Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a613030303a3a2f33362d3336203d3e20323734373236.roa
File:                     323830343a393261383a613030303a3a2f33362d3336203d3e20323734373236.roa (raw, json)
Hash identifier:          bJnd41YGTlHUqIQedMsS+XaFwWyf+9q+KK1cEfoLPT4=
Subject key identifier:   77:D5:D8:A1:51:69:7F:45:E0:A3:B1:8A:AB:22:91:77:CE:78:35:2C
Certificate issuer:       /CN=E235D9D1060516D958BB28952BAAC2B76E4FFCB1
Certificate serial:       0DD696273F3851214E812F8C06116926EB00B8AC
Authority key identifier: E2:35:D9:D1:06:05:16:D9:58:BB:28:95:2B:AA:C2:B7:6E:4F:FC:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E235D9D1060516D958BB28952BAAC2B76E4FFCB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a613030303a3a2f33362d3336203d3e20323734373236.roa
Signing time:             Fri 14 Mar 2025 17:24:22 +0000
ROA not before:           Fri 14 Mar 2025 17:19:22 +0000
ROA not after:            Fri 13 Mar 2026 17:24:22 +0000
asID:                     274726
IP address blocks:        2804:92a8:a000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:d6:96:27:3f:38:51:21:4e:81:2f:8c:06:11:69:26:eb:00:b8:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E235D9D1060516D958BB28952BAAC2B76E4FFCB1
        Validity
            Not Before: Mar 14 17:19:22 2025 GMT
            Not After : Mar 13 17:24:22 2026 GMT
        Subject: CN=77D5D8A151697F45E0A3B18AAB229177CE78352C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:72:62:c1:f9:d5:b2:23:af:6e:e3:45:f6:24:
                    ff:9c:7c:5c:d7:e6:46:18:2b:60:6a:62:5b:ad:7b:
                    5a:31:00:1a:b6:b6:36:99:b4:df:0d:d1:b1:68:ea:
                    4c:29:33:97:6c:a3:a0:6b:ad:66:eb:40:67:b4:06:
                    d8:f4:65:fd:38:46:85:78:2f:72:36:be:c7:46:ab:
                    31:b2:94:b7:b1:34:49:37:81:38:e0:bb:5f:d8:86:
                    52:ee:2c:03:64:a2:41:76:79:35:d9:10:fb:d0:ff:
                    e6:89:44:4c:83:5e:f9:d1:69:a7:15:71:29:da:13:
                    8a:1e:36:1a:88:95:76:86:3f:8f:27:86:cb:a2:91:
                    3b:7a:38:19:62:6f:18:f7:78:75:80:b6:20:77:67:
                    fb:d0:f8:10:79:3a:c4:31:2c:c1:44:19:e2:90:bb:
                    d4:dd:1e:af:c6:b3:f6:c6:c2:0f:40:fb:fd:f0:79:
                    29:f6:75:0d:06:f3:5d:bb:4e:7d:1b:61:19:30:b3:
                    ba:3a:8a:0f:80:79:c0:11:7e:dc:eb:e3:62:47:13:
                    6e:12:5d:25:38:6b:cb:aa:23:2a:5c:90:a3:c3:0c:
                    da:80:b5:9d:2d:7c:b7:21:3e:cf:18:fa:ed:44:84:
                    af:e1:39:5e:e1:24:9f:70:28:a4:65:0e:98:8a:58:
                    a8:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:D5:D8:A1:51:69:7F:45:E0:A3:B1:8A:AB:22:91:77:CE:78:35:2C
            X509v3 Authority Key Identifier:
                keyid:E2:35:D9:D1:06:05:16:D9:58:BB:28:95:2B:AA:C2:B7:6E:4F:FC:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/E235D9D1060516D958BB28952BAAC2B76E4FFCB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E235D9D1060516D958BB28952BAAC2B76E4FFCB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a613030303a3a2f33362d3336203d3e20323734373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:92a8:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         79:c5:73:a3:02:9d:13:00:28:0e:45:93:34:71:b3:68:90:c7:
         71:94:3c:c7:a0:40:8b:5f:07:15:ac:29:0d:6c:aa:10:69:77:
         b5:ac:a1:a5:87:00:20:20:31:c9:ab:8b:63:50:7c:6b:46:d6:
         ea:5d:a3:25:ea:b3:e0:4a:86:d6:6f:61:b8:18:2e:58:7d:46:
         f5:0c:a4:52:19:7f:27:d3:c5:db:ba:bc:7b:a5:c2:04:d9:1c:
         eb:0a:73:54:82:1d:80:4f:d5:9e:c1:77:f2:29:7d:aa:5f:5a:
         f3:06:86:48:2f:3a:c0:11:3a:40:ed:c7:3f:27:24:7f:d3:e7:
         c4:9f:8e:ca:23:16:8e:7f:43:22:18:fa:8c:f6:4e:bf:2d:da:
         94:6f:64:a2:ed:55:32:f2:dc:58:ae:2f:32:c6:aa:13:a2:df:
         0b:8c:84:e1:61:fb:ad:6f:2a:ec:cd:2b:fb:f6:39:47:58:b5:
         ad:92:23:fc:42:d5:92:56:2c:0c:87:9a:f4:44:c7:65:59:6a:
         30:98:5f:5b:3d:41:b6:40:0b:38:4e:fd:ba:1f:24:3b:29:97:
         52:20:26:bd:86:1b:64:15:1f:f0:cd:26:0c:77:6a:ae:24:70:
         d5:67:1e:71:da:c6:93:8b:66:88:95:19:98:63:cc:c3:b8:32:
         1e:7d:ec:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:40:20 2025 by rpki-client