Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/323830343a3930633a373a3a2f34382d3438203d3e20323632363137.roa
File:                     323830343a3930633a373a3a2f34382d3438203d3e20323632363137.roa (raw, json)
Hash identifier:          63EQQdXQ1Ey5n/lgEmzRfOsMFbHoX15AOMIcdZJJayM=
Subject key identifier:   89:2F:8D:7D:FE:1F:D6:1D:9B:B0:5B:53:57:99:DF:F9:11:2A:1E:9D
Certificate issuer:       /CN=00078D2B578982663EFE91FC4B5397C48403E2E4
Certificate serial:       363217305891558E8A04D4DBF3D29E2E1224EEEA
Authority key identifier: 00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/323830343a3930633a373a3a2f34382d3438203d3e20323632363137.roa
Signing time:             Wed 05 Mar 2025 20:35:55 +0000
ROA not before:           Wed 05 Mar 2025 20:30:55 +0000
ROA not after:            Wed 04 Mar 2026 20:35:55 +0000
asID:                     262617
IP address blocks:        2804:90c:7::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:32:17:30:58:91:55:8e:8a:04:d4:db:f3:d2:9e:2e:12:24:ee:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00078D2B578982663EFE91FC4B5397C48403E2E4
        Validity
            Not Before: Mar  5 20:30:55 2025 GMT
            Not After : Mar  4 20:35:55 2026 GMT
        Subject: CN=892F8D7DFE1FD61D9BB05B535799DFF9112A1E9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ae:11:d1:af:92:5c:d9:21:42:7e:38:ff:75:
                    f9:1b:7b:8c:d7:9d:3d:a4:54:7b:b5:9f:24:b4:a3:
                    bd:b1:c3:fd:f9:52:43:ab:d7:dc:61:c4:fc:5c:ac:
                    d1:42:11:b7:e9:ff:db:31:e4:71:03:8f:c6:19:8e:
                    74:1e:83:9d:63:d8:71:b1:30:fe:43:00:1e:fa:bb:
                    c3:2d:24:05:14:ef:84:b3:f1:13:25:a7:b3:ff:57:
                    f1:06:a2:67:e7:f0:f6:8f:ac:ba:c9:6f:b3:0b:de:
                    42:bc:f7:02:1b:1c:49:58:d2:db:22:63:89:cd:37:
                    67:e3:6a:e1:d5:ff:8f:44:91:73:ff:33:e8:97:42:
                    3f:e6:86:0c:b1:26:ff:58:69:9b:78:27:4d:4a:21:
                    ca:3b:a9:e8:c5:f8:0f:c0:bf:60:db:61:e6:1d:be:
                    f0:dd:af:72:2f:1a:6d:83:4e:84:f1:9d:d8:2f:7f:
                    2f:41:c6:10:57:10:c6:86:70:e8:b3:b3:31:42:0c:
                    48:82:b1:3a:56:db:8c:f0:96:38:ff:9d:8e:22:81:
                    e2:ad:b5:45:1f:b9:21:c7:01:fb:8c:3d:ae:97:45:
                    c7:d4:dc:95:c6:25:47:69:41:0f:6d:a9:27:33:41:
                    83:70:82:f7:be:b5:26:b1:12:c0:1e:af:9a:2f:b0:
                    5a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:2F:8D:7D:FE:1F:D6:1D:9B:B0:5B:53:57:99:DF:F9:11:2A:1E:9D
            X509v3 Authority Key Identifier:
                keyid:00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/323830343a3930633a373a3a2f34382d3438203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:90c:7::/48

    Signature Algorithm: sha256WithRSAEncryption
         36:26:fb:e5:aa:7e:fd:b1:ba:1c:69:30:84:67:d6:bc:82:59:
         00:a5:11:d1:2d:21:5b:2c:17:3f:e2:c6:09:9a:b6:ae:67:2c:
         c5:16:d1:a0:4f:29:58:74:71:5c:d3:3f:53:50:27:4d:1e:b1:
         8f:16:a5:36:35:ba:a1:36:13:fe:5f:b0:b0:66:a0:12:22:62:
         7b:c5:93:14:28:93:54:6a:4a:e5:1f:cf:2b:b5:a7:c9:7f:2b:
         9d:e2:1b:25:4e:64:eb:9a:fa:ff:a5:57:65:88:70:43:03:98:
         71:8f:dc:0c:ae:c2:b7:41:31:2f:68:75:6f:bb:c5:83:4f:15:
         e6:9a:3b:36:02:d1:5e:1f:49:34:f6:e6:5c:ee:5e:91:99:e1:
         45:d3:8f:7f:8c:c0:33:7a:73:2d:30:d4:eb:34:bc:cc:83:07:
         cb:24:6f:9c:cd:d6:e9:b0:d1:55:29:fe:60:93:78:76:cf:61:
         25:99:34:7e:62:95:13:fc:57:e3:55:47:08:d4:14:d3:25:06:
         46:99:69:1e:31:20:18:96:ed:f2:15:92:e1:c9:6f:c3:8a:5f:
         d3:54:ad:15:93:4c:b2:a6:4c:39:e6:48:a5:0f:c6:ae:35:af:
         10:d7:8c:0e:45:2c:98:46:53:12:a7:55:8a:aa:dd:b3:53:c4:
         ac:0a:b2:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:17:02 2025 by rpki-client