Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cd745dSCjNkCXwJuiEX8rQwj7VXtYyN28wghJbB5JBxM/0/323830343a366330383a3a2f33342d3334203d3e20323730343431.roa
File:                     323830343a366330383a3a2f33342d3334203d3e20323730343431.roa (raw, json)
Hash identifier:          JyDinm0K75txgeWcpO5BJ/ijL+KY1O9DngnLh+Hzq3k=
Subject key identifier:   A6:77:CA:F1:14:02:13:C8:BA:32:EC:8D:C6:BE:F1:52:45:E6:07:A1
Certificate issuer:       /CN=B7A47B954D8AD8923A7A8FADCDB82787C31FB16A
Certificate serial:       662B25E22B40DD90093DE5BAB7E0D0BDBAF1DA0C
Authority key identifier: B7:A4:7B:95:4D:8A:D8:92:3A:7A:8F:AD:CD:B8:27:87:C3:1F:B1:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7A47B954D8AD8923A7A8FADCDB82787C31FB16A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cd745dSCjNkCXwJuiEX8rQwj7VXtYyN28wghJbB5JBxM/0/323830343a366330383a3a2f33342d3334203d3e20323730343431.roa
Signing time:             Tue 03 Dec 2024 14:13:50 +0000
ROA not before:           Tue 03 Dec 2024 14:08:50 +0000
ROA not after:            Tue 02 Dec 2025 14:13:50 +0000
asID:                     270441
IP address blocks:        2804:6c08::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:2b:25:e2:2b:40:dd:90:09:3d:e5:ba:b7:e0:d0:bd:ba:f1:da:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7A47B954D8AD8923A7A8FADCDB82787C31FB16A
        Validity
            Not Before: Dec  3 14:08:50 2024 GMT
            Not After : Dec  2 14:13:50 2025 GMT
        Subject: CN=A677CAF1140213C8BA32EC8DC6BEF15245E607A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ef:6f:a0:07:f1:40:5f:e2:c5:03:0c:b0:ef:
                    58:a0:ae:af:17:07:0b:11:6a:76:95:1f:5f:e5:9d:
                    ef:75:cc:70:2a:eb:47:5b:13:64:13:eb:c9:49:06:
                    b4:19:10:f6:36:fd:2b:ee:7a:e9:bd:a9:00:47:45:
                    74:00:94:15:f7:0a:3e:7a:e2:9e:b9:08:72:e4:80:
                    02:95:d9:df:85:dd:ae:1d:37:a9:8c:f7:cf:fd:97:
                    cc:4b:4a:c5:51:e0:e3:59:e3:49:87:ef:ad:44:44:
                    c9:4b:65:60:2a:17:91:00:09:69:43:87:c7:8e:61:
                    1e:3f:ba:5f:50:64:49:58:7c:15:2c:ee:be:6c:06:
                    5e:bc:81:b6:71:58:24:93:0d:ea:ae:ee:e6:23:db:
                    9c:79:b2:14:d7:d4:f8:26:cb:a2:12:7d:0a:3c:3a:
                    0f:df:9c:38:b3:36:ac:06:f9:f7:93:e4:63:76:55:
                    f8:ea:20:59:eb:2b:65:9d:03:67:51:6e:e0:54:61:
                    ef:b3:31:cf:d2:0c:f5:5f:96:ee:80:20:93:83:eb:
                    ca:db:9a:b7:8e:d8:44:f8:73:87:1a:cb:d8:e5:9e:
                    8b:2b:d5:1e:3a:de:7a:ad:fc:e6:dc:3b:38:ed:b7:
                    0a:93:1c:c0:17:d4:b1:ef:48:c6:fa:86:97:06:15:
                    c8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:77:CA:F1:14:02:13:C8:BA:32:EC:8D:C6:BE:F1:52:45:E6:07:A1
            X509v3 Authority Key Identifier:
                keyid:B7:A4:7B:95:4D:8A:D8:92:3A:7A:8F:AD:CD:B8:27:87:C3:1F:B1:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cd745dSCjNkCXwJuiEX8rQwj7VXtYyN28wghJbB5JBxM/0/B7A47B954D8AD8923A7A8FADCDB82787C31FB16A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7A47B954D8AD8923A7A8FADCDB82787C31FB16A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cd745dSCjNkCXwJuiEX8rQwj7VXtYyN28wghJbB5JBxM/0/323830343a366330383a3a2f33342d3334203d3e20323730343431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c08::/34

    Signature Algorithm: sha256WithRSAEncryption
         8c:0a:0d:ef:79:91:ac:ad:ca:bc:b6:cc:41:f9:40:d8:d6:8c:
         dd:1b:12:a3:f3:82:84:14:37:d9:77:42:b5:a0:e9:1f:8a:f4:
         74:53:2a:dd:97:c2:ed:4a:c7:ba:37:d8:05:86:2b:65:59:b9:
         64:d9:94:0f:0c:2c:43:cf:6b:af:08:f9:47:79:0d:6d:a5:f1:
         d4:38:d2:3f:fb:32:9e:5e:62:df:75:e9:43:f0:4b:f9:7e:f7:
         23:87:3c:fb:21:45:bd:e9:b5:44:1a:05:5c:0a:8c:24:85:30:
         1d:2c:e3:8c:b7:e6:12:94:d8:7c:b6:61:28:32:aa:94:dc:1e:
         ad:b9:a7:6a:2b:6b:1d:ee:6a:c6:ad:2d:ab:df:11:b9:6a:c1:
         a2:e7:64:83:10:f3:40:68:0d:fc:bb:46:35:36:b2:54:bf:12:
         9b:1d:ba:91:e8:cf:48:eb:94:37:fd:18:0b:2c:96:b2:71:31:
         19:06:a1:17:4b:9a:18:00:d2:ee:33:8b:0c:bc:57:ba:7b:17:
         6a:ee:5e:77:46:7a:59:5f:b5:ff:f6:67:6b:cc:db:42:f7:dc:
         66:14:ac:79:9a:b6:45:83:84:ef:09:b0:ba:e1:54:9b:3f:47:
         3a:33:79:3e:e2:a0:ee:ba:4f:4e:b9:7e:83:42:5a:3e:aa:8c:
         4d:a0:3d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:48:37 2025 by rpki-client