Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/323830343a336664383a3139363a3a2f34372d3437203d3e20323635393139.roa
File:                     323830343a336664383a3139363a3a2f34372d3437203d3e20323635393139.roa (raw, json)
Hash identifier:          sKJWDzXHI5TE/Q/036cAanfgZysvGTZnc/ZSYfN/5/8=
Subject key identifier:   99:F1:5E:C3:C2:ED:76:C9:E6:CF:11:BC:81:61:67:F6:96:7B:92:96
Certificate issuer:       /CN=1D4739886A145524D2F84E7F6704B0D6AFFC2AE9
Certificate serial:       46C21A947F758EDB782D4F54EC74722C535C9A53
Authority key identifier: 1D:47:39:88:6A:14:55:24:D2:F8:4E:7F:67:04:B0:D6:AF:FC:2A:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D4739886A145524D2F84E7F6704B0D6AFFC2AE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/323830343a336664383a3139363a3a2f34372d3437203d3e20323635393139.roa
Signing time:             Fri 07 Mar 2025 17:54:23 +0000
ROA not before:           Fri 07 Mar 2025 17:49:23 +0000
ROA not after:            Fri 06 Mar 2026 17:54:23 +0000
asID:                     265919
IP address blocks:        2804:3fd8:196::/47 maxlen: 47
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:c2:1a:94:7f:75:8e:db:78:2d:4f:54:ec:74:72:2c:53:5c:9a:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D4739886A145524D2F84E7F6704B0D6AFFC2AE9
        Validity
            Not Before: Mar  7 17:49:23 2025 GMT
            Not After : Mar  6 17:54:23 2026 GMT
        Subject: CN=99F15EC3C2ED76C9E6CF11BC816167F6967B9296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:16:80:d7:50:33:8f:d8:4e:fd:c5:3a:54:85:
                    00:dd:14:d7:fa:29:40:d6:56:c5:d2:38:d1:05:4e:
                    d7:0f:99:b7:84:4e:93:94:fa:64:e8:68:c2:bb:2e:
                    57:25:fb:ed:b5:c1:17:91:f8:d6:48:76:4a:52:3b:
                    e1:be:24:c1:2c:98:8f:2c:8d:94:ec:eb:d6:e6:55:
                    e6:eb:fc:17:5b:26:aa:d9:10:15:ed:cd:7d:a6:3d:
                    4c:aa:f8:1d:72:b5:3a:85:35:9a:e5:c5:70:c8:20:
                    ba:98:81:24:0a:19:84:e3:cb:65:fd:29:6d:70:a8:
                    58:70:19:75:1d:3d:eb:d7:c1:5b:04:87:13:65:24:
                    a7:08:f8:63:0e:ae:3c:aa:fe:03:17:82:34:e5:09:
                    b8:ba:06:3d:68:76:76:5a:3d:da:db:0e:5a:24:67:
                    d0:04:d3:1b:25:be:1f:68:03:91:48:2b:f0:eb:63:
                    5b:6b:97:c5:2d:af:4e:d1:df:14:f2:84:84:e0:d5:
                    b3:50:47:95:da:0a:6c:82:ef:e6:23:db:7e:51:a4:
                    4d:b0:ce:95:90:8e:ab:45:a8:4b:99:f5:19:e2:ee:
                    d0:84:98:3d:4e:d3:b5:d7:45:9e:36:74:0a:48:7e:
                    ba:6c:f2:38:4e:7f:72:40:b8:5a:54:eb:89:ae:b1:
                    26:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:F1:5E:C3:C2:ED:76:C9:E6:CF:11:BC:81:61:67:F6:96:7B:92:96
            X509v3 Authority Key Identifier:
                keyid:1D:47:39:88:6A:14:55:24:D2:F8:4E:7F:67:04:B0:D6:AF:FC:2A:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/1D4739886A145524D2F84E7F6704B0D6AFFC2AE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D4739886A145524D2F84E7F6704B0D6AFFC2AE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/323830343a336664383a3139363a3a2f34372d3437203d3e20323635393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3fd8:196::/47

    Signature Algorithm: sha256WithRSAEncryption
         64:0b:ec:5d:6b:a0:bb:4f:51:3d:83:0e:51:84:13:5d:54:f3:
         48:91:66:ba:18:a4:65:14:89:45:b2:c1:07:9a:08:4a:2a:66:
         17:b2:dd:ab:a4:4d:5a:70:95:11:bc:74:dc:b7:a1:81:e4:2d:
         95:ff:74:4d:3e:49:19:4d:e1:7f:72:5d:d0:3f:7f:2b:e8:5f:
         32:d2:d3:49:92:bd:29:b0:59:f8:dd:66:0c:d9:d8:ac:f9:49:
         ce:19:97:5d:6e:a5:74:74:a2:9b:71:53:c6:a5:8b:3a:d7:2b:
         7f:6b:60:46:e5:e9:2e:5e:53:38:05:2a:6f:15:b8:65:cd:93:
         b1:66:ea:43:c4:f6:9e:24:e9:65:ff:d0:ba:e5:aa:c8:f7:e1:
         04:5d:06:33:cb:05:7f:d7:b6:cb:10:d3:33:1f:36:95:3e:7f:
         ca:92:74:97:b8:e8:89:61:a3:27:c8:82:41:88:eb:8b:26:d1:
         a5:7c:49:e3:0f:a3:c3:17:ce:a3:cf:47:be:79:5b:28:70:bc:
         87:ff:e6:76:04:40:68:70:ae:39:95:2d:59:b1:bd:ca:14:c2:
         3d:bc:a1:2f:12:98:50:f5:66:fc:2a:60:b8:44:a3:32:cd:fe:
         b1:46:a1:8b:7e:64:66:5e:ac:a3:cd:d1:9a:76:a4:05:0c:aa:
         38:16:32:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:06:47 2025 by rpki-client