Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DwvHYZf54EzEBCVULVBkLpBZ1a5S7R8iiHndTJ8Tf8Jg/0/323830343a393132343a3a2f33322d3438203d3e20323734363231.roa
File:                     323830343a393132343a3a2f33322d3438203d3e20323734363231.roa (raw, json)
Hash identifier:          9EMZf+R/EqTyjgJEl3q5nIXapj77ZuhSLq2GLd+0o3I=
Subject key identifier:   CC:14:53:8D:AC:B6:E9:E7:0E:5A:42:87:BE:18:50:3E:48:F7:B4:CF
Certificate issuer:       /CN=0BC5FA068C2FB953B849D244673B5B1ACD76E920
Certificate serial:       1830E15149B7085CD5A1229C98097191C36027E6
Authority key identifier: 0B:C5:FA:06:8C:2F:B9:53:B8:49:D2:44:67:3B:5B:1A:CD:76:E9:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BC5FA068C2FB953B849D244673B5B1ACD76E920.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DwvHYZf54EzEBCVULVBkLpBZ1a5S7R8iiHndTJ8Tf8Jg/0/323830343a393132343a3a2f33322d3438203d3e20323734363231.roa
Signing time:             Sat 22 Feb 2025 04:01:26 +0000
ROA not before:           Sat 22 Feb 2025 03:56:26 +0000
ROA not after:            Sat 21 Feb 2026 04:01:26 +0000
asID:                     274621
IP address blocks:        2804:9124::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:30:e1:51:49:b7:08:5c:d5:a1:22:9c:98:09:71:91:c3:60:27:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BC5FA068C2FB953B849D244673B5B1ACD76E920
        Validity
            Not Before: Feb 22 03:56:26 2025 GMT
            Not After : Feb 21 04:01:26 2026 GMT
        Subject: CN=CC14538DACB6E9E70E5A4287BE18503E48F7B4CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:55:75:57:f0:46:4b:28:17:1d:c4:73:0c:68:
                    2a:ba:7f:bb:55:b4:e2:c2:56:73:9d:dc:d6:d5:c1:
                    29:94:46:e5:8d:7f:5b:c0:81:74:d6:67:79:e8:56:
                    23:9b:77:17:02:30:cd:47:18:46:f9:52:d0:ed:f2:
                    9a:98:92:e2:9e:80:1f:da:3d:51:49:15:62:c7:85:
                    8c:93:bb:bb:99:f3:6e:3f:56:34:ea:8e:8d:0b:62:
                    24:55:b6:a3:e6:8e:65:31:40:64:45:ce:62:c1:75:
                    4c:85:20:c6:c4:ce:ef:95:9d:20:40:23:a4:74:62:
                    a0:b4:0b:db:ce:e2:d3:c1:fc:b0:35:95:8a:73:c4:
                    b0:32:d2:ab:49:24:c7:d7:e4:74:17:f4:44:e9:57:
                    dc:05:5d:e9:ab:93:fe:e4:c5:48:49:b5:45:ec:2e:
                    7d:cb:0a:a8:3d:a7:e3:16:97:fd:2e:d2:7e:ba:cb:
                    7d:4e:2e:1c:67:76:d9:51:be:96:4a:3f:a7:cb:34:
                    b3:8c:7f:a9:a0:2e:dc:b1:32:bb:75:bf:0d:81:f5:
                    3e:35:a5:06:f6:94:65:f0:35:3e:d2:ee:3c:a6:07:
                    ca:74:26:6f:cd:73:e5:eb:49:89:39:fc:42:12:59:
                    99:e7:ab:e6:a3:f5:58:51:c1:c3:fc:ed:a9:53:ca:
                    d2:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:14:53:8D:AC:B6:E9:E7:0E:5A:42:87:BE:18:50:3E:48:F7:B4:CF
            X509v3 Authority Key Identifier:
                keyid:0B:C5:FA:06:8C:2F:B9:53:B8:49:D2:44:67:3B:5B:1A:CD:76:E9:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DwvHYZf54EzEBCVULVBkLpBZ1a5S7R8iiHndTJ8Tf8Jg/0/0BC5FA068C2FB953B849D244673B5B1ACD76E920.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BC5FA068C2FB953B849D244673B5B1ACD76E920.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DwvHYZf54EzEBCVULVBkLpBZ1a5S7R8iiHndTJ8Tf8Jg/0/323830343a393132343a3a2f33322d3438203d3e20323734363231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9124::/32

    Signature Algorithm: sha256WithRSAEncryption
         ac:fe:ea:be:95:55:30:0f:f0:74:99:9c:a4:79:b3:6a:4e:ac:
         0e:b9:f6:0d:74:39:7d:4e:7e:71:01:b2:ff:49:c1:cb:b2:ea:
         5a:77:47:3c:e2:44:55:29:ce:56:72:20:97:09:14:f0:91:17:
         fa:2a:53:c0:1b:1d:d1:49:17:83:ce:fb:2a:d5:06:8b:4c:d7:
         30:fe:18:a8:9b:79:1b:3f:4b:f7:31:d4:95:8c:3e:ac:24:b2:
         e3:12:37:de:3b:06:5c:27:c4:52:7a:ff:b6:3c:9c:b5:c8:16:
         5c:9b:cd:cf:9f:1c:ed:e5:b5:d8:7d:68:75:a0:f3:ec:4e:04:
         f0:b6:42:e5:27:8a:88:fe:3d:05:96:9e:89:a1:d0:0c:92:2c:
         a9:e9:d6:e3:d8:e4:f0:e0:d5:6f:8d:8b:ca:5d:28:b0:85:40:
         4b:38:37:88:1e:5f:bb:e6:04:28:af:3f:64:83:60:5e:31:77:
         f0:2a:43:cd:7b:44:00:05:cd:7b:33:83:51:00:ba:8c:a4:a7:
         41:93:de:c0:8f:89:2d:f4:26:b4:c1:ec:8f:dd:5d:d5:6e:0e:
         ae:a3:36:a6:bc:f4:d2:2b:73:39:c4:8a:1e:56:e3:c4:24:02:
         1a:7f:8c:6f:4c:be:96:78:15:90:8a:6d:00:39:89:df:9b:2f:
         84:fb:7e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:14:16 2025 by rpki-client