Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/323830343a6438343a3a2f33322d313238203d3e203238313731.roa
File:                     323830343a6438343a3a2f33322d313238203d3e203238313731.roa (raw, json)
Hash identifier:          fFWlkw4VgGZKIM3JMaVwB2wGQVwKvg1CcuwKadWJSlU=
Subject key identifier:   2A:56:0D:BF:66:31:63:12:2C:ED:5A:38:1A:88:B0:A4:DD:70:D1:16
Certificate issuer:       /CN=F61AA6D04968E2222C81499C46D03813F1070400
Certificate serial:       202465D41E1E2A8B1673D5B26819CC70650161F6
Authority key identifier: F6:1A:A6:D0:49:68:E2:22:2C:81:49:9C:46:D0:38:13:F1:07:04:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F61AA6D04968E2222C81499C46D03813F1070400.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/323830343a6438343a3a2f33322d313238203d3e203238313731.roa
Signing time:             Tue 08 Oct 2024 05:46:52 +0000
ROA not before:           Tue 08 Oct 2024 05:41:52 +0000
ROA not after:            Tue 07 Oct 2025 05:46:52 +0000
asID:                     28171
IP address blocks:        2804:d84::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:24:65:d4:1e:1e:2a:8b:16:73:d5:b2:68:19:cc:70:65:01:61:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F61AA6D04968E2222C81499C46D03813F1070400
        Validity
            Not Before: Oct  8 05:41:52 2024 GMT
            Not After : Oct  7 05:46:52 2025 GMT
        Subject: CN=2A560DBF663163122CED5A381A88B0A4DD70D116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ae:d3:7f:4f:d1:12:49:56:76:51:1f:6e:a2:
                    c3:a2:b6:42:61:2b:41:08:41:18:89:eb:ff:f0:5f:
                    2c:15:c2:ad:7c:99:80:0f:d9:e0:67:35:2d:84:2e:
                    02:18:f5:a9:d5:2a:0c:2a:e9:95:a3:22:62:48:ca:
                    09:cb:cf:6a:99:54:05:73:67:84:f4:d4:26:39:c0:
                    21:80:62:2d:27:b6:80:d6:47:3e:fe:8d:c7:93:c5:
                    20:a6:6f:46:96:a2:de:ae:f8:b0:17:be:66:46:7a:
                    c9:8d:64:5c:89:a2:54:47:ea:d4:ab:b9:a6:13:3a:
                    09:8d:0c:05:fd:59:7f:3a:d7:84:76:6b:c9:54:0a:
                    d6:04:fc:17:76:1b:c5:c0:e2:90:ef:69:70:ef:df:
                    db:2e:8d:1d:09:7a:84:3f:e9:20:56:89:06:03:de:
                    69:2c:86:86:89:ee:5d:69:c0:34:39:71:07:a9:38:
                    e3:8c:80:6b:72:80:e1:49:fb:64:17:4b:54:d3:17:
                    bc:16:0d:48:13:de:d1:f0:bb:52:91:0f:c2:e1:30:
                    e3:b1:bc:c5:65:0f:39:7e:9a:26:47:2e:74:b1:bc:
                    46:05:82:8e:17:3d:f2:5d:55:ac:e1:41:12:35:2e:
                    06:4c:57:8c:c8:e3:a8:45:5b:3e:9f:ab:4d:16:d2:
                    8a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:56:0D:BF:66:31:63:12:2C:ED:5A:38:1A:88:B0:A4:DD:70:D1:16
            X509v3 Authority Key Identifier:
                keyid:F6:1A:A6:D0:49:68:E2:22:2C:81:49:9C:46:D0:38:13:F1:07:04:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F61AA6D04968E2222C81499C46D03813F1070400.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/323830343a6438343a3a2f33322d313238203d3e203238313731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d84::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:36:53:54:b3:6e:9a:b0:01:e9:0f:83:36:21:bc:27:f9:12:
         12:ac:33:bf:f0:c4:bb:35:0b:cc:28:94:e8:6e:72:84:35:d2:
         70:2f:19:43:e8:7d:6e:45:26:47:22:ce:cb:74:fa:48:f0:fb:
         23:31:6d:b8:69:30:7b:17:b4:c8:96:3c:3c:ec:dd:68:58:02:
         46:22:79:38:77:74:9b:dd:a7:1b:6c:78:d5:fe:7d:9d:63:c0:
         a1:5d:bf:a2:12:ad:48:cb:0b:50:51:6b:19:44:fd:c3:33:72:
         c4:c9:9d:b6:63:b7:25:1d:8a:f3:fb:38:89:cf:b7:f2:d7:af:
         ff:24:3c:69:b5:88:06:8e:04:cc:6a:56:89:68:aa:d9:b0:f6:
         5f:3d:43:ff:5e:f3:af:d8:f9:76:75:61:87:90:10:9a:5a:38:
         57:e5:ff:5a:c2:06:46:55:6f:41:a8:14:5e:97:fd:fc:49:80:
         e1:77:0a:3c:7a:99:d8:e2:ea:81:d0:db:ce:4a:11:79:47:2c:
         be:02:b5:ce:c6:f1:15:85:6c:1e:80:30:9f:a4:de:39:56:8d:
         99:6d:78:eb:4a:57:68:9f:c3:a5:b3:4f:bb:d4:49:24:35:b4:
         fc:7e:0e:98:dd:60:82:78:5c:70:f0:fa:b5:65:71:82:0c:27:
         dd:71:8a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:16:34 2025 by rpki-client