Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/1/323030313a313261343a666666663a3a2f34382d3438203d3e203430333536.roa
File:                     323030313a313261343a666666663a3a2f34382d3438203d3e203430333536.roa (raw, json)
Hash identifier:          9/YOcZEBC791JT7+hlb2tQHen4Pgko7PETy+9QrH8Qg=
Subject key identifier:   AE:3B:AB:21:97:3D:6E:0B:E7:32:29:07:B0:1C:41:E2:37:29:EA:A7
Certificate issuer:       /CN=C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9
Certificate serial:       233AB163E5A71FEF68531577B981E570E9F8C2AC
Authority key identifier: C9:C8:FE:4C:4B:95:AA:80:D3:B7:3D:CD:13:6D:A1:E1:B8:36:56:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/1/323030313a313261343a666666663a3a2f34382d3438203d3e203430333536.roa
Signing time:             Thu 06 Mar 2025 18:40:26 +0000
ROA not before:           Thu 06 Mar 2025 18:35:26 +0000
ROA not after:            Thu 05 Mar 2026 18:40:26 +0000
asID:                     40356
IP address blocks:        2001:12a4:ffff::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:3a:b1:63:e5:a7:1f:ef:68:53:15:77:b9:81:e5:70:e9:f8:c2:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9
        Validity
            Not Before: Mar  6 18:35:26 2025 GMT
            Not After : Mar  5 18:40:26 2026 GMT
        Subject: CN=AE3BAB21973D6E0BE7322907B01C41E23729EAA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d5:f9:bd:bd:3a:a9:0d:83:70:f0:e3:f3:d0:
                    c5:b8:6b:5b:4c:14:6d:d0:ec:3d:1f:b0:2f:fe:82:
                    86:3c:5c:8f:48:90:30:38:59:68:df:25:39:78:6f:
                    d4:10:e8:78:bf:bf:44:33:06:62:86:bd:12:50:7c:
                    e1:b6:0d:0e:89:f0:26:8f:c0:2a:d2:f5:9c:7e:f6:
                    4b:fa:4e:08:e9:f7:09:e1:0b:a1:c0:a1:6e:a7:ca:
                    24:e5:91:77:8e:f2:1d:8a:21:22:b4:4b:42:58:44:
                    17:f4:79:d5:dd:0b:22:56:95:e9:c5:ba:5d:3f:06:
                    68:c4:1f:9b:56:c0:84:5c:6a:9c:8c:27:78:fc:bf:
                    3c:be:ea:05:63:ab:08:e7:9c:f6:ad:c0:f1:18:12:
                    0f:e8:c9:a9:aa:69:40:fb:29:8a:0e:d9:a3:38:c5:
                    cb:9f:e1:f6:d0:ad:83:87:0d:3e:12:08:fe:e4:7e:
                    09:ce:03:eb:c1:2c:0a:bc:ee:cd:98:fd:3e:f6:02:
                    e5:d1:95:09:1c:97:52:ff:4c:93:f3:54:46:cb:16:
                    04:23:58:92:42:9a:07:98:7d:af:84:3c:22:90:df:
                    f5:37:c4:cf:88:51:2a:74:46:22:07:f5:cc:1a:a4:
                    97:b6:aa:66:ea:5a:91:87:e3:b3:26:e2:40:2f:bb:
                    c1:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:3B:AB:21:97:3D:6E:0B:E7:32:29:07:B0:1C:41:E2:37:29:EA:A7
            X509v3 Authority Key Identifier:
                keyid:C9:C8:FE:4C:4B:95:AA:80:D3:B7:3D:CD:13:6D:A1:E1:B8:36:56:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/1/C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/1/323030313a313261343a666666663a3a2f34382d3438203d3e203430333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:12a4:ffff::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:98:bb:b7:2d:e1:ad:9a:13:cb:ca:34:e8:69:d6:a8:c1:cc:
         06:3f:f0:75:38:37:70:bd:f7:c6:02:2c:32:cb:99:7a:2f:39:
         da:f9:e0:46:e3:eb:b2:dc:67:fc:dc:72:e9:c9:2a:5d:01:c4:
         4c:76:dc:d7:44:c2:0e:ed:16:6f:63:29:40:45:06:bb:3a:25:
         b5:04:4a:dc:b0:e6:d5:cb:f8:72:e9:87:2d:d7:bf:dd:98:b7:
         15:31:1d:5b:e4:30:bf:b3:ad:e0:5b:90:4e:76:00:93:d0:2d:
         27:f7:d5:d2:91:d3:a5:60:7e:cf:b3:30:2e:1c:3b:f8:f2:27:
         bd:11:7a:56:35:4a:60:2a:00:9e:ee:e6:65:70:2e:66:2a:86:
         ae:54:f0:f6:84:5a:70:1c:55:75:07:c4:70:89:c0:bd:a5:d1:
         57:88:0d:72:98:46:9a:79:f7:c9:cc:c1:57:49:5b:1c:4e:ae:
         aa:8e:e0:9d:85:59:7c:1d:27:1e:82:de:72:21:dd:19:ce:4e:
         e9:93:08:62:b6:f8:c0:91:0b:9d:fd:ef:a1:a9:4b:ae:8d:3a:
         2a:28:dd:05:55:05:17:4e:2c:6c:f5:7d:7e:ec:b3:9d:1a:0b:
         1a:79:27:72:62:92:c6:8d:b6:d6:7d:c5:4d:9d:fc:da:88:69:
         15:92:24:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:28:20 2025 by rpki-client