Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a343030303a3a2f33362d3336203d3e20323734373236.roa
File:                     323830343a393261383a343030303a3a2f33362d3336203d3e20323734373236.roa (raw, json)
Hash identifier:          UB+MmGysDOb0vHgA+nLvLs/HiZE02Dt2TlF1GzSSaoU=
Subject key identifier:   09:FB:B9:3B:FC:59:A2:F8:CE:C8:25:3A:92:2B:5B:69:5A:C7:09:9C
Certificate issuer:       /CN=E235D9D1060516D958BB28952BAAC2B76E4FFCB1
Certificate serial:       7C84A6F74D7EDCC701F5D2634B04AE8A4D62F892
Authority key identifier: E2:35:D9:D1:06:05:16:D9:58:BB:28:95:2B:AA:C2:B7:6E:4F:FC:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E235D9D1060516D958BB28952BAAC2B76E4FFCB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a343030303a3a2f33362d3336203d3e20323734373236.roa
Signing time:             Fri 14 Mar 2025 17:24:22 +0000
ROA not before:           Fri 14 Mar 2025 17:19:22 +0000
ROA not after:            Fri 13 Mar 2026 17:24:22 +0000
asID:                     274726
IP address blocks:        2804:92a8:4000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:84:a6:f7:4d:7e:dc:c7:01:f5:d2:63:4b:04:ae:8a:4d:62:f8:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E235D9D1060516D958BB28952BAAC2B76E4FFCB1
        Validity
            Not Before: Mar 14 17:19:22 2025 GMT
            Not After : Mar 13 17:24:22 2026 GMT
        Subject: CN=09FBB93BFC59A2F8CEC8253A922B5B695AC7099C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:50:65:12:15:ed:1a:21:49:ff:c2:8e:45:fd:
                    d9:bc:48:fe:55:47:89:93:67:bc:7f:b2:4c:9e:fe:
                    7c:ed:67:02:74:2d:83:9a:00:92:dd:b6:83:75:3e:
                    9a:e0:24:1e:09:f6:05:4a:22:14:25:db:a7:44:66:
                    ea:00:1b:86:8f:0b:2a:8d:51:e0:7d:a5:b0:5c:8c:
                    fd:e8:f3:0c:c9:49:88:39:c3:e1:1b:e5:39:71:15:
                    32:27:28:7a:77:a0:9e:0b:e0:87:b7:f5:0e:7e:b9:
                    84:ed:22:08:39:34:00:04:91:51:31:ac:f6:09:df:
                    41:b2:b9:72:6b:bc:09:8e:15:1a:aa:63:02:aa:1c:
                    2e:66:79:8e:aa:d8:ce:4b:74:b3:8d:52:e6:1e:52:
                    d9:7d:68:24:aa:a5:f0:ae:1b:a4:75:37:68:4b:1b:
                    72:9f:d3:22:8d:3a:48:b0:d9:36:d6:38:8c:fc:57:
                    76:84:63:c2:06:d3:7b:8a:96:f6:a8:75:cc:65:f7:
                    26:98:f7:ae:b2:00:86:e6:7c:a4:94:d9:8b:f9:2d:
                    41:71:46:c4:33:c9:b8:38:9a:b4:05:fc:cd:fd:a6:
                    7a:1c:7a:51:84:06:f7:f9:9b:59:62:b9:40:d9:91:
                    7b:9f:1e:fc:95:32:b0:9e:a9:f1:c8:7e:92:fc:b1:
                    ea:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:FB:B9:3B:FC:59:A2:F8:CE:C8:25:3A:92:2B:5B:69:5A:C7:09:9C
            X509v3 Authority Key Identifier:
                keyid:E2:35:D9:D1:06:05:16:D9:58:BB:28:95:2B:AA:C2:B7:6E:4F:FC:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/E235D9D1060516D958BB28952BAAC2B76E4FFCB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E235D9D1060516D958BB28952BAAC2B76E4FFCB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a343030303a3a2f33362d3336203d3e20323734373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:92a8:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         c2:e5:26:e8:04:66:6c:ba:fc:16:a3:96:7f:e0:70:71:8c:9a:
         8c:86:53:be:1a:93:1f:6b:57:51:06:d6:de:53:eb:04:d8:b3:
         1c:41:1a:e2:77:ce:b0:77:0a:dd:e5:84:96:ec:a3:a9:b9:c6:
         97:76:d4:86:88:5b:24:af:04:ab:cd:e3:3e:ba:29:86:e7:40:
         b9:fc:2b:40:31:0a:d3:05:9e:81:ed:d6:ff:3a:1b:3f:f0:23:
         2d:1e:a4:be:1a:74:e0:6e:35:41:d0:61:36:f5:fe:9f:e9:4b:
         ac:0d:51:df:49:8c:df:f4:60:93:f4:a6:b7:35:6a:5a:a1:0c:
         7f:26:6c:74:1c:76:99:c4:d0:d6:79:16:57:d4:ef:8b:bc:42:
         1d:96:31:cb:92:e2:35:27:32:10:60:4a:95:01:b4:03:66:8f:
         c2:3b:12:88:a4:f5:51:74:d4:4a:7a:15:18:57:75:9b:7b:13:
         42:c1:5a:2c:06:7b:c1:50:d5:f5:cd:fd:c2:69:a8:84:ce:a0:
         e1:c5:0e:40:4f:e3:84:c1:22:f8:cb:20:ee:ea:34:1b:aa:b3:
         d4:02:35:29:bf:27:d0:43:17:2f:ea:48:21:27:c0:5f:17:80:
         5a:50:65:b6:80:58:8b:47:c7:fd:31:11:70:7b:88:19:45:18:
         c8:0a:ab:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:40:15 2025 by rpki-client