Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CVViHahprc4XodXv4zS6kqjBVX1H6KxGDd2AGxGqoZZK/1/323830343a383064303a3a2f33322d3438203d3e20323732343134.roa
File:                     323830343a383064303a3a2f33322d3438203d3e20323732343134.roa (raw, json)
Hash identifier:          8WnVstw4Cj3tTwPqCalbntboqjj+1zmREw5nRIGBRZE=
Subject key identifier:   B4:BB:82:0A:63:F1:7D:31:87:E2:82:72:80:4C:03:C7:4C:36:46:26
Certificate issuer:       /CN=7124EA9FA20EDE3C280A7ADDE83C456C5F330A1C
Certificate serial:       13FDB3661BCB0EB22351986E851E0E72E878ED06
Authority key identifier: 71:24:EA:9F:A2:0E:DE:3C:28:0A:7A:DD:E8:3C:45:6C:5F:33:0A:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7124EA9FA20EDE3C280A7ADDE83C456C5F330A1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CVViHahprc4XodXv4zS6kqjBVX1H6KxGDd2AGxGqoZZK/1/323830343a383064303a3a2f33322d3438203d3e20323732343134.roa
Signing time:             Thu 04 Apr 2024 08:14:43 +0000
ROA not before:           Thu 04 Apr 2024 08:09:43 +0000
ROA not after:            Thu 03 Apr 2025 08:14:43 +0000
asID:                     272414
IP address blocks:        2804:80d0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:fd:b3:66:1b:cb:0e:b2:23:51:98:6e:85:1e:0e:72:e8:78:ed:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7124EA9FA20EDE3C280A7ADDE83C456C5F330A1C
        Validity
            Not Before: Apr  4 08:09:43 2024 GMT
            Not After : Apr  3 08:14:43 2025 GMT
        Subject: CN=B4BB820A63F17D3187E28272804C03C74C364626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:83:e7:fa:c6:ef:3c:c0:46:d8:d7:9d:65:8a:
                    2b:b2:51:07:92:a2:78:48:0d:b4:11:19:a6:7e:2b:
                    52:7f:32:2e:89:a1:85:a2:88:c6:71:8c:09:94:19:
                    63:85:b5:f6:99:93:db:95:98:ba:0c:a5:cd:99:f2:
                    41:de:b8:65:af:88:ba:a1:7e:8e:0f:06:60:53:a2:
                    28:e4:40:25:4d:c8:48:fa:10:a8:bb:fc:ef:1d:af:
                    6e:74:d3:e6:7e:44:67:31:e9:cb:eb:47:b6:17:7c:
                    63:e6:c8:6b:01:84:79:91:82:9e:ca:35:6f:24:98:
                    32:24:76:78:29:14:d4:82:5a:d1:69:37:e2:f5:f0:
                    d9:71:de:48:d2:67:55:b5:df:34:58:9f:ad:ba:38:
                    ba:63:d2:51:5a:d3:61:1b:03:20:7e:d1:b7:23:00:
                    da:0a:13:22:e5:23:57:f0:8a:36:78:c1:c7:89:12:
                    38:28:4a:70:d0:47:63:fc:f4:42:92:15:e4:7d:37:
                    5e:ba:89:ed:ab:7e:ab:60:10:a0:58:07:78:74:62:
                    fb:e4:dc:0b:39:03:d7:08:09:01:2d:75:23:84:00:
                    2c:d1:d1:ba:b4:37:ff:e9:7b:c5:be:82:3d:4e:df:
                    cb:fa:ff:ca:48:c7:22:8a:bc:9a:61:0c:07:76:cc:
                    01:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:BB:82:0A:63:F1:7D:31:87:E2:82:72:80:4C:03:C7:4C:36:46:26
            X509v3 Authority Key Identifier:
                keyid:71:24:EA:9F:A2:0E:DE:3C:28:0A:7A:DD:E8:3C:45:6C:5F:33:0A:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CVViHahprc4XodXv4zS6kqjBVX1H6KxGDd2AGxGqoZZK/1/7124EA9FA20EDE3C280A7ADDE83C456C5F330A1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7124EA9FA20EDE3C280A7ADDE83C456C5F330A1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CVViHahprc4XodXv4zS6kqjBVX1H6KxGDd2AGxGqoZZK/1/323830343a383064303a3a2f33322d3438203d3e20323732343134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:80d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:11:16:1f:ad:dd:cd:df:ce:75:7f:91:1e:47:bd:4c:86:d0:
         15:7c:05:73:f5:da:12:ba:e0:53:07:40:e5:14:b3:d3:75:54:
         18:7b:b4:e9:7d:72:10:2f:7a:92:5a:d3:68:33:24:47:e2:71:
         ab:43:64:d0:6b:a6:ea:05:2e:91:e7:00:59:3e:d6:78:2f:87:
         31:d1:c5:98:cd:ed:ad:26:26:b9:9f:63:6b:af:3b:69:14:bc:
         02:7c:73:5b:3a:0d:45:b2:c1:7e:c4:b0:5d:c9:95:de:6a:2b:
         b5:59:6a:93:9f:40:1f:81:16:08:5c:d2:77:5b:e8:01:3f:03:
         88:b3:8e:8f:a8:57:e9:56:6a:11:e0:00:c6:37:95:60:3e:3b:
         ce:68:b6:06:4c:f2:ee:f0:cf:f2:30:82:51:49:65:70:77:8f:
         11:bd:66:0e:cd:86:dc:49:59:b7:a4:58:fe:88:34:6c:a0:b7:
         1e:e7:6f:fb:38:ed:3d:1c:1d:7d:9e:5d:e4:ab:aa:4e:19:d5:
         1a:37:2a:c0:ab:f9:7b:2f:b3:95:e9:da:81:01:2c:84:1c:84:
         43:49:79:8e:9e:5b:bc:a3:0d:2a:e3:db:50:43:98:57:93:c6:
         f8:05:a5:b8:67:dc:7f:ac:ab:78:64:3c:22:15:cd:d6:e1:fe:
         a8:38:99:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:08:24 2025 by rpki-client