Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DGgw3P2KCLnaMRxipCQtrqjHfCxVxJ1CMEJdEMkvANNh/0/323830343a316235383a3a2f33322d313238203d3e203631373233.roa
File:                     323830343a316235383a3a2f33322d313238203d3e203631373233.roa (raw, json)
Hash identifier:          0CMHRm3uDDULPS+sAWHonCW8vmBotIyhJ/K2l4oGmjA=
Subject key identifier:   09:D6:12:23:57:0E:6F:0E:BB:98:DF:2D:34:A4:3B:67:45:D9:C9:36
Certificate issuer:       /CN=A70F96971E1BBF4E4D65EDDAA74B53BB73BE8135
Certificate serial:       4ACCE78378E31B3E4363CB462F79C9751E305AE2
Authority key identifier: A7:0F:96:97:1E:1B:BF:4E:4D:65:ED:DA:A7:4B:53:BB:73:BE:81:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A70F96971E1BBF4E4D65EDDAA74B53BB73BE8135.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DGgw3P2KCLnaMRxipCQtrqjHfCxVxJ1CMEJdEMkvANNh/0/323830343a316235383a3a2f33322d313238203d3e203631373233.roa
Signing time:             Wed 12 Mar 2025 13:09:38 +0000
ROA not before:           Wed 12 Mar 2025 13:04:38 +0000
ROA not after:            Wed 11 Mar 2026 13:09:38 +0000
asID:                     61723
IP address blocks:        2804:1b58::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:cc:e7:83:78:e3:1b:3e:43:63:cb:46:2f:79:c9:75:1e:30:5a:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A70F96971E1BBF4E4D65EDDAA74B53BB73BE8135
        Validity
            Not Before: Mar 12 13:04:38 2025 GMT
            Not After : Mar 11 13:09:38 2026 GMT
        Subject: CN=09D61223570E6F0EBB98DF2D34A43B6745D9C936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1c:df:a2:53:ac:20:b4:90:bf:39:2d:af:0e:
                    9c:b6:2a:68:22:4e:46:b3:fd:f8:40:39:6c:cf:74:
                    ec:79:4b:ce:93:75:e4:3b:b2:bc:4c:f0:bc:e4:a2:
                    1a:a1:62:17:56:b2:dc:f4:26:b5:ae:e6:94:ce:13:
                    ae:33:88:b5:31:5b:e2:bd:31:fd:e7:69:d1:f9:2e:
                    20:a1:e5:1a:57:58:9f:db:17:06:f5:30:4e:b1:3b:
                    a6:ea:09:f1:50:8c:1d:b7:75:18:ba:bf:cd:b5:36:
                    af:8f:24:45:bd:ff:f6:98:4c:c4:bd:1e:d9:f5:32:
                    d5:63:03:ba:b6:a2:d0:6e:aa:8e:e8:67:6a:2e:a0:
                    8b:db:6e:79:04:92:91:12:08:44:fc:f5:cd:26:24:
                    a6:b8:47:1b:b6:84:5f:c5:bc:68:e5:a1:92:4c:c7:
                    f8:74:33:0b:2b:31:f4:c7:53:ac:10:11:fe:f0:7c:
                    ea:f3:18:6e:92:93:1d:7b:2d:2b:4b:fa:79:13:22:
                    6d:5a:52:d3:f3:9d:0e:10:f7:1a:d0:88:31:89:3a:
                    b8:25:8d:2d:cb:2b:d3:38:6d:4a:ae:20:07:54:7c:
                    94:ce:92:f5:b4:74:a5:f9:ec:b7:fe:ad:aa:7e:a8:
                    45:9c:2b:c3:31:d3:d5:e9:a6:c1:31:18:a6:27:2c:
                    bd:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:D6:12:23:57:0E:6F:0E:BB:98:DF:2D:34:A4:3B:67:45:D9:C9:36
            X509v3 Authority Key Identifier:
                keyid:A7:0F:96:97:1E:1B:BF:4E:4D:65:ED:DA:A7:4B:53:BB:73:BE:81:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DGgw3P2KCLnaMRxipCQtrqjHfCxVxJ1CMEJdEMkvANNh/0/A70F96971E1BBF4E4D65EDDAA74B53BB73BE8135.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A70F96971E1BBF4E4D65EDDAA74B53BB73BE8135.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DGgw3P2KCLnaMRxipCQtrqjHfCxVxJ1CMEJdEMkvANNh/0/323830343a316235383a3a2f33322d313238203d3e203631373233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b58::/32

    Signature Algorithm: sha256WithRSAEncryption
         db:02:74:12:8b:c6:4e:d0:72:34:52:7b:ee:48:cb:a9:7b:bd:
         97:a9:16:4f:6d:5b:cd:a3:cd:e0:1f:ff:f0:98:f3:07:ea:33:
         d8:70:94:1c:9f:b3:d9:a7:30:6b:e8:72:bb:ed:a2:79:ba:5d:
         56:44:18:8e:cb:0b:e4:46:18:a6:1d:b2:7c:be:7f:21:e7:ee:
         c6:0d:6b:fb:6e:88:e5:f7:8c:f0:30:e1:07:57:98:c0:51:fa:
         0b:b6:9f:54:e1:73:fc:42:67:e0:c4:09:8f:c6:00:fb:2e:d0:
         3c:49:b1:3d:56:2d:30:0f:62:56:c7:78:3f:72:48:f4:99:47:
         2f:0d:ac:56:74:88:ba:16:85:82:81:e1:de:71:8f:93:33:36:
         33:19:97:71:79:cc:51:16:3b:ed:b6:4d:58:ed:3e:cf:e4:b0:
         20:dd:75:1b:e0:4e:39:99:80:1c:42:66:75:01:c0:d2:84:5d:
         42:ed:b3:b4:f7:40:49:14:bf:80:e2:89:1e:93:80:bc:88:7f:
         8e:10:a1:df:dd:df:78:26:67:6a:12:79:76:f0:d2:7d:81:a5:
         56:38:ea:c0:70:f1:5c:fd:8f:7d:89:fe:df:6d:fd:e6:02:49:
         23:b5:15:64:7b:47:2e:94:ed:ee:7d:33:5c:3b:56:ad:e1:07:
         71:e9:29:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:51:46 2025 by rpki-client