Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CoY68GWihSr8Hrg8gmYtjS4m2LfwCFCMSfBne65iGuDm/0/323830343a336163383a3a2f33322d313238203d3e20323636313039.roa
File:                     323830343a336163383a3a2f33322d313238203d3e20323636313039.roa (raw, json)
Hash identifier:          wd4Wuygm8KfMSyTqz3CpNnuCA7m3qTiRziCAwa6r4pk=
Subject key identifier:   A9:ED:63:B9:58:A2:3E:67:47:9E:81:74:6A:5A:1B:04:B2:2A:D3:F4
Certificate issuer:       /CN=D5B5C7706846703EDC32007EFBDD476B25503570
Certificate serial:       08884A03991F66652F61FA800EBDE03FC5B3E3D2
Authority key identifier: D5:B5:C7:70:68:46:70:3E:DC:32:00:7E:FB:DD:47:6B:25:50:35:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5B5C7706846703EDC32007EFBDD476B25503570.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CoY68GWihSr8Hrg8gmYtjS4m2LfwCFCMSfBne65iGuDm/0/323830343a336163383a3a2f33322d313238203d3e20323636313039.roa
Signing time:             Thu 15 May 2025 14:57:43 +0000
ROA not before:           Thu 15 May 2025 14:52:43 +0000
ROA not after:            Thu 14 May 2026 14:57:43 +0000
asID:                     266109
IP address blocks:        2804:3ac8::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:88:4a:03:99:1f:66:65:2f:61:fa:80:0e:bd:e0:3f:c5:b3:e3:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5B5C7706846703EDC32007EFBDD476B25503570
        Validity
            Not Before: May 15 14:52:43 2025 GMT
            Not After : May 14 14:57:43 2026 GMT
        Subject: CN=A9ED63B958A23E67479E81746A5A1B04B22AD3F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:db:f7:7b:18:b0:33:d3:4a:89:80:8f:b0:67:
                    c5:92:a2:c2:97:eb:95:4f:40:6e:9c:24:1f:36:5d:
                    88:85:ed:67:bd:eb:0f:3d:83:c3:61:2f:b2:22:2e:
                    a2:e1:23:11:47:cb:08:39:2f:71:e0:0a:5b:7e:2c:
                    c5:73:58:34:0b:f9:91:6e:e6:df:f5:b1:02:f6:cc:
                    c8:92:b3:28:75:69:b3:fd:7e:1b:e8:7f:d7:eb:b5:
                    b2:8a:48:4a:d3:bf:a0:3d:cd:d0:6c:f8:73:ac:3a:
                    ea:4a:c3:85:5b:98:50:ec:64:be:f5:a4:63:aa:60:
                    fe:9d:5d:17:fc:fd:e4:13:7e:40:57:5e:0f:02:41:
                    87:16:01:b3:74:53:90:e8:00:ab:38:17:0a:30:a5:
                    e2:b3:db:bf:61:34:db:58:7b:7f:04:2c:f9:ca:1f:
                    d5:2e:98:9c:21:30:e5:b7:bb:eb:32:b7:73:7a:59:
                    91:08:03:92:c7:ca:0f:5c:28:fc:95:14:e1:53:39:
                    51:ff:9d:4d:df:d9:80:75:06:98:3f:52:05:29:1e:
                    56:c1:d8:7a:48:e1:76:75:25:6e:52:d5:ca:46:fb:
                    7c:94:f5:ac:00:c5:32:e8:1c:b6:c0:a0:a7:05:10:
                    50:5c:38:1c:08:8f:37:72:de:91:6d:95:7a:e1:66:
                    0a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:ED:63:B9:58:A2:3E:67:47:9E:81:74:6A:5A:1B:04:B2:2A:D3:F4
            X509v3 Authority Key Identifier:
                keyid:D5:B5:C7:70:68:46:70:3E:DC:32:00:7E:FB:DD:47:6B:25:50:35:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CoY68GWihSr8Hrg8gmYtjS4m2LfwCFCMSfBne65iGuDm/0/D5B5C7706846703EDC32007EFBDD476B25503570.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5B5C7706846703EDC32007EFBDD476B25503570.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CoY68GWihSr8Hrg8gmYtjS4m2LfwCFCMSfBne65iGuDm/0/323830343a336163383a3a2f33322d313238203d3e20323636313039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ac8::/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:ff:66:19:f4:91:31:90:08:b6:ba:96:b1:92:22:7f:b3:3b:
         d9:5b:c8:50:ca:ec:c2:46:d2:da:ed:98:98:15:b0:c7:0f:45:
         7d:d7:d7:74:bd:0c:1c:4f:90:89:88:68:14:30:04:3c:7e:3e:
         ea:5a:ee:4f:a5:32:f8:5e:c3:5a:ed:0a:02:60:21:2d:8e:e2:
         74:5c:45:21:da:33:42:a0:3b:84:6a:1d:30:69:ee:3c:3e:79:
         a9:95:76:a3:26:32:d2:ac:6b:2c:4b:fc:45:ac:43:14:5d:68:
         8a:ee:eb:5b:2d:cf:91:02:72:60:03:c6:34:29:d4:dd:96:a3:
         0c:49:8d:99:25:ac:c4:41:5a:21:d8:56:dc:1c:7f:92:5c:f4:
         d8:c4:7b:26:64:6b:ca:7b:45:c9:d4:78:12:cc:33:e2:85:71:
         a8:64:dd:66:64:33:8a:85:36:6b:75:63:fe:bc:32:63:2d:3f:
         4f:a1:3d:ad:9b:25:a6:30:23:8f:64:0a:4f:bf:1c:9a:1c:76:
         bb:84:95:42:99:84:4c:d1:91:eb:15:06:5d:f2:6b:f9:03:ad:
         cf:6d:87:70:e5:ba:68:19:45:87:07:30:ae:bc:d0:c6:55:a7:
         5d:22:2f:7d:94:1a:a7:b6:0c:81:80:e8:3b:3f:16:a8:19:d2:
         1c:44:1d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 01:30:02 2025 by rpki-client