Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/323830343a376332343a3a2f33342d3334203d3e20323731343738.roa
File:                     323830343a376332343a3a2f33342d3334203d3e20323731343738.roa (raw, json)
Hash identifier:          Ou9ou3F2N0dyM29n7iIj+vc87gMtZMHtS4BmEnXZSIo=
Subject key identifier:   50:FB:CD:11:A3:50:2C:F5:02:48:E0:B1:E9:7E:65:09:1E:07:E4:2E
Certificate issuer:       /CN=E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400
Certificate serial:       56273029F8A75DAF51034CDAF450907DD8EF280B
Authority key identifier: E4:C2:C6:B3:DC:8A:DA:E1:96:FF:70:A0:C7:73:99:00:1F:5A:74:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/323830343a376332343a3a2f33342d3334203d3e20323731343738.roa
Signing time:             Fri 13 Dec 2024 15:43:17 +0000
ROA not before:           Fri 13 Dec 2024 15:38:17 +0000
ROA not after:            Fri 12 Dec 2025 15:43:17 +0000
asID:                     271478
IP address blocks:        2804:7c24::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:27:30:29:f8:a7:5d:af:51:03:4c:da:f4:50:90:7d:d8:ef:28:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400
        Validity
            Not Before: Dec 13 15:38:17 2024 GMT
            Not After : Dec 12 15:43:17 2025 GMT
        Subject: CN=50FBCD11A3502CF50248E0B1E97E65091E07E42E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a0:2a:9f:e0:5c:30:e8:7b:aa:9c:08:09:d7:
                    91:27:c1:82:f0:85:60:e9:a4:dc:ab:ad:7d:fe:5a:
                    60:c7:40:e3:18:34:90:75:53:fe:c3:85:8f:8a:b5:
                    fb:d5:07:af:cb:b9:be:21:d4:5e:4d:58:05:ce:38:
                    19:9f:1f:29:50:c0:6a:8a:36:59:ad:f8:e3:0f:04:
                    c0:22:24:2a:87:0c:f9:e2:a6:e2:76:9b:e1:77:1a:
                    6c:48:b4:43:49:8a:c5:4e:b4:6f:a7:bf:3a:93:aa:
                    7f:e9:9d:dc:81:17:47:20:fa:3b:de:5a:40:a9:bc:
                    c7:01:61:e2:72:2a:a1:ae:11:47:fb:32:df:26:88:
                    11:25:f1:f4:a8:b8:b3:73:4b:5f:ab:7e:7e:7c:f8:
                    b8:48:4b:62:d5:72:c7:4c:57:59:92:53:a0:0a:87:
                    16:a1:ee:21:8d:5b:ec:d1:2c:96:47:72:51:70:39:
                    4b:5f:08:c0:7e:4d:c7:b7:4b:b2:d1:21:02:38:64:
                    dc:26:0e:a9:57:b9:d6:bd:35:ca:52:ec:fe:ff:28:
                    32:78:85:92:e2:8f:2b:6a:a2:56:e2:6e:25:23:82:
                    93:44:51:04:da:84:43:2b:f7:f1:36:2b:b9:46:c7:
                    c1:6e:dc:f8:d7:5d:32:67:b1:b6:f0:55:01:c7:a0:
                    f7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:FB:CD:11:A3:50:2C:F5:02:48:E0:B1:E9:7E:65:09:1E:07:E4:2E
            X509v3 Authority Key Identifier:
                keyid:E4:C2:C6:B3:DC:8A:DA:E1:96:FF:70:A0:C7:73:99:00:1F:5A:74:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/323830343a376332343a3a2f33342d3334203d3e20323731343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c24::/34

    Signature Algorithm: sha256WithRSAEncryption
         04:0c:34:d4:70:13:7d:36:c7:50:ea:82:b7:b9:3e:6a:c6:10:
         2e:03:19:aa:64:18:4a:d9:d3:04:01:31:9a:56:ec:18:2c:04:
         ea:06:c1:42:29:3c:f0:c3:10:d2:c8:8c:c9:97:27:71:1a:28:
         1d:44:db:20:6c:18:0d:5b:97:c1:4b:8a:f9:25:c8:18:3b:a1:
         e9:42:7d:61:02:b1:4c:e4:50:76:49:0d:72:a7:93:59:4f:59:
         7a:a4:d3:65:fc:6d:36:67:49:d4:08:b2:4d:01:ff:22:c9:a7:
         59:36:b0:7b:29:28:b8:cc:17:65:5a:06:9a:a7:31:b0:4e:41:
         99:67:ff:53:4f:24:eb:65:c0:93:19:3d:09:65:7a:fd:4b:95:
         d4:62:08:08:17:f1:a1:9c:43:01:65:f8:0f:66:1d:f3:31:ca:
         a5:82:6e:da:ae:2a:64:6a:eb:8e:0b:de:15:f9:1a:18:e5:2d:
         98:83:fe:20:e4:c7:dd:3e:b0:ec:0c:1e:d3:ec:d1:79:c5:66:
         4f:49:48:8b:9c:5a:3e:0d:13:91:90:fc:b1:15:90:90:04:d9:
         5c:94:f0:00:26:9e:ad:33:07:63:c3:5a:9a:e7:26:93:36:4f:
         4e:d4:42:bd:1f:88:4f:6a:2a:92:17:31:19:91:0b:2d:d3:cd:
         14:38:e3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:58:18 2025 by rpki-client