Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DfgfFQPFhdM4pAD5w3fPbYYp6CMfXy7sJ8GevM9ggfLw/1/323830343a353139383a3a2f33322d313238203d3e20323638343634.roa
File:                     323830343a353139383a3a2f33322d313238203d3e20323638343634.roa (raw, json)
Hash identifier:          FwEHv563rBmJRql+sOE+tVHrOv1W1+kzQxG6Z1REygI=
Subject key identifier:   20:5B:24:29:03:DA:8B:B2:4C:FB:C9:B2:D0:B9:41:8D:87:D0:FB:D2
Certificate issuer:       /CN=05D1E73FF1B023D43F8C09ED71815BC2F6620D99
Certificate serial:       2E87378302BB9BCF160CC7446FE0E3854CEAA3CA
Authority key identifier: 05:D1:E7:3F:F1:B0:23:D4:3F:8C:09:ED:71:81:5B:C2:F6:62:0D:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05D1E73FF1B023D43F8C09ED71815BC2F6620D99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DfgfFQPFhdM4pAD5w3fPbYYp6CMfXy7sJ8GevM9ggfLw/1/323830343a353139383a3a2f33322d313238203d3e20323638343634.roa
Signing time:             Thu 06 Mar 2025 18:22:12 +0000
ROA not before:           Thu 06 Mar 2025 18:17:12 +0000
ROA not after:            Thu 05 Mar 2026 18:22:12 +0000
asID:                     268464
IP address blocks:        2804:5198::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:87:37:83:02:bb:9b:cf:16:0c:c7:44:6f:e0:e3:85:4c:ea:a3:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05D1E73FF1B023D43F8C09ED71815BC2F6620D99
        Validity
            Not Before: Mar  6 18:17:12 2025 GMT
            Not After : Mar  5 18:22:12 2026 GMT
        Subject: CN=205B242903DA8BB24CFBC9B2D0B9418D87D0FBD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2b:94:68:01:ff:a4:8d:0b:0e:98:20:e3:0c:
                    4d:a2:c5:7e:14:ae:50:51:dd:f7:ad:5a:65:49:72:
                    a9:cd:12:71:e2:5b:f0:78:39:6b:04:68:81:a3:05:
                    0a:db:13:37:69:17:39:77:59:63:35:e4:d9:18:bc:
                    d5:e4:47:05:0f:2a:e1:3e:10:c4:1a:b3:60:7e:44:
                    f1:d4:3e:eb:de:ee:44:a9:07:4e:cf:16:4d:ba:13:
                    0d:96:33:8a:8a:14:74:50:40:22:af:4f:52:3d:14:
                    6c:25:26:8f:86:b3:8c:22:1a:03:b2:3a:31:69:73:
                    6b:eb:31:ec:f0:3f:05:4f:a1:70:6d:71:17:e8:dd:
                    bc:c1:04:8d:9c:ad:d5:5d:ed:32:92:a5:f5:a3:61:
                    18:97:01:aa:b4:f4:6f:ca:38:ff:3d:53:c9:b4:a5:
                    33:fe:71:5f:bf:4f:6b:e8:c0:09:b1:e5:bc:fe:51:
                    6e:2e:75:36:6c:64:00:59:f5:8d:2f:f1:92:22:cc:
                    70:11:2c:75:15:08:be:f6:2e:16:df:95:00:72:12:
                    aa:bf:c1:39:cd:ce:a7:9d:85:8f:41:51:ab:b1:15:
                    d4:a5:80:e8:f8:ab:0f:12:05:35:6e:70:cc:49:f3:
                    f1:98:57:b1:ea:4b:2d:4e:80:8c:bd:71:7e:a0:2d:
                    6e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:5B:24:29:03:DA:8B:B2:4C:FB:C9:B2:D0:B9:41:8D:87:D0:FB:D2
            X509v3 Authority Key Identifier:
                keyid:05:D1:E7:3F:F1:B0:23:D4:3F:8C:09:ED:71:81:5B:C2:F6:62:0D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DfgfFQPFhdM4pAD5w3fPbYYp6CMfXy7sJ8GevM9ggfLw/1/05D1E73FF1B023D43F8C09ED71815BC2F6620D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05D1E73FF1B023D43F8C09ED71815BC2F6620D99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DfgfFQPFhdM4pAD5w3fPbYYp6CMfXy7sJ8GevM9ggfLw/1/323830343a353139383a3a2f33322d313238203d3e20323638343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5198::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:7f:7b:87:58:35:46:ca:5e:7d:0e:20:93:ca:24:8a:8a:fc:
         b5:2d:9c:b5:a5:31:0a:d1:dd:0d:09:04:95:11:25:c2:79:07:
         af:26:7b:83:09:22:7d:d7:60:3d:b3:f9:ae:77:d2:5e:2c:67:
         4d:51:45:cb:bb:ad:a9:50:e7:0f:02:54:7d:77:38:17:6b:f1:
         2c:f4:a0:de:5e:ab:4b:f4:9e:d7:cb:3e:cb:17:a6:66:e5:1f:
         22:85:f7:4a:14:aa:74:9c:9b:14:79:f1:07:16:63:4d:ab:f1:
         e8:f6:0b:b0:ed:5d:5a:9c:e5:1d:0c:15:4a:b7:c2:92:51:e4:
         9f:2b:65:71:4a:ef:b3:ea:b2:40:e6:2a:c7:3d:2b:44:9b:ed:
         a2:e2:25:99:fa:85:42:c4:dc:4c:6d:99:ad:69:da:1a:c6:9e:
         ff:02:4e:87:54:1c:6e:a4:9e:7f:fd:8a:b6:76:56:95:9e:5b:
         f6:56:58:4d:e8:a7:b1:a2:c2:43:a3:33:f6:32:bc:56:1f:1b:
         cb:3b:df:dd:fc:d1:91:da:f1:95:02:4f:e1:3f:79:42:4e:20:
         bc:b2:b4:a7:22:f4:c7:95:54:7c:bc:bb:d3:7f:fa:0a:bd:0e:
         f8:e7:89:44:3b:2f:32:83:2f:d5:3d:3f:40:fd:2d:10:cb:14:
         25:09:02:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 06:15:09 2025 by rpki-client