Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/323830343a323566303a383030303a3a2f33332d3333203d3e20323634333131.roa
File:                     323830343a323566303a383030303a3a2f33332d3333203d3e20323634333131.roa (raw, json)
Hash identifier:          Cnd+y0Rk7m0gGQyPmIxgDIHuiCyw95I0h59LkMzuikI=
Subject key identifier:   52:4C:9A:B6:B4:2A:9C:31:5D:77:96:6D:F4:D8:2A:BC:98:DE:92:41
Certificate issuer:       /CN=B5E0BE3C4F73F852BFF3535537037CAE482A4EFA
Certificate serial:       23B1723E5BD2E2E995799461003F4C3E2051D483
Authority key identifier: B5:E0:BE:3C:4F:73:F8:52:BF:F3:53:55:37:03:7C:AE:48:2A:4E:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/323830343a323566303a383030303a3a2f33332d3333203d3e20323634333131.roa
Signing time:             Wed 05 Mar 2025 19:00:04 +0000
ROA not before:           Wed 05 Mar 2025 18:55:04 +0000
ROA not after:            Wed 04 Mar 2026 19:00:04 +0000
asID:                     264311
IP address blocks:        2804:25f0:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:b1:72:3e:5b:d2:e2:e9:95:79:94:61:00:3f:4c:3e:20:51:d4:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5E0BE3C4F73F852BFF3535537037CAE482A4EFA
        Validity
            Not Before: Mar  5 18:55:04 2025 GMT
            Not After : Mar  4 19:00:04 2026 GMT
        Subject: CN=3082010A0282010100AB19CE701B7DE47502D3CF6BC39A153453471652AAAF36237B1F6ABAF0CC5D31A697D503E369B9C2740F9A996C9EA954F69554620F2B481CBEB66D3572A21D20F5122778A97D17E4A1BFF6C718265A2D9B2CA82ED356F3E8B6F031A41B6E45A2A6D0973429D9679256CFB3B4901BD18A6BEE438FBC48A2F53D4AB8FDC6146873DB246FEF371380E44032340ED03ABC7D4F4FE6E09BF6655534387B40CE11B58689A73D41410D777573D56EA46A2EAA33F62716B28A8F7E84C44C4560B7A921B5DD4D41D56FC39A5494FDD197904A20DECD57F712AABD0C1E49DA4CA47A816375FB35F6841CC0713B322D8400EA9E7E028E2C494DA13557007362F102E9F4BDA50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:19:ce:70:1b:7d:e4:75:02:d3:cf:6b:c3:9a:
                    15:34:53:47:16:52:aa:af:36:23:7b:1f:6a:ba:f0:
                    cc:5d:31:a6:97:d5:03:e3:69:b9:c2:74:0f:9a:99:
                    6c:9e:a9:54:f6:95:54:62:0f:2b:48:1c:be:b6:6d:
                    35:72:a2:1d:20:f5:12:27:78:a9:7d:17:e4:a1:bf:
                    f6:c7:18:26:5a:2d:9b:2c:a8:2e:d3:56:f3:e8:b6:
                    f0:31:a4:1b:6e:45:a2:a6:d0:97:34:29:d9:67:92:
                    56:cf:b3:b4:90:1b:d1:8a:6b:ee:43:8f:bc:48:a2:
                    f5:3d:4a:b8:fd:c6:14:68:73:db:24:6f:ef:37:13:
                    80:e4:40:32:34:0e:d0:3a:bc:7d:4f:4f:e6:e0:9b:
                    f6:65:55:34:38:7b:40:ce:11:b5:86:89:a7:3d:41:
                    41:0d:77:75:73:d5:6e:a4:6a:2e:aa:33:f6:27:16:
                    b2:8a:8f:7e:84:c4:4c:45:60:b7:a9:21:b5:dd:4d:
                    41:d5:6f:c3:9a:54:94:fd:d1:97:90:4a:20:de:cd:
                    57:f7:12:aa:bd:0c:1e:49:da:4c:a4:7a:81:63:75:
                    fb:35:f6:84:1c:c0:71:3b:32:2d:84:00:ea:9e:7e:
                    02:8e:2c:49:4d:a1:35:57:00:73:62:f1:02:e9:f4:
                    bd:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:4C:9A:B6:B4:2A:9C:31:5D:77:96:6D:F4:D8:2A:BC:98:DE:92:41
            X509v3 Authority Key Identifier:
                keyid:B5:E0:BE:3C:4F:73:F8:52:BF:F3:53:55:37:03:7C:AE:48:2A:4E:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/323830343a323566303a383030303a3a2f33332d3333203d3e20323634333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25f0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         9f:23:7e:34:d0:45:ed:27:cc:c4:fd:97:4f:7d:2d:52:90:38:
         5a:77:dd:d9:eb:6d:49:29:98:26:c0:e1:71:ad:a2:ae:86:df:
         1a:20:26:60:3c:be:c9:42:0e:27:e4:7f:15:f0:33:c5:91:1b:
         45:94:a2:af:98:2d:8b:a6:f0:c5:76:56:e7:bc:4d:f9:bc:18:
         47:5d:58:e7:51:e9:2c:47:08:01:e8:09:00:e3:af:68:14:fc:
         02:4c:e1:45:ac:c1:e4:ca:55:41:c8:94:d4:e6:1d:fe:f7:db:
         5a:d8:87:de:12:a1:68:8c:1c:92:fb:8e:ad:43:c3:e4:ea:c6:
         27:76:76:fd:a1:41:f1:c3:05:9d:e9:c4:f1:c1:22:b6:94:11:
         ca:a9:47:01:0a:4b:24:46:14:3a:e9:90:69:68:ef:c3:21:b6:
         fb:85:6a:5c:03:34:ba:91:14:c6:f0:52:28:72:1f:25:3f:e3:
         c5:fa:7d:11:d5:bd:99:45:35:9e:56:5e:dd:e2:fe:0b:84:e3:
         bb:2c:57:6b:5f:59:ba:99:9e:ab:f6:ce:c5:c6:ea:b3:de:6d:
         8b:f0:c9:d9:74:3a:54:37:df:82:82:c0:ca:cc:a6:c8:70:3c:
         12:b6:8e:a1:61:57:dd:6c:aa:91:a4:0a:f0:67:55:40:b1:88:
         61:9d:8f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:40:34 2025 by rpki-client