10:7c:74:c5:ee:79:34:b9:85:66:66:
                    c5:e4:fc:4a:30:57:4a:50:4f:c7:3d:bf:d8:b4:83:
                    37:02:45:83:cb:25:c2:a0:38:f7:a8:bf:67:ef:b3:
                    70:71:42:b6:2d:6e:5f:4a:71:84:98:89:95:34:2c:
                    a8:65:b2:34:6a:31:99:80:a7:47:59:93:3b:8c:20:
                    93:3c:ea:f1:b5:a9:eb:63:56:de:9a:79:ff:16:fd:
                    54:fb:65:c1:a8:b1:b2:4f:ef:6c:43:f8:08:31:59:
                    87:42:6c:54:a2:4c:f7:02:55:09:4f:12:12:7a:97:
                    42:88:44:f5:1e:e3:45:e4:91:be:41:7b:79:db:a9:
                    bf:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:EA:6D:9A:DC:6E:2B:F0:D8:61:20:65:DC:06:13:45:EE:41:50:44
            X509v3 Authority Key Identifier:
                keyid:D9:3E:AB:AF:E6:C4:BB:B0:E2:04:74:DA:14:6E:62:6A:7B:71:8C:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4yKT7tGkbDyw3qTy4Ez27ovuDquWwVjfN5AZ8wTf6Ni/1/D93EABAFE6C4BBB0E20474DA146E626A7B718C49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D93EABAFE6C4BBB0E20474DA146E626A7B718C49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4yKT7tGkbDyw3qTy4Ez27ovuDquWwVjfN5AZ8wTf6Ni/1/323830343a373238343a3a2f33332d3438203d3e20323730383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7284::/33

    Signature Algorithm: sha256WithRSAEncryption
         0a:f3:3f:0c:d5:42:c6:d7:d2:a0:b9:ef:03:d0:83:c8:5a:64:
         16:80:34:88:20:6d:cf:88:23:38:6d:53:32:07:e5:19:69:13:
         e9:2e:c2:c7:c9:23:b4:55:6c:d8:80:85:e3:ba:49:e9:5b:24:
         11:5d:6e:b3:79:d2:d0:c3:a7:7f:6d:22:52:93:3b:cb:16:5a:
         c3:3b:90:3e:f5:35:cc:58:b2:cc:d8:57:64:80:11:3d:b6:64:
         e2:c3:12:fb:15:76:ce:e7:22:ad:72:a1:6d:2d:85:4e:f6:56:
         aa:7f:89:d2:51:7b:d9:87:97:a8:a5:a7:00:84:a7:7e:fe:8e:
         52:3d:b1:5c:4e:fd:d6:13:ad:c5:ac:05:18:a4:b0:02:1e:96:
         72:27:1d:ac:37:d8:0d:aa:cb:cf:66:59:e0:1b:22:72:2a:49:
         e2:dc:d9:41:e5:02:77:a2:fc:0a:8c:e4:ed:e9:8a:28:64:a3:
         ef:e6:75:d7:5d:70:74:63:48:d8:f4:8e:12:11:0f:26:60:60:
         9b:16:ce:f0:74:74:85:c2:25:56:27:bd:3b:a7:d3:e9:b9:bb:
         5d:91:ae:1a:bd:51:e4:c0:2e:93:e7:05:4a:ea:8c:4c:5e:6a:
         dc:02:81:c1:03:1d:5e:b2:b7:77:83:d8:e8:f6:6e:ed:a7:9c:
         84:a1:b1:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:35:07 2025 by rpki-client