Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/323830343a383237303a343030303a3a2f33342d3334203d3e203631363038.roa
File:                     323830343a383237303a343030303a3a2f33342d3334203d3e203631363038.roa (raw, json)
Hash identifier:          GPNYtEq23d6WWeNjnxhyON9srNvwLK8FegrRlTLG6nw=
Subject key identifier:   FD:3D:7A:69:6D:20:87:48:E4:AC:9C:14:D5:16:2C:AD:57:E1:CD:4F
Certificate issuer:       /CN=B04ECA621E6FCB90F1469DB6E89AD4D2DED79CC3
Certificate serial:       11533E8D4289B0147D98DD8D5BF4DA91E7CCE628
Authority key identifier: B0:4E:CA:62:1E:6F:CB:90:F1:46:9D:B6:E8:9A:D4:D2:DE:D7:9C:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B04ECA621E6FCB90F1469DB6E89AD4D2DED79CC3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/323830343a383237303a343030303a3a2f33342d3334203d3e203631363038.roa
Signing time:             Wed 19 Mar 2025 20:09:08 +0000
ROA not before:           Wed 19 Mar 2025 20:04:08 +0000
ROA not after:            Wed 18 Mar 2026 20:09:08 +0000
asID:                     61608
IP address blocks:        2804:8270:4000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:53:3e:8d:42:89:b0:14:7d:98:dd:8d:5b:f4:da:91:e7:cc:e6:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B04ECA621E6FCB90F1469DB6E89AD4D2DED79CC3
        Validity
            Not Before: Mar 19 20:04:08 2025 GMT
            Not After : Mar 18 20:09:08 2026 GMT
        Subject: CN=FD3D7A696D208748E4AC9C14D5162CAD57E1CD4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ce:3d:6f:ab:08:b9:81:ad:ee:74:47:34:6c:
                    bb:fe:be:fe:88:e8:3b:6f:64:53:9b:90:2a:c8:65:
                    fa:7a:ef:87:56:e5:3c:e0:c4:42:1b:43:ac:0f:a9:
                    b7:32:1f:d1:2f:5a:45:ed:3e:80:ec:ee:b0:56:9b:
                    7c:3f:41:ba:50:41:7e:d4:2b:67:1f:bf:77:54:ba:
                    9d:69:cb:e2:a8:75:2f:51:e4:0d:5c:4a:ff:e6:03:
                    bb:ce:f3:98:7c:15:96:fd:ba:8c:b6:a4:da:3c:a7:
                    25:cc:22:08:fc:21:97:30:6b:f1:dc:cd:79:37:d4:
                    3d:fd:c7:6b:e4:71:c1:4b:b3:9f:d9:22:40:df:da:
                    a6:8f:77:78:3b:91:25:45:58:d0:94:aa:c4:f5:d7:
                    f2:76:c2:bd:d2:36:c9:3f:ee:62:10:ff:69:a1:58:
                    57:31:d0:07:f4:c7:84:eb:fe:ac:89:fd:a6:5f:6b:
                    33:2b:85:b2:9d:48:87:4a:30:89:8c:6b:9a:be:d1:
                    46:45:8e:86:ae:e6:a1:32:ac:46:4c:1e:9c:e4:fa:
                    6b:ad:99:00:c1:17:cf:9c:7b:78:8d:11:61:53:33:
                    a6:d6:21:4a:a6:e3:a3:8a:97:af:9d:e1:96:9c:d6:
                    42:05:58:9a:f2:25:b1:35:0c:c1:99:94:22:eb:5f:
                    42:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:3D:7A:69:6D:20:87:48:E4:AC:9C:14:D5:16:2C:AD:57:E1:CD:4F
            X509v3 Authority Key Identifier:
                keyid:B0:4E:CA:62:1E:6F:CB:90:F1:46:9D:B6:E8:9A:D4:D2:DE:D7:9C:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/B04ECA621E6FCB90F1469DB6E89AD4D2DED79CC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B04ECA621E6FCB90F1469DB6E89AD4D2DED79CC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/323830343a383237303a343030303a3a2f33342d3334203d3e203631363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8270:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         66:b6:b7:b5:20:8f:7e:38:bb:07:b7:80:9d:9c:95:5c:32:ae:
         4c:77:82:2d:7f:18:65:43:3d:aa:da:6c:46:51:8c:02:ef:ce:
         88:2d:3e:ac:bd:f8:3d:61:ab:a6:34:79:c4:3a:05:42:4e:7d:
         eb:71:89:e6:17:9f:a3:68:26:f5:63:b7:19:7d:2b:04:8a:ae:
         a4:dd:0d:22:0c:83:b4:c4:0d:da:6c:e7:76:28:d5:24:0b:db:
         06:28:50:2c:95:f3:a5:da:88:a6:41:4c:f0:38:d6:47:0d:5a:
         3f:61:44:bd:64:0c:c4:51:cc:26:ae:d8:32:79:29:75:f9:e0:
         c5:c2:fd:98:ef:5a:c7:28:86:44:09:c0:52:8b:8a:ee:6b:4c:
         06:dc:9d:38:b7:48:9c:85:39:9d:88:b0:ab:46:52:f1:58:f8:
         2f:17:ca:4b:cb:50:30:22:db:6e:18:7e:be:83:ad:85:60:d5:
         fe:09:19:14:05:6e:e9:1d:87:da:27:ca:48:0c:96:2f:6b:57:
         05:d7:0a:88:74:b8:60:d7:64:a0:70:85:ad:5e:fc:fa:dd:e7:
         e3:f8:fe:05:32:74:d8:ab:ce:c6:fc:0b:c3:f4:0f:77:d2:c4:
         e6:f6:0c:c0:ba:2f:6e:b2:03:f4:95:63:03:e0:a4:84:07:d4:
         93:8a:3d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:42:39 2025 by rpki-client