Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DUTzmmBReebcYtGN3JfsRzKzvZ2mkeeEbk1DuGsPor56/0/323830343a383663383a3a2f33322d3335203d3e20323732363636.roa
File:                     323830343a383663383a3a2f33322d3335203d3e20323732363636.roa (raw, json)
Hash identifier:          6dos8iDTXeKO2pcVF3HronraEEl27ss3UlSLBZbuynY=
Subject key identifier:   78:C8:73:B9:55:57:BF:DA:6C:83:B0:2C:77:45:6C:68:D6:43:A3:B8
Certificate issuer:       /CN=6415817E779BB65D15ABFE0332192044330D88A4
Certificate serial:       44FDB879F4DFBC1ED8F45D0E414851898155494E
Authority key identifier: 64:15:81:7E:77:9B:B6:5D:15:AB:FE:03:32:19:20:44:33:0D:88:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6415817E779BB65D15ABFE0332192044330D88A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DUTzmmBReebcYtGN3JfsRzKzvZ2mkeeEbk1DuGsPor56/0/323830343a383663383a3a2f33322d3335203d3e20323732363636.roa
Signing time:             Wed 12 Feb 2025 18:43:21 +0000
ROA not before:           Wed 12 Feb 2025 18:38:21 +0000
ROA not after:            Wed 11 Feb 2026 18:43:21 +0000
asID:                     272666
IP address blocks:        2804:86c8::/32 maxlen: 35
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:fd:b8:79:f4:df:bc:1e:d8:f4:5d:0e:41:48:51:89:81:55:49:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6415817E779BB65D15ABFE0332192044330D88A4
        Validity
            Not Before: Feb 12 18:38:21 2025 GMT
            Not After : Feb 11 18:43:21 2026 GMT
        Subject: CN=78C873B95557BFDA6C83B02C77456C68D643A3B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:09:3a:e7:e6:1d:fd:59:24:4c:0d:c5:3f:fc:
                    fd:f2:25:55:5d:44:3d:a6:6d:12:80:06:b2:a8:63:
                    6a:4c:b6:10:45:ec:84:4a:dd:9e:3b:94:2e:38:86:
                    17:72:1c:bf:59:45:ac:4d:68:26:cd:4c:74:0b:5f:
                    38:d1:26:05:88:66:73:ea:27:9c:58:d0:0b:06:ca:
                    2b:90:e2:f5:44:98:97:fc:00:fd:2e:5f:4d:d0:9f:
                    4a:85:2c:3f:a9:f0:0b:53:ec:77:d5:51:6a:2e:fd:
                    50:4f:3f:16:46:02:a6:7f:05:de:74:3e:51:42:74:
                    2e:75:0b:6c:b6:f3:e9:ee:24:52:ab:a4:12:d3:37:
                    1b:1f:56:a3:84:e1:0e:5d:b6:cd:70:48:67:12:1c:
                    e6:22:09:61:d2:f9:6c:75:9b:29:2c:04:f1:17:1c:
                    44:01:a2:75:2e:66:38:99:0c:87:26:cc:f0:09:5c:
                    e9:6c:98:bb:7b:f8:8f:91:b0:89:a7:db:f6:60:ee:
                    e2:78:93:be:e5:c2:5e:25:c4:a9:e6:00:c9:a0:e2:
                    49:ae:ef:d8:bc:93:db:b4:c4:e1:7a:e7:d3:66:e1:
                    60:36:b5:0a:1e:6a:cf:13:e6:86:c4:64:9c:c0:ea:
                    c2:05:65:e3:e7:16:52:c7:1a:ea:bf:b3:60:4c:71:
                    27:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:C8:73:B9:55:57:BF:DA:6C:83:B0:2C:77:45:6C:68:D6:43:A3:B8
            X509v3 Authority Key Identifier:
                keyid:64:15:81:7E:77:9B:B6:5D:15:AB:FE:03:32:19:20:44:33:0D:88:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DUTzmmBReebcYtGN3JfsRzKzvZ2mkeeEbk1DuGsPor56/0/6415817E779BB65D15ABFE0332192044330D88A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6415817E779BB65D15ABFE0332192044330D88A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DUTzmmBReebcYtGN3JfsRzKzvZ2mkeeEbk1DuGsPor56/0/323830343a383663383a3a2f33322d3335203d3e20323732363636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:86c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:b5:e8:b7:bc:55:ad:f5:41:07:cc:78:46:e7:4f:b2:f3:61:
         91:41:99:42:d0:0f:8c:ba:42:c2:8e:5d:f1:e7:1d:a4:6f:47:
         47:c5:a2:f8:a6:e2:37:ef:c3:86:4c:b5:41:98:63:b8:45:a9:
         7f:79:68:09:69:86:17:a8:d0:55:85:3a:51:50:80:c9:02:c1:
         06:ac:a5:95:88:5d:1e:71:cd:64:db:66:d7:40:7e:cd:9f:9d:
         94:5e:28:de:ce:14:e0:43:e2:71:8e:c5:95:1d:e5:66:48:74:
         7a:be:70:0a:8f:06:2d:a6:47:d9:58:b0:32:92:78:de:12:63:
         05:e6:44:e7:bb:37:23:73:e6:6d:cf:36:f6:5c:ad:4b:f4:d3:
         fe:b2:0d:80:34:6a:9e:93:df:1d:61:60:5e:39:f9:85:9c:83:
         ea:cd:79:b8:8a:27:6b:00:4b:e6:4b:e7:a6:45:2f:2f:c6:d8:
         00:fa:d7:ac:fe:fe:ce:4e:96:e0:b9:2c:c5:20:7a:d3:ac:14:
         5d:03:1c:65:08:98:f8:d6:94:a8:70:a4:2e:82:90:43:b3:e6:
         b7:9e:da:63:6a:c9:0e:2c:8d:de:d4:72:e3:69:0a:a7:58:d4:
         64:1f:72:5b:bc:1a:8a:a2:1d:96:77:34:68:ef:ab:ea:3a:a7:
         24:84:d1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 20:51:13 2025 by rpki-client