Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/323830343a373335633a3a2f33332d3333203d3e20323730393130.roa
File:                     323830343a373335633a3a2f33332d3333203d3e20323730393130.roa (raw, json)
Hash identifier:          z0+sB1//eAyCzbL22FmLwU37V2fItqL584ftAr3IU4s=
Subject key identifier:   60:28:71:1B:B2:84:99:EA:92:5C:8B:24:E9:86:0A:5B:8D:81:EC:0C
Certificate issuer:       /CN=21B66D518F6F1EC440896EDEA1C6F9E694CC3B66
Certificate serial:       26414B4AC39125239BEB6B9D134F039E55B144BA
Authority key identifier: 21:B6:6D:51:8F:6F:1E:C4:40:89:6E:DE:A1:C6:F9:E6:94:CC:3B:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/323830343a373335633a3a2f33332d3333203d3e20323730393130.roa
Signing time:             Thu 04 Apr 2024 07:17:26 +0000
ROA not before:           Thu 04 Apr 2024 07:12:26 +0000
ROA not after:            Thu 03 Apr 2025 07:17:26 +0000
asID:                     270910
IP address blocks:        2804:735c::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:41:4b:4a:c3:91:25:23:9b:eb:6b:9d:13:4f:03:9e:55:b1:44:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21B66D518F6F1EC440896EDEA1C6F9E694CC3B66
        Validity
            Not Before: Apr  4 07:12:26 2024 GMT
            Not After : Apr  3 07:17:26 2025 GMT
        Subject: CN=6028711BB28499EA925C8B24E9860A5B8D81EC0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0b:20:33:5e:e9:11:0e:d3:a2:a8:95:f2:67:
                    b2:9d:0d:d8:61:33:3a:a6:e7:25:54:43:a8:01:c8:
                    3a:1d:a2:c6:cf:ba:84:62:74:65:d6:32:9a:06:4c:
                    93:cb:9e:c3:0d:28:df:17:57:19:3b:3e:2d:84:a6:
                    fe:48:d2:de:85:1a:87:87:b0:6a:e7:3e:17:99:5f:
                    b9:71:86:e3:c2:47:81:d8:86:ad:f1:c4:2e:a3:0d:
                    47:48:bb:e7:0b:41:05:1b:04:c9:48:1f:12:47:ea:
                    42:35:5f:6b:a5:3c:a9:38:82:ad:6d:e6:46:c2:7d:
                    8f:00:a6:ba:d7:fb:56:d4:b6:4a:62:52:b8:95:b5:
                    cf:89:39:c2:18:ab:21:6e:d5:6e:18:d3:28:1a:80:
                    30:6c:02:06:46:02:05:d7:d9:58:57:45:04:c0:54:
                    80:cd:ed:87:dc:80:2a:fc:3d:dc:00:c5:d6:32:f1:
                    c8:46:ef:41:60:2d:84:de:36:f9:7a:ca:7c:77:9f:
                    9b:fd:26:70:f3:bf:52:1c:aa:ae:60:dd:01:d3:53:
                    8b:33:15:98:57:6c:c6:a2:33:da:f4:fa:3b:38:4a:
                    bd:ff:17:ef:c0:36:83:06:52:89:5b:4a:e0:f3:c4:
                    fa:a0:c8:fd:0f:1c:f0:ff:60:8f:19:16:0c:9c:1b:
                    f1:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:28:71:1B:B2:84:99:EA:92:5C:8B:24:E9:86:0A:5B:8D:81:EC:0C
            X509v3 Authority Key Identifier:
                keyid:21:B6:6D:51:8F:6F:1E:C4:40:89:6E:DE:A1:C6:F9:E6:94:CC:3B:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/323830343a373335633a3a2f33332d3333203d3e20323730393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:735c::/33

    Signature Algorithm: sha256WithRSAEncryption
         51:75:d7:44:b0:1b:7d:d1:0e:1d:a2:eb:d7:19:76:a8:6d:b2:
         e4:27:14:fb:e9:41:4d:ea:58:a0:c0:63:44:ec:9c:91:e4:68:
         54:0c:22:5b:27:03:90:f5:52:ec:8a:af:71:10:65:b3:9e:65:
         02:7c:72:78:50:4c:30:da:36:2d:0f:7c:98:77:2d:1d:92:73:
         c8:51:c8:5f:77:2f:37:b5:d0:6f:24:c5:80:a7:f2:46:a3:c0:
         4c:84:1d:b9:e8:03:13:ca:12:4e:79:2c:d4:25:96:3c:4c:cc:
         f0:2e:b7:41:91:29:76:a8:b2:f5:0e:b4:b2:05:87:f3:3f:bf:
         85:a1:e1:9d:70:1e:5d:fb:72:12:93:39:84:16:9d:fd:c6:f7:
         ca:a8:46:7c:1d:48:8d:a7:79:27:dc:f7:91:fc:0e:c6:f3:b5:
         f2:20:4e:85:20:e7:a9:0a:2f:91:30:af:a0:bc:3f:fb:e4:7a:
         ac:40:79:ed:f1:12:82:13:22:5a:54:c0:a8:b5:0b:14:6d:60:
         24:e8:2f:ea:00:43:2a:cf:e1:e1:a4:10:99:9a:a4:79:93:54:
         9c:ce:41:76:28:da:e4:4f:d2:42:99:2a:f3:e0:39:c0:65:db:
         44:15:59:44:09:05:fb:84:7c:e7:68:7d:c3:46:86:61:27:fe:
         e0:9d:70:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:25 2025 by rpki-client