Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DsNym3AhwDJKaistw2zB3shGSWMSA4Pfm6j94ofPU4tB/1/323830343a333839633a3a2f33322d3430203d3e20323636343839.roa
File:                     323830343a333839633a3a2f33322d3430203d3e20323636343839.roa (raw, json)
Hash identifier:          Y1gtxFnwsDdkEHKN22Kh7KLI90rNGY1KUqs7qH6a09U=
Subject key identifier:   FD:64:B5:70:75:76:46:BD:28:AF:7A:53:34:EF:D3:7D:07:79:42:5A
Certificate issuer:       /CN=EF945D3089B26045153874D31CF2D92589258BB1
Certificate serial:       712B8926A99169365AC3288A5537A30020E9139F
Authority key identifier: EF:94:5D:30:89:B2:60:45:15:38:74:D3:1C:F2:D9:25:89:25:8B:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF945D3089B26045153874D31CF2D92589258BB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DsNym3AhwDJKaistw2zB3shGSWMSA4Pfm6j94ofPU4tB/1/323830343a333839633a3a2f33322d3430203d3e20323636343839.roa
Signing time:             Thu 06 Mar 2025 05:00:19 +0000
ROA not before:           Thu 06 Mar 2025 04:55:19 +0000
ROA not after:            Thu 05 Mar 2026 05:00:19 +0000
asID:                     266489
IP address blocks:        2804:389c::/32 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:2b:89:26:a9:91:69:36:5a:c3:28:8a:55:37:a3:00:20:e9:13:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF945D3089B26045153874D31CF2D92589258BB1
        Validity
            Not Before: Mar  6 04:55:19 2025 GMT
            Not After : Mar  5 05:00:19 2026 GMT
        Subject: CN=FD64B570757646BD28AF7A5334EFD37D0779425A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:bb:dc:18:08:78:ef:26:37:13:7b:e1:d3:63:
                    cc:30:9f:01:35:4c:3d:58:d7:c6:34:03:7d:6a:27:
                    83:24:5b:8b:cc:6b:d1:87:b0:24:87:77:e1:e7:e5:
                    e9:1f:34:8b:93:60:58:09:b3:e6:0e:61:e4:cc:d0:
                    00:71:dc:c4:44:1b:e6:a4:64:f2:a5:3d:92:e0:a7:
                    fe:2c:f4:19:f6:2d:d5:62:8e:74:26:62:fd:b6:47:
                    f7:ae:80:15:cc:da:6d:4c:3f:66:d5:85:bc:d3:64:
                    f6:d1:3e:44:ea:2f:56:3e:5b:a6:d7:1b:c5:0f:a6:
                    39:19:07:b7:c7:11:68:2c:20:6e:e0:25:26:4e:f9:
                    99:44:31:2f:a0:d1:c5:f8:e4:0f:ac:89:ce:12:36:
                    a1:a7:50:78:cd:21:10:cb:26:46:a5:ac:75:e0:74:
                    87:58:fb:d5:fc:ce:dd:ea:d0:ef:af:f9:08:06:f6:
                    02:99:22:e7:da:7d:25:53:28:82:a6:8f:cf:00:f6:
                    35:b5:d2:f6:bb:45:9c:34:8f:1e:72:82:8e:11:39:
                    c3:0e:a1:16:4f:63:1b:21:06:f5:51:f7:60:ec:7c:
                    f2:8d:78:a0:78:5d:54:56:d7:38:6a:25:0f:f8:80:
                    81:35:06:81:1e:26:3b:1d:da:5f:7a:58:c1:f6:7c:
                    b7:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:64:B5:70:75:76:46:BD:28:AF:7A:53:34:EF:D3:7D:07:79:42:5A
            X509v3 Authority Key Identifier:
                keyid:EF:94:5D:30:89:B2:60:45:15:38:74:D3:1C:F2:D9:25:89:25:8B:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DsNym3AhwDJKaistw2zB3shGSWMSA4Pfm6j94ofPU4tB/1/EF945D3089B26045153874D31CF2D92589258BB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF945D3089B26045153874D31CF2D92589258BB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DsNym3AhwDJKaistw2zB3shGSWMSA4Pfm6j94ofPU4tB/1/323830343a333839633a3a2f33322d3430203d3e20323636343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:389c::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:c2:a6:08:18:53:ce:97:6f:9e:ce:ae:8e:35:d8:df:70:07:
         ca:06:41:de:7b:01:db:f1:59:8a:9b:82:ad:29:f2:73:db:f1:
         54:92:06:36:4c:8b:b5:b9:fa:39:cc:eb:ac:87:1e:d7:b4:f2:
         61:6b:b1:67:41:05:d2:5c:34:7a:ea:be:71:c5:a2:c6:72:cc:
         0a:6d:95:25:ae:3e:cd:6c:ab:6a:15:a0:e0:f8:00:76:54:2f:
         49:29:29:67:2e:12:65:f6:c1:5a:a8:1a:c3:31:1a:58:fc:28:
         c7:66:c6:e4:28:61:91:5c:cc:6d:d3:31:14:43:ec:49:9d:86:
         13:0a:1c:10:d5:20:7f:44:b8:48:df:94:f7:6c:28:c0:3b:f3:
         6b:9d:fb:8d:53:32:30:02:85:52:81:45:51:3c:c7:de:84:66:
         14:fd:a4:5a:eb:62:07:d8:2e:63:24:d8:8a:7a:72:42:5e:b9:
         f2:3a:ff:79:9c:3c:5f:c5:34:95:06:f1:bc:e5:f8:a3:3c:2c:
         63:ab:48:31:ff:64:05:1d:c5:3c:1b:62:04:98:11:0d:3c:3b:
         95:28:6c:53:08:6b:88:92:53:67:eb:54:56:49:36:71:6e:96:
         ee:f9:55:31:77:22:92:37:9c:6d:bb:77:ea:41:84:18:1a:bf:
         47:84:69:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:56:45 2025 by rpki-client