Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DKaqfEUGfzBSU7bSCvtKnqQp4b5hQXxz16gHaHQpjLzb/0/323830343a346337633a3a2f33322d3438203d3e20323637333733.roa
File:                     323830343a346337633a3a2f33322d3438203d3e20323637333733.roa (raw, json)
Hash identifier:          1d0wVcIdVRGsBszAFdVrhl+Sfp4p0H7dadnu68dgfVk=
Subject key identifier:   3D:6C:41:97:5B:7F:D3:BE:F4:64:E6:93:AD:6D:57:94:B4:28:48:31
Certificate issuer:       /CN=56189290572F0ED1BF62ADE3F3EDC4D226765B85
Certificate serial:       0B3806E18ECC3A0EEAF598A7098415CBDB171CDB
Authority key identifier: 56:18:92:90:57:2F:0E:D1:BF:62:AD:E3:F3:ED:C4:D2:26:76:5B:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56189290572F0ED1BF62ADE3F3EDC4D226765B85.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DKaqfEUGfzBSU7bSCvtKnqQp4b5hQXxz16gHaHQpjLzb/0/323830343a346337633a3a2f33322d3438203d3e20323637333733.roa
Signing time:             Fri 31 Jan 2025 15:35:48 +0000
ROA not before:           Fri 31 Jan 2025 15:30:48 +0000
ROA not after:            Fri 30 Jan 2026 15:35:48 +0000
asID:                     267373
IP address blocks:        2804:4c7c::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:38:06:e1:8e:cc:3a:0e:ea:f5:98:a7:09:84:15:cb:db:17:1c:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56189290572F0ED1BF62ADE3F3EDC4D226765B85
        Validity
            Not Before: Jan 31 15:30:48 2025 GMT
            Not After : Jan 30 15:35:48 2026 GMT
        Subject: CN=3D6C41975B7FD3BEF464E693AD6D5794B4284831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:52:34:33:0c:d0:66:70:30:82:d8:2f:a1:c2:
                    22:c0:ac:61:b9:1a:bf:a2:e6:4d:1c:a2:41:7e:79:
                    65:88:79:b2:2e:6f:8b:3c:a7:f8:ea:8a:9c:00:d4:
                    a8:78:76:d1:16:1b:c8:ec:63:e0:26:24:5c:fc:8d:
                    c7:b5:33:de:30:55:82:76:67:5e:0b:4c:08:6b:f7:
                    fd:97:8c:f8:a9:cd:7e:a0:dd:ba:a3:2c:12:82:83:
                    fe:ca:02:fd:83:1f:60:c0:39:66:a7:93:64:1e:b3:
                    4b:14:ef:00:ff:61:e5:d4:54:33:af:1c:07:9f:15:
                    9f:61:49:d0:45:83:77:cd:c2:25:5d:18:20:31:29:
                    ef:f6:29:70:9e:a0:37:1c:f0:53:6a:dd:e6:56:60:
                    ab:76:69:a1:81:28:cf:37:11:4a:4d:4e:05:19:ac:
                    f2:fe:79:9c:b0:2d:83:63:18:57:9f:c9:80:b4:63:
                    3d:0b:a9:02:84:ab:d0:9f:95:53:41:e6:28:19:11:
                    db:ce:5b:ab:d9:8b:cc:ba:24:fc:f6:4e:2e:d9:67:
                    da:44:6e:1a:64:cc:20:b2:3d:d5:57:ef:f5:2e:55:
                    9e:48:7c:29:e4:b5:0c:2b:84:58:47:37:48:38:b8:
                    3e:b2:36:a6:3a:ba:4d:cf:1a:c2:67:60:d7:40:16:
                    f7:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:6C:41:97:5B:7F:D3:BE:F4:64:E6:93:AD:6D:57:94:B4:28:48:31
            X509v3 Authority Key Identifier:
                keyid:56:18:92:90:57:2F:0E:D1:BF:62:AD:E3:F3:ED:C4:D2:26:76:5B:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DKaqfEUGfzBSU7bSCvtKnqQp4b5hQXxz16gHaHQpjLzb/0/56189290572F0ED1BF62ADE3F3EDC4D226765B85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56189290572F0ED1BF62ADE3F3EDC4D226765B85.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKaqfEUGfzBSU7bSCvtKnqQp4b5hQXxz16gHaHQpjLzb/0/323830343a346337633a3a2f33322d3438203d3e20323637333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c7c::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:06:fb:ca:5a:4c:6f:d3:98:6a:de:bc:b9:1d:3e:81:31:78:
         56:47:8a:47:b8:a0:18:46:35:7e:de:d7:19:37:4d:ad:24:68:
         68:e3:60:06:30:60:5d:9b:40:d4:ba:46:90:46:7e:ed:82:24:
         60:15:6e:fa:fd:74:de:49:43:29:8a:2e:8b:4e:a0:a2:36:32:
         ce:db:7e:3b:6d:92:7d:56:89:64:2c:ba:f0:20:65:1e:20:af:
         7e:34:6e:1d:b6:3f:ac:d3:ae:91:4f:1d:62:ce:e4:a7:f5:7e:
         78:7e:02:b5:e0:2d:af:77:4c:e6:a6:03:96:dd:50:ce:3a:48:
         cd:b5:67:24:05:65:ac:ae:41:a0:43:e5:6f:87:56:83:8f:e4:
         e2:98:ed:03:8f:9d:0f:ae:f4:bb:de:55:1b:39:bc:91:0a:15:
         e3:5a:c5:4c:35:f4:22:f9:ad:09:9d:dd:b7:e0:67:b8:fe:39:
         09:90:1a:6f:04:2a:20:81:4d:6f:17:5e:74:56:50:9f:36:5a:
         4e:f7:65:e7:85:66:47:ce:da:b5:b2:b3:0e:18:c5:fb:78:e1:
         71:0f:01:32:41:a5:54:38:3a:f2:83:d2:76:11:f1:28:13:0e:
         98:5f:02:6b:21:53:fd:4f:50:40:4a:26:b4:48:c5:04:6b:cf:
         0d:fb:6d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 19:25:29 2025 by rpki-client