Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a663030303a3a2f33362d3336203d3e20323734373236.roa
File:                     323830343a393261383a663030303a3a2f33362d3336203d3e20323734373236.roa (raw, json)
Hash identifier:          VeiK9cLP+gDERnuFJytc60T5jl8zwQk5kBj8Poyh/6I=
Subject key identifier:   8B:BF:F8:AE:8E:54:7F:8D:68:11:FF:EF:C4:41:7A:DA:74:57:D2:7B
Certificate issuer:       /CN=E235D9D1060516D958BB28952BAAC2B76E4FFCB1
Certificate serial:       70819385ACC71565F5EA732E097EBE5B6BEE646E
Authority key identifier: E2:35:D9:D1:06:05:16:D9:58:BB:28:95:2B:AA:C2:B7:6E:4F:FC:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E235D9D1060516D958BB28952BAAC2B76E4FFCB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a663030303a3a2f33362d3336203d3e20323734373236.roa
Signing time:             Fri 14 Mar 2025 17:24:19 +0000
ROA not before:           Fri 14 Mar 2025 17:19:19 +0000
ROA not after:            Fri 13 Mar 2026 17:24:19 +0000
asID:                     274726
IP address blocks:        2804:92a8:f000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:81:93:85:ac:c7:15:65:f5:ea:73:2e:09:7e:be:5b:6b:ee:64:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E235D9D1060516D958BB28952BAAC2B76E4FFCB1
        Validity
            Not Before: Mar 14 17:19:19 2025 GMT
            Not After : Mar 13 17:24:19 2026 GMT
        Subject: CN=8BBFF8AE8E547F8D6811FFEFC4417ADA7457D27B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9d:37:c7:f8:92:62:dc:1a:c1:3d:95:1d:f7:
                    a3:09:54:d2:89:84:9e:2a:16:86:39:72:b3:2f:9e:
                    fe:48:6f:25:37:90:25:fb:c0:45:1d:32:b7:e5:6b:
                    4d:39:35:ce:3d:d4:bd:0e:ba:79:e2:35:72:fe:74:
                    c7:cf:e5:33:ae:a7:03:fb:65:90:6e:5d:61:53:7c:
                    69:ef:4b:6b:08:63:dc:b8:ba:b1:64:63:37:69:3e:
                    61:60:60:09:e1:1a:5a:72:b4:15:d2:db:84:f7:45:
                    b4:8e:22:71:7e:8c:86:15:cc:c8:d7:43:01:6a:d4:
                    87:59:81:2d:9c:50:d0:3f:20:5e:9d:7a:0f:70:d9:
                    b0:35:8e:7d:dc:3f:50:16:e7:44:74:80:e7:0b:28:
                    c0:21:34:56:8c:cc:b5:6c:6d:65:a2:19:e8:43:e0:
                    3c:8e:70:4a:82:7f:9f:76:87:8b:70:e1:57:1e:21:
                    a4:b7:48:7a:ea:a3:32:51:ca:f5:c3:fb:09:7b:80:
                    1c:e8:9c:80:d6:97:dd:ac:6d:8d:6a:6d:10:d0:f1:
                    d1:a8:35:29:b8:fd:54:3e:98:d9:36:65:e4:d8:94:
                    4f:ce:ea:e3:ac:75:e4:86:1e:2f:c2:eb:e9:14:73:
                    27:93:11:77:fa:79:cb:cb:9e:93:0e:44:e3:63:37:
                    a9:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:BF:F8:AE:8E:54:7F:8D:68:11:FF:EF:C4:41:7A:DA:74:57:D2:7B
            X509v3 Authority Key Identifier:
                keyid:E2:35:D9:D1:06:05:16:D9:58:BB:28:95:2B:AA:C2:B7:6E:4F:FC:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/E235D9D1060516D958BB28952BAAC2B76E4FFCB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E235D9D1060516D958BB28952BAAC2B76E4FFCB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a663030303a3a2f33362d3336203d3e20323734373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:92a8:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         8d:56:e9:57:81:d6:60:e4:83:09:58:67:da:5f:64:d5:77:6f:
         35:30:7a:ab:f8:99:a3:8d:b3:9c:07:37:cf:0a:e1:df:f5:98:
         f8:c5:e5:53:bb:86:c2:cc:b8:24:0a:12:6a:f2:72:ae:c6:74:
         df:c5:e6:a3:cd:a7:1c:34:a4:fb:5e:88:3d:fd:3b:96:7d:77:
         9d:50:01:50:5c:c5:3a:1f:24:fd:35:87:27:a4:05:08:6e:cd:
         4c:73:3d:96:b1:86:a4:10:a9:ae:81:bd:bb:48:52:29:ef:f4:
         4a:aa:83:c8:08:62:59:30:b7:3d:7b:e3:58:5a:ab:97:65:04:
         5c:41:a5:ad:96:7f:f7:03:e1:f6:d4:ce:c8:bc:d4:99:3b:27:
         b1:1c:7f:14:a8:d8:b3:5c:ac:7c:df:33:a3:1f:4e:3b:02:df:
         74:00:4f:8b:d8:d3:e6:e1:f0:3f:59:ee:f9:6e:88:41:7c:5a:
         c7:3b:aa:cf:6a:4e:ac:3c:5a:c0:f9:98:97:50:84:7b:93:af:
         3a:46:40:05:95:8c:03:82:fb:1e:0c:9a:db:76:02:18:95:05:
         1e:78:a6:11:12:1f:0e:8a:28:b5:e6:71:27:cf:9e:8e:ed:86:
         b1:d8:1c:97:dd:fc:20:c8:89:02:44:39:1f:bf:74:54:92:3f:
         ab:9a:fe:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:40:16 2025 by rpki-client