Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/1/323830343a333932303a343430303a3a2f34302d3430203d3e20323636303133.roa
File:                     323830343a333932303a343430303a3a2f34302d3430203d3e20323636303133.roa (raw, json)
Hash identifier:          hokY59Gv2I6eUeGOjyS8sn7hnJjO/RfURkY6MoSpS5M=
Subject key identifier:   C5:DA:BE:15:5F:75:B8:AE:C2:46:01:E4:74:56:AC:61:64:1A:72:6A
Certificate issuer:       /CN=EAC30F9C22DB300D3E6A11D193F1E339FF0EEDB9
Certificate serial:       4E6F961E04F6FC2CBD4EF19C6CB48801024AE7B0
Authority key identifier: EA:C3:0F:9C:22:DB:30:0D:3E:6A:11:D1:93:F1:E3:39:FF:0E:ED:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EAC30F9C22DB300D3E6A11D193F1E339FF0EEDB9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/1/323830343a333932303a343430303a3a2f34302d3430203d3e20323636303133.roa
Signing time:             Thu 11 Jan 2024 14:28:24 +0000
ROA not before:           Thu 11 Jan 2024 14:23:24 +0000
ROA not after:            Thu 09 Jan 2025 14:28:24 +0000
asID:                     266013
IP address blocks:        2804:3920:4400::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:6f:96:1e:04:f6:fc:2c:bd:4e:f1:9c:6c:b4:88:01:02:4a:e7:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAC30F9C22DB300D3E6A11D193F1E339FF0EEDB9
        Validity
            Not Before: Jan 11 14:23:24 2024 GMT
            Not After : Jan  9 14:28:24 2025 GMT
        Subject: CN=C5DABE155F75B8AEC24601E47456AC61641A726A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a0:74:83:44:e1:44:0d:6c:9d:52:55:75:e9:
                    53:30:35:6f:23:1d:5a:74:31:5c:84:2f:d3:14:a1:
                    e6:fb:e6:eb:09:04:3e:de:35:b7:71:af:f4:0a:39:
                    11:f4:e1:8c:b8:d2:a8:0b:96:3b:9d:f1:82:63:ee:
                    23:d1:d6:04:29:55:04:a1:3a:22:35:de:73:25:21:
                    5c:19:67:ba:76:f4:47:39:54:73:3d:97:72:d6:98:
                    4f:08:84:23:6f:99:df:d0:10:cf:34:a1:bb:67:8a:
                    8e:20:23:2d:f0:be:8e:41:bf:37:f4:b4:b4:e7:4d:
                    8e:4c:97:2f:4c:f4:5c:68:11:be:bc:e6:a5:b6:c0:
                    d7:dd:d0:ba:82:24:c0:e8:19:d5:b8:9c:96:52:e9:
                    7a:9c:64:f9:3f:32:09:36:eb:fc:65:91:53:58:29:
                    ce:f1:31:e9:37:32:50:48:af:04:91:7b:0d:70:cf:
                    a4:8b:53:18:f3:08:38:33:07:da:87:ac:dc:f8:fe:
                    b6:1d:01:66:c5:97:82:17:3b:be:4e:1a:c6:b0:3c:
                    81:46:43:ad:ab:22:e9:8f:7d:8b:de:41:05:8b:12:
                    1b:43:64:8c:54:f0:8a:a5:b5:a0:17:34:a7:17:00:
                    e0:0f:67:93:c0:d2:79:10:8e:d2:5a:fa:b1:9f:62:
                    9f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:DA:BE:15:5F:75:B8:AE:C2:46:01:E4:74:56:AC:61:64:1A:72:6A
            X509v3 Authority Key Identifier:
                keyid:EA:C3:0F:9C:22:DB:30:0D:3E:6A:11:D1:93:F1:E3:39:FF:0E:ED:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/1/EAC30F9C22DB300D3E6A11D193F1E339FF0EEDB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EAC30F9C22DB300D3E6A11D193F1E339FF0EEDB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/1/323830343a333932303a343430303a3a2f34302d3430203d3e20323636303133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3920:4400::/40

    Signature Algorithm: sha256WithRSAEncryption
         07:5f:32:ba:63:a5:82:24:6f:d6:c3:82:3d:3a:2f:16:d3:9c:
         2f:9e:3e:9d:0a:2d:af:ee:8e:b2:18:a1:1b:d0:e6:c6:c8:f2:
         ea:2d:c6:0d:fa:05:26:60:2c:e0:8e:bc:2e:7b:4b:d4:a2:a7:
         54:49:35:ad:ea:94:a8:0f:40:4f:cc:fa:4e:b0:c7:ce:f0:f7:
         d9:c4:85:84:36:84:70:9f:09:bd:d0:c2:fb:37:6d:ab:97:87:
         b9:cb:ac:ce:ee:ce:c6:44:f5:70:c0:56:08:c8:20:fe:b0:05:
         c0:f9:82:8c:0d:4e:06:50:d0:a5:4f:ce:52:b0:32:d5:d9:e3:
         69:15:46:40:cb:44:e7:90:2c:1f:2d:18:f7:2a:2f:e3:46:d7:
         4e:96:68:ab:10:e3:c1:48:0d:61:42:c5:82:30:ac:42:95:3b:
         76:27:df:b2:94:d4:98:96:19:e4:91:b4:f3:ec:9d:d2:ba:ab:
         1b:98:77:1a:f7:78:57:60:94:fb:85:40:b4:01:58:7f:4b:ed:
         31:cd:d2:34:33:0d:fc:02:72:28:df:5e:a7:c4:99:f8:b3:fb:
         eb:5f:f3:08:a2:e2:4c:9a:c7:7b:c2:c3:29:2c:06:d4:1f:68:
         4e:a6:f4:5d:5a:bf:3f:7c:91:49:56:39:31:4c:9a:d1:a6:4d:
         7a:7f:6e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:22 2025 by rpki-client