Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/323830343a323566303a3a2f33322d3332203d3e20323634333131.roa
File:                     323830343a323566303a3a2f33322d3332203d3e20323634333131.roa (raw, json)
Hash identifier:          DlmjtbS43V5pIxejGVF+01oWW7+bmbbizDELKiXpv6Q=
Subject key identifier:   56:DD:21:76:9A:6D:A9:15:C0:90:61:FA:6A:43:BC:4E:0F:01:C0:43
Certificate issuer:       /CN=B5E0BE3C4F73F852BFF3535537037CAE482A4EFA
Certificate serial:       41A27550D3C88781152C6429EFD3369E73EC0B27
Authority key identifier: B5:E0:BE:3C:4F:73:F8:52:BF:F3:53:55:37:03:7C:AE:48:2A:4E:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/323830343a323566303a3a2f33322d3332203d3e20323634333131.roa
Signing time:             Wed 05 Mar 2025 19:00:03 +0000
ROA not before:           Wed 05 Mar 2025 18:55:03 +0000
ROA not after:            Wed 04 Mar 2026 19:00:03 +0000
asID:                     264311
IP address blocks:        2804:25f0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:a2:75:50:d3:c8:87:81:15:2c:64:29:ef:d3:36:9e:73:ec:0b:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5E0BE3C4F73F852BFF3535537037CAE482A4EFA
        Validity
            Not Before: Mar  5 18:55:03 2025 GMT
            Not After : Mar  4 19:00:03 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:64:d9:0f:30:42:8e:93:75:70:b1:fe:ff:78:
                    2e:4b:30:3f:4f:86:2e:cd:81:e5:5c:68:ad:55:53:
                    c7:b2:00:dd:bc:61:84:72:fc:91:78:2e:59:f6:a1:
                    f9:dc:e5:be:0e:03:52:6f:7c:f3:f3:1b:78:91:80:
                    c4:9c:27:b7:60:80:37:f3:6a:06:86:84:6f:90:c8:
                    7e:37:35:30:1a:b6:44:a2:38:94:1a:74:cd:85:d0:
                    c0:43:27:cd:ac:2e:9a:48:94:1e:1a:dd:fd:39:c7:
                    97:6b:91:c3:26:79:c2:f6:19:e2:75:08:1c:3c:16:
                    19:68:02:8a:4d:c8:3e:3b:5d:a8:7f:13:d1:74:6a:
                    57:93:29:41:a2:aa:c5:87:70:11:9f:c9:f0:4d:6e:
                    3e:12:44:b9:38:82:07:75:8c:08:9e:02:01:82:06:
                    f5:8a:6e:74:7b:81:b9:e9:3d:49:7a:68:42:fc:10:
                    69:14:60:2b:5a:f5:58:63:b4:2b:9e:f2:d2:43:b3:
                    27:81:6e:3f:35:89:35:cd:40:aa:5a:be:90:e4:28:
                    71:90:68:a7:f1:3d:2b:51:e0:c4:c6:b2:69:f7:9c:
                    be:d8:18:c6:14:66:23:ec:77:7d:b4:d9:f5:1e:fd:
                    91:e6:85:8e:0c:86:dd:4a:0f:67:14:90:75:76:92:
                    2f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:DD:21:76:9A:6D:A9:15:C0:90:61:FA:6A:43:BC:4E:0F:01:C0:43
            X509v3 Authority Key Identifier:
                keyid:B5:E0:BE:3C:4F:73:F8:52:BF:F3:53:55:37:03:7C:AE:48:2A:4E:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/323830343a323566303a3a2f33322d3332203d3e20323634333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:67:7b:a4:5c:ce:0c:28:83:0f:1d:62:af:b7:30:69:67:98:
         63:f2:5f:84:02:d7:92:22:ae:2e:3d:a2:e5:1b:28:58:fc:5d:
         d4:7a:19:91:bb:f4:6b:20:d3:c4:33:ae:a7:49:3f:9e:ef:9c:
         5e:52:8f:ee:49:46:f0:d1:8a:cd:34:18:61:48:b5:a5:e0:88:
         54:d4:62:09:dc:7f:7a:7e:b3:1b:54:35:6b:f3:47:02:58:1a:
         44:f6:ff:34:44:ef:24:3b:6e:ba:39:6d:94:aa:1d:71:87:76:
         e8:a2:f7:e0:b9:7f:f6:65:e5:b7:30:eb:a9:e5:10:e8:6f:2d:
         dc:ee:1d:76:e9:ab:ea:50:9f:97:d8:5e:47:0e:f4:43:3c:d0:
         cf:a2:73:3e:53:d0:46:ea:61:78:1c:6a:3e:c7:3c:dc:96:1f:
         3f:e9:a2:a6:08:f0:2d:8a:db:e3:e8:b4:1b:3d:24:a7:ee:6f:
         60:4d:26:21:9d:99:39:ee:3f:27:ee:8c:56:da:f2:d6:d8:a3:
         24:9a:82:d4:39:34:eb:cf:73:fd:19:cf:84:1a:d8:99:a7:5a:
         82:4b:a0:e2:50:fe:cd:f9:6f:cf:45:1c:9d:13:c7:f7:fe:b0:
         cf:2b:df:64:93:59:54:bc:bc:dc:6c:de:6c:63:9f:ff:b3:e7:
         16:da:f7:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:35:12 2025 by rpki-client