Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a393030303a3a2f33362d3336203d3e20323734373236.roa
File:                     323830343a393261383a393030303a3a2f33362d3336203d3e20323734373236.roa (raw, json)
Hash identifier:          Tn76moq/ILpLt70KzoSxyS4rkQLqy31Mp7hc0VQVQHo=
Subject key identifier:   86:BB:AD:C5:50:B2:86:3B:A6:A1:A1:63:AA:E5:13:DC:9F:60:7B:30
Certificate issuer:       /CN=E235D9D1060516D958BB28952BAAC2B76E4FFCB1
Certificate serial:       165DE5BB24CDE651FD2533E0FC3E89D7D25E962E
Authority key identifier: E2:35:D9:D1:06:05:16:D9:58:BB:28:95:2B:AA:C2:B7:6E:4F:FC:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E235D9D1060516D958BB28952BAAC2B76E4FFCB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a393030303a3a2f33362d3336203d3e20323734373236.roa
Signing time:             Fri 14 Mar 2025 17:24:20 +0000
ROA not before:           Fri 14 Mar 2025 17:19:20 +0000
ROA not after:            Fri 13 Mar 2026 17:24:20 +0000
asID:                     274726
IP address blocks:        2804:92a8:9000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:5d:e5:bb:24:cd:e6:51:fd:25:33:e0:fc:3e:89:d7:d2:5e:96:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E235D9D1060516D958BB28952BAAC2B76E4FFCB1
        Validity
            Not Before: Mar 14 17:19:20 2025 GMT
            Not After : Mar 13 17:24:20 2026 GMT
        Subject: CN=86BBADC550B2863BA6A1A163AAE513DC9F607B30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:87:ad:87:ad:88:14:52:63:57:d7:91:2c:36:
                    61:be:5f:0c:ca:55:78:fa:be:42:2e:00:ab:c3:90:
                    a1:21:05:41:e4:57:87:b2:15:1d:85:9b:d8:84:0e:
                    16:9d:a6:96:f4:5e:6c:cf:a9:01:e0:78:a1:7f:ba:
                    aa:b5:ad:18:d5:76:a4:2d:39:8c:53:65:97:30:b4:
                    6e:a3:bc:b0:72:bf:ae:eb:18:ca:aa:17:f3:dc:f9:
                    33:73:8f:1d:32:bc:3e:3b:04:b5:3c:96:d1:1f:58:
                    68:40:aa:8b:eb:5c:5e:5d:d4:10:95:b1:0e:27:d8:
                    42:dd:20:20:06:35:30:c0:9b:ea:94:9f:d5:73:bd:
                    48:e8:4d:5a:32:73:18:18:5f:97:76:99:30:9f:be:
                    6d:51:a7:8c:d9:15:33:4a:a3:6a:85:6e:78:da:af:
                    d9:3f:a1:e0:1f:f6:36:d1:01:10:7f:f1:41:61:f7:
                    11:a8:22:96:0e:14:9e:ce:a3:fb:d4:45:e9:57:6b:
                    73:1d:c2:b3:6d:74:11:30:ac:98:c1:b4:c9:3d:c6:
                    f3:3f:27:43:2f:13:3f:a8:8c:61:2a:88:28:38:48:
                    88:41:fb:75:6f:a8:f0:a3:c3:3e:1c:3d:ad:60:bd:
                    6a:f1:6c:b3:8d:e3:35:ba:da:ac:57:4a:2f:df:7c:
                    b7:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:BB:AD:C5:50:B2:86:3B:A6:A1:A1:63:AA:E5:13:DC:9F:60:7B:30
            X509v3 Authority Key Identifier:
                keyid:E2:35:D9:D1:06:05:16:D9:58:BB:28:95:2B:AA:C2:B7:6E:4F:FC:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/E235D9D1060516D958BB28952BAAC2B76E4FFCB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E235D9D1060516D958BB28952BAAC2B76E4FFCB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a393030303a3a2f33362d3336203d3e20323734373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:92a8:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         b9:f0:20:dd:49:23:79:43:22:82:4a:ba:36:23:5f:25:fd:ed:
         e6:f0:41:c1:16:9a:91:12:0e:03:10:3e:79:42:b2:7c:6f:71:
         8e:2a:63:48:6a:ac:60:b2:16:ed:90:56:fd:71:9e:c8:02:a1:
         7b:d1:3c:e8:b8:4a:21:24:fd:8d:1b:56:ee:64:f4:e7:cc:5e:
         22:22:62:30:5f:d9:05:a3:db:3c:10:ac:1e:1e:ac:d2:d5:82:
         f2:c6:38:4c:53:21:10:95:b0:6d:b5:88:82:f3:f5:0f:a8:2e:
         36:12:5d:a5:5f:ae:17:b9:7f:f8:14:13:09:c1:85:c5:2e:1f:
         f7:a4:e3:2c:1c:f5:28:4e:b6:1e:58:85:25:26:c4:33:cf:a9:
         82:52:c6:ae:a2:1f:bf:02:d8:81:64:0b:e6:84:cf:59:ab:10:
         5e:86:87:62:79:6f:32:ca:5a:1b:b0:6f:70:43:b8:ff:22:cd:
         01:5f:e6:8d:44:e8:16:dd:de:1d:e2:84:b0:ff:7e:40:f5:86:
         e4:6a:f8:75:f7:e5:e5:72:f3:a9:16:6c:39:ff:83:60:83:f0:
         49:8d:85:71:11:13:56:51:c5:06:08:0b:d7:89:88:34:29:be:
         d5:3b:13:80:45:f6:08:50:64:69:cd:7c:2a:c9:a5:fa:50:d0:
         f6:2a:61:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:40:39 2025 by rpki-client