Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7rwGAyxckSYh7HeS7HKMvjWHkWP3ERdQ91Ndxyfpxf4/0/323830343a353934633a3a2f33322d313238203d3e203532383730.roa
File:                     323830343a353934633a3a2f33322d313238203d3e203532383730.roa (raw, json)
Hash identifier:          qtv50uZVsb6wbOu7I+u6wm+zHmYZC1QjI7mrnTJDBR0=
Subject key identifier:   C9:CC:DF:78:89:E7:F6:22:8F:7E:03:A0:BF:85:80:5C:26:58:1D:8A
Certificate issuer:       /CN=07DD9DFA8F604DB8C72BCCA8E292E9C9C2D5F252
Certificate serial:       6B470A22A3B2B2DB1C291F68C79EE40F496D0EB8
Authority key identifier: 07:DD:9D:FA:8F:60:4D:B8:C7:2B:CC:A8:E2:92:E9:C9:C2:D5:F2:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07DD9DFA8F604DB8C72BCCA8E292E9C9C2D5F252.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7rwGAyxckSYh7HeS7HKMvjWHkWP3ERdQ91Ndxyfpxf4/0/323830343a353934633a3a2f33322d313238203d3e203532383730.roa
Signing time:             Mon 17 Feb 2025 22:12:32 +0000
ROA not before:           Mon 17 Feb 2025 22:07:32 +0000
ROA not after:            Mon 16 Feb 2026 22:12:32 +0000
asID:                     52870
IP address blocks:        2804:594c::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:47:0a:22:a3:b2:b2:db:1c:29:1f:68:c7:9e:e4:0f:49:6d:0e:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07DD9DFA8F604DB8C72BCCA8E292E9C9C2D5F252
        Validity
            Not Before: Feb 17 22:07:32 2025 GMT
            Not After : Feb 16 22:12:32 2026 GMT
        Subject: CN=C9CCDF7889E7F6228F7E03A0BF85805C26581D8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f9:94:7f:71:37:9e:cf:00:ce:84:52:44:ed:
                    a4:db:c8:7a:be:27:f2:5a:49:55:14:54:4d:8b:a3:
                    7f:7b:16:aa:4c:99:7c:3f:5b:32:e6:ec:d5:77:83:
                    02:78:0d:bf:8f:7e:2b:c6:81:f7:02:70:b4:37:29:
                    87:31:cb:cc:ea:62:f1:a0:e1:a4:1f:33:33:d8:c7:
                    2a:d9:5d:2e:da:71:39:70:d7:fc:e9:0a:a7:91:e3:
                    85:aa:85:23:08:12:4f:ad:72:25:62:08:44:64:fe:
                    7a:93:e7:4d:3e:7c:2b:05:3c:ab:fd:3b:2f:77:25:
                    63:e8:65:f0:31:f7:df:e6:97:b8:4f:07:3a:cc:32:
                    75:41:75:3c:1f:94:16:4a:dd:6f:d3:fc:35:06:f4:
                    36:b8:ed:5e:43:e5:35:b6:ef:0f:b1:ef:88:a2:11:
                    fe:32:fe:22:11:f3:cf:3a:d8:40:1b:86:b4:78:12:
                    cc:90:ca:3d:05:69:d2:16:02:aa:2e:69:78:ac:08:
                    de:0d:7f:d4:61:0a:ef:4f:f9:37:5f:50:23:c9:83:
                    75:d1:23:42:ed:08:d1:7d:40:8e:82:f7:1c:e1:90:
                    52:a1:23:04:5d:a4:dc:4d:b4:35:8b:42:8e:bc:d5:
                    40:b2:b8:11:df:de:7d:81:81:d2:3f:42:6a:9d:bf:
                    27:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:CC:DF:78:89:E7:F6:22:8F:7E:03:A0:BF:85:80:5C:26:58:1D:8A
            X509v3 Authority Key Identifier:
                keyid:07:DD:9D:FA:8F:60:4D:B8:C7:2B:CC:A8:E2:92:E9:C9:C2:D5:F2:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7rwGAyxckSYh7HeS7HKMvjWHkWP3ERdQ91Ndxyfpxf4/0/07DD9DFA8F604DB8C72BCCA8E292E9C9C2D5F252.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07DD9DFA8F604DB8C72BCCA8E292E9C9C2D5F252.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7rwGAyxckSYh7HeS7HKMvjWHkWP3ERdQ91Ndxyfpxf4/0/323830343a353934633a3a2f33322d313238203d3e203532383730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:594c::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:07:35:e2:93:dd:03:0f:79:ed:49:1f:a5:25:70:4e:ab:74:
         1a:75:1f:41:4d:b4:00:57:f9:76:08:a8:ae:70:58:83:82:8f:
         ed:7f:65:f9:7e:94:cc:fa:63:c5:a8:07:c7:6f:b2:a7:8e:28:
         84:b0:9f:93:7c:8d:38:29:dd:37:96:aa:11:73:b0:c6:a4:31:
         7c:8e:8b:a8:01:c5:13:c6:52:cf:ec:13:36:a6:db:40:4d:95:
         73:29:8a:dc:52:16:e2:77:5e:28:a2:9b:c6:8e:4f:4c:b9:1f:
         22:fc:c9:f3:b2:1d:5d:58:82:ad:b0:ff:47:2c:99:a2:1c:19:
         47:4d:88:b0:40:5b:42:e9:5c:bc:87:03:dd:8a:6f:22:e8:23:
         9a:c4:25:6c:d6:98:db:6c:fd:4f:20:b8:2f:7b:72:85:66:81:
         4f:2a:71:10:1f:5d:01:30:10:b5:ff:32:33:c2:37:7a:fe:dd:
         6c:21:0c:3b:f5:e8:08:dd:e9:3d:87:16:61:45:b9:02:7b:02:
         17:d3:aa:28:90:80:ad:10:4f:ac:ae:c6:85:af:d4:91:df:ef:
         6f:9b:a3:fb:04:df:35:4b:f4:12:d7:cf:24:86:ae:b1:ac:84:
         c7:36:06:5f:06:d0:ae:de:c8:5d:85:6c:f8:df:63:2d:f0:d9:
         95:90:fc:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:31:40 2025 by rpki-client