Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7BCFrztVKNksnNEZUWcEM8iFoYPhXbAtF3dA43N82wK/1/323830343a363364383a3a2f33322d3334203d3e20323639333837.roa
File:                     323830343a363364383a3a2f33322d3334203d3e20323639333837.roa (raw, json)
Hash identifier:          icAsZPoWaQhCLSIAWT+7lx9k4Yg27slCNih1byX/PV8=
Subject key identifier:   9C:66:5E:26:BA:EC:B3:8D:AA:1D:92:93:0C:FF:6E:0B:6F:31:F3:34
Certificate issuer:       /CN=C7B317212DB90FCD08BA0577C6C41F8E21F91280
Certificate serial:       0179E953801D43EA5C65D13080681AD340081F46
Authority key identifier: C7:B3:17:21:2D:B9:0F:CD:08:BA:05:77:C6:C4:1F:8E:21:F9:12:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7B317212DB90FCD08BA0577C6C41F8E21F91280.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7BCFrztVKNksnNEZUWcEM8iFoYPhXbAtF3dA43N82wK/1/323830343a363364383a3a2f33322d3334203d3e20323639333837.roa
Signing time:             Thu 06 Mar 2025 19:00:00 +0000
ROA not before:           Thu 06 Mar 2025 18:55:00 +0000
ROA not after:            Fri 06 Mar 2026 19:00:00 +0000
asID:                     269387
IP address blocks:        2804:63d8::/32 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:79:e9:53:80:1d:43:ea:5c:65:d1:30:80:68:1a:d3:40:08:1f:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7B317212DB90FCD08BA0577C6C41F8E21F91280
        Validity
            Not Before: Mar  6 18:55:00 2025 GMT
            Not After : Mar  6 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:40:37:5f:5d:d7:ef:7d:86:0a:ba:76:f7:e6:
                    ab:ba:38:c6:c8:ea:08:b6:79:1f:94:03:1c:3f:85:
                    cb:76:22:65:9d:42:c6:cd:64:1f:83:9e:c7:e4:79:
                    12:f1:17:e5:7f:c3:c8:dd:97:fe:a7:46:d1:bf:37:
                    35:c9:2e:de:7a:e8:86:16:d5:b4:bb:7c:57:c9:e4:
                    4c:5f:26:fb:45:8b:cf:ce:49:b4:a5:d6:a9:30:ba:
                    43:56:65:57:ec:36:da:a1:88:6e:a4:28:da:ff:0e:
                    e7:ef:a9:38:13:e8:29:62:09:8b:c9:81:9d:3c:84:
                    53:f1:13:ba:7d:a2:8d:13:63:57:27:9f:6d:e6:46:
                    2d:69:cd:d2:32:20:c2:ba:1a:4e:6a:28:79:09:4f:
                    49:f5:a3:1a:16:aa:98:09:01:18:41:c0:c1:79:4b:
                    48:90:98:37:9f:5e:f9:c1:aa:1a:8c:1d:b3:ef:11:
                    1e:80:6c:23:e5:ea:c1:22:70:12:9a:bb:93:43:7b:
                    d8:9a:a3:4c:4a:6b:be:3e:d6:a9:3d:16:5b:0b:1d:
                    f4:ff:91:86:ac:a0:1a:c3:6d:ed:7e:15:e5:fa:74:
                    c1:5c:6e:20:d9:31:d3:d2:c6:11:00:c5:62:97:c7:
                    87:43:f3:a7:81:88:ae:ed:cf:f7:31:4d:0c:cc:aa:
                    79:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:66:5E:26:BA:EC:B3:8D:AA:1D:92:93:0C:FF:6E:0B:6F:31:F3:34
            X509v3 Authority Key Identifier:
                keyid:C7:B3:17:21:2D:B9:0F:CD:08:BA:05:77:C6:C4:1F:8E:21:F9:12:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7BCFrztVKNksnNEZUWcEM8iFoYPhXbAtF3dA43N82wK/1/C7B317212DB90FCD08BA0577C6C41F8E21F91280.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7B317212DB90FCD08BA0577C6C41F8E21F91280.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7BCFrztVKNksnNEZUWcEM8iFoYPhXbAtF3dA43N82wK/1/323830343a363364383a3a2f33322d3334203d3e20323639333837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:63d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         b3:8c:4e:91:92:d2:dc:7a:27:23:29:3a:8d:ec:58:d7:90:3d:
         2b:3e:19:28:22:65:77:01:22:96:8b:08:e2:62:f7:d9:47:47:
         d2:b4:bc:38:59:49:80:8c:d1:6a:3e:64:c5:57:c9:02:be:5f:
         f7:52:31:23:7b:34:20:33:85:b8:8b:07:29:c2:c4:4c:fa:df:
         01:22:67:3a:18:95:37:e9:f6:f3:7a:52:29:67:c8:cc:b8:2f:
         32:49:c1:27:27:aa:f8:c2:8f:9e:83:50:fa:ae:b9:f9:f6:62:
         28:f0:4e:07:45:e2:40:aa:9d:79:b8:13:2d:3d:35:d2:9f:20:
         41:db:94:49:6a:ad:9b:bf:18:d5:2f:30:3a:d9:40:6d:64:29:
         b7:ac:10:f5:54:1d:96:49:76:f8:04:d2:1d:53:0b:9d:8e:c7:
         d2:4b:92:cb:b9:a7:12:65:77:f0:10:e9:a1:18:1a:08:73:9e:
         8c:80:1c:39:7a:22:35:29:66:d8:cc:40:19:3a:3d:63:bd:0d:
         1a:9b:fc:86:e8:f7:9d:ea:a0:df:35:74:50:90:e8:92:e4:b8:
         34:b9:d0:c6:5f:05:f0:d3:49:79:5f:02:58:02:a2:04:31:20:
         0d:20:8c:64:de:8b:b4:55:79:2b:b5:8f:e5:bc:a1:fb:9a:06:
         b0:f0:e3:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----