Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/1/323830343a313638383a383030303a3a2f33352d3335203d3e20323633323930.roa
File:                     323830343a313638383a383030303a3a2f33352d3335203d3e20323633323930.roa (raw, json)
Hash identifier:          gU5z869dL8/VG99LVeQyy20ZrgZCVal3t4P18obGJuw=
Subject key identifier:   22:20:ED:AC:81:59:92:73:33:7A:6F:10:56:1A:15:9C:C6:94:A6:28
Certificate issuer:       /CN=A27C713EEC3E4E5F319E67684ECFC96BEB54F973
Certificate serial:       33DF51EF03F5F9B6069D387458C3154EB4AEE6FB
Authority key identifier: A2:7C:71:3E:EC:3E:4E:5F:31:9E:67:68:4E:CF:C9:6B:EB:54:F9:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A27C713EEC3E4E5F319E67684ECFC96BEB54F973.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/1/323830343a313638383a383030303a3a2f33352d3335203d3e20323633323930.roa
Signing time:             Mon 02 Jun 2025 20:52:11 +0000
ROA not before:           Mon 02 Jun 2025 20:47:11 +0000
ROA not after:            Mon 01 Jun 2026 20:52:11 +0000
asID:                     263290
IP address blocks:        2804:1688:8000::/35 maxlen: 35
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:df:51:ef:03:f5:f9:b6:06:9d:38:74:58:c3:15:4e:b4:ae:e6:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A27C713EEC3E4E5F319E67684ECFC96BEB54F973
        Validity
            Not Before: Jun  2 20:47:11 2025 GMT
            Not After : Jun  1 20:52:11 2026 GMT
        Subject: CN=2220EDAC81599273337A6F10561A159CC694A628
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b3:18:1a:77:ee:ee:e7:cc:44:ca:50:a8:0c:
                    0b:85:08:2a:47:ee:4b:5b:74:31:e5:e9:ed:99:21:
                    ea:a0:15:25:2b:c8:a3:57:82:7b:50:30:1e:7b:41:
                    09:b2:98:f3:df:4b:4c:81:1d:02:83:a3:e7:e9:45:
                    fc:79:f1:c4:00:15:c9:35:21:14:c2:f5:53:66:b0:
                    a5:00:30:06:07:01:37:10:63:96:cd:6c:05:d8:09:
                    87:f9:d7:e9:aa:77:07:0a:d5:b6:4d:2a:86:ba:d5:
                    9a:fa:89:83:51:96:86:ab:df:1b:42:84:94:20:29:
                    7a:ab:be:76:fb:2b:a6:3a:50:a0:61:36:68:b8:de:
                    53:c5:98:3d:32:69:c7:73:11:03:f1:02:9b:7c:7a:
                    6d:86:01:fd:c0:7c:89:a1:df:dd:53:c5:a5:25:68:
                    5b:f8:67:3a:7c:2e:13:f5:8d:b5:d6:69:67:5a:b2:
                    de:7f:3b:62:e7:bc:7f:a8:7f:e0:b7:ce:28:04:b2:
                    47:95:a2:ca:e5:00:00:04:dc:28:18:ed:aa:55:96:
                    fd:39:2b:cf:9b:af:b5:09:c0:bb:c3:91:1e:2e:c8:
                    c4:7e:bf:40:c6:09:2b:2a:6d:09:6f:5d:13:58:f9:
                    a9:b6:e9:7e:72:cc:4e:58:ce:ee:47:5a:15:8d:b2:
                    0e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:20:ED:AC:81:59:92:73:33:7A:6F:10:56:1A:15:9C:C6:94:A6:28
            X509v3 Authority Key Identifier:
                keyid:A2:7C:71:3E:EC:3E:4E:5F:31:9E:67:68:4E:CF:C9:6B:EB:54:F9:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/1/A27C713EEC3E4E5F319E67684ECFC96BEB54F973.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A27C713EEC3E4E5F319E67684ECFC96BEB54F973.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/1/323830343a313638383a383030303a3a2f33352d3335203d3e20323633323930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1688:8000::/35

    Signature Algorithm: sha256WithRSAEncryption
         10:cc:13:84:a7:0f:b9:0d:cd:3a:76:76:a5:79:df:af:1a:4e:
         14:8a:1c:64:d3:cc:16:d7:ce:26:39:f6:a7:8e:22:68:ac:9c:
         71:8b:0b:e7:cf:ca:06:06:c5:94:96:28:9c:73:69:1e:46:80:
         fa:82:4f:78:2c:6e:1c:81:f0:84:1d:ee:01:bc:49:eb:7c:c2:
         8d:2f:2b:c4:76:bf:68:42:ac:59:7e:2d:b8:d6:69:e0:ef:a7:
         cd:99:81:b2:d5:01:d9:e8:30:70:b5:94:40:a1:d2:1d:fd:a4:
         d7:e1:2e:db:33:18:92:1e:8c:68:b1:96:37:ee:1d:dd:ed:dd:
         a4:b4:e8:fa:02:76:08:53:50:0d:94:cf:fe:19:68:2c:79:08:
         a1:f5:cc:bc:20:c6:8b:fb:c3:b3:65:b6:bb:57:b1:1e:70:c2:
         33:b2:d5:65:49:94:ac:8e:0e:61:d0:9c:89:f0:ae:3e:57:db:
         4a:1f:a7:03:4d:0e:80:81:1e:45:4c:35:63:a6:11:4b:57:4a:
         e7:27:7a:1c:2b:1a:3c:20:01:bc:d0:c1:ef:00:2e:e0:96:aa:
         80:a6:5c:20:90:12:e6:52:11:75:d1:67:04:7d:a7:63:88:0a:
         a6:0d:fa:d2:f9:d8:f8:d2:94:6d:11:25:99:63:15:f1:6c:e8:
         f6:5c:9d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:36:22 2025 by rpki-client