Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/323830343a323539633a3130303a3a2f34302d3430203d3e203532373732.roa
File:                     323830343a323539633a3130303a3a2f34302d3430203d3e203532373732.roa (raw, json)
Hash identifier:          o9mdCfi1BkUL4KnVcck/VyVkt65bxujXA0YL62dKdug=
Subject key identifier:   92:CF:FA:98:2A:53:56:D5:78:A7:5E:99:34:9B:DC:04:B8:B5:FC:A7
Certificate issuer:       /CN=32F6AC3D8F506BDCEC812BDFD2CFB331A251EAC9
Certificate serial:       2E3462A0DDAF49023923F80EE8E3B5F6A48104DB
Authority key identifier: 32:F6:AC:3D:8F:50:6B:DC:EC:81:2B:DF:D2:CF:B3:31:A2:51:EA:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32F6AC3D8F506BDCEC812BDFD2CFB331A251EAC9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/323830343a323539633a3130303a3a2f34302d3430203d3e203532373732.roa
Signing time:             Fri 14 Feb 2025 17:47:31 +0000
ROA not before:           Fri 14 Feb 2025 17:42:31 +0000
ROA not after:            Fri 13 Feb 2026 17:47:31 +0000
asID:                     52772
IP address blocks:        2804:259c:100::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:34:62:a0:dd:af:49:02:39:23:f8:0e:e8:e3:b5:f6:a4:81:04:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32F6AC3D8F506BDCEC812BDFD2CFB331A251EAC9
        Validity
            Not Before: Feb 14 17:42:31 2025 GMT
            Not After : Feb 13 17:47:31 2026 GMT
        Subject: CN=92CFFA982A5356D578A75E99349BDC04B8B5FCA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ad:73:b6:84:4f:e6:8d:b3:97:6c:5c:2f:d8:
                    0e:24:b0:cc:46:c3:fe:21:6f:c8:4d:bd:4f:08:b5:
                    03:75:eb:51:fd:f4:c0:e4:d1:0a:7e:ee:47:9b:b0:
                    b5:c2:79:5d:16:ad:9e:57:9e:67:87:fb:c8:61:75:
                    14:53:4c:18:c0:9c:90:bb:c3:9e:55:33:80:32:ac:
                    e9:f4:7d:93:2d:7e:fb:57:74:8c:53:14:9a:67:7e:
                    7c:00:20:7d:cb:56:92:a3:18:d9:63:e0:cd:1d:4a:
                    09:91:b8:de:91:fa:8f:24:5e:a0:73:e9:87:fc:e2:
                    fb:70:73:22:aa:b9:ea:d1:fd:18:24:01:71:0f:85:
                    a8:f3:9f:e0:be:b0:c8:a8:ca:b6:be:dd:1d:a7:ed:
                    01:32:78:bf:67:d4:b4:92:7f:03:80:df:e1:7d:ca:
                    7e:40:fc:e6:8f:c5:5f:24:5d:18:39:31:8e:e4:9f:
                    07:50:d5:a8:24:7e:5e:10:40:cf:6c:27:f3:16:99:
                    d0:c6:38:37:c1:00:12:71:5a:7d:de:5a:fa:9f:66:
                    0b:98:8f:62:5f:41:dc:c8:49:b8:02:4f:a1:01:f5:
                    80:81:f9:f3:8b:de:40:68:f9:95:42:72:e8:79:8f:
                    7a:1d:54:1d:55:4c:88:cf:4a:46:aa:7a:95:24:b4:
                    05:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:CF:FA:98:2A:53:56:D5:78:A7:5E:99:34:9B:DC:04:B8:B5:FC:A7
            X509v3 Authority Key Identifier:
                keyid:32:F6:AC:3D:8F:50:6B:DC:EC:81:2B:DF:D2:CF:B3:31:A2:51:EA:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/32F6AC3D8F506BDCEC812BDFD2CFB331A251EAC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32F6AC3D8F506BDCEC812BDFD2CFB331A251EAC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/323830343a323539633a3130303a3a2f34302d3430203d3e203532373732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:259c:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         20:bf:89:5f:93:19:bc:82:e7:e0:50:c2:15:5d:84:dd:26:ed:
         d2:5b:9d:a8:bd:bb:4a:3a:13:30:eb:d5:7d:c9:55:ca:40:ed:
         87:31:b4:71:d0:6e:2e:36:45:b7:70:55:d4:32:6a:1d:63:15:
         ae:ed:5e:43:f6:52:3e:90:fc:07:8c:e6:1e:3f:84:a6:b2:0d:
         4f:ca:5e:56:23:ac:62:93:3c:52:e5:12:e4:02:4b:f6:e5:46:
         96:a2:44:da:4d:e8:d8:b3:43:26:a7:db:6e:39:19:e8:0b:c6:
         cd:3f:7f:14:89:82:d7:46:df:92:f9:46:fa:bc:c5:9d:22:b8:
         19:85:6a:19:e1:d8:a0:62:7c:d9:1d:8b:0d:e4:2b:fd:a5:77:
         4d:29:60:76:34:6b:1a:94:02:74:c0:da:7e:5f:5d:52:76:48:
         57:f5:15:57:87:53:d8:50:9c:d1:3e:1f:e0:c1:99:37:39:2a:
         45:a0:81:be:5a:f2:61:3b:54:89:80:bc:da:c8:ee:57:9c:3f:
         43:64:62:c2:34:54:06:31:c0:b5:89:d1:66:00:74:ac:a3:a8:
         83:a7:ff:a0:2a:21:50:c7:8c:ab:c9:8b:fc:f9:0b:db:af:de:
         a0:1a:ec:08:25:6a:b8:07:46:6b:cf:a1:7b:bb:cb:bf:23:a9:
         f0:ef:dd:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:33:39 2025 by rpki-client