Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/323830343a343131343a3a2f33322d3332203d3e20323636303032.roa
File:                     323830343a343131343a3a2f33322d3332203d3e20323636303032.roa (raw, json)
Hash identifier:          rHuG6TROtQm5s1ObxQXAlO5BsotZPeTKIG69dKWShuQ=
Subject key identifier:   8A:A5:7C:B1:C9:A7:24:01:62:5C:23:4E:4D:42:38:54:DF:62:E5:40
Certificate issuer:       /CN=3742F5D0768B3C1CD0ED56183EAFAF5938C73431
Certificate serial:       02C06CE6D612F4BB40F19FDDC414161ADAD93A17
Authority key identifier: 37:42:F5:D0:76:8B:3C:1C:D0:ED:56:18:3E:AF:AF:59:38:C7:34:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3742F5D0768B3C1CD0ED56183EAFAF5938C73431.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/323830343a343131343a3a2f33322d3332203d3e20323636303032.roa
Signing time:             Tue 17 Dec 2024 17:18:33 +0000
ROA not before:           Tue 17 Dec 2024 17:13:33 +0000
ROA not after:            Tue 16 Dec 2025 17:18:33 +0000
asID:                     266002
IP address blocks:        2804:4114::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:c0:6c:e6:d6:12:f4:bb:40:f1:9f:dd:c4:14:16:1a:da:d9:3a:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3742F5D0768B3C1CD0ED56183EAFAF5938C73431
        Validity
            Not Before: Dec 17 17:13:33 2024 GMT
            Not After : Dec 16 17:18:33 2025 GMT
        Subject: CN=8AA57CB1C9A72401625C234E4D423854DF62E540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:0e:c9:c9:7f:22:c6:e1:c9:a8:bd:81:95:3e:
                    12:6b:4d:51:c3:81:09:c6:18:dc:52:3e:10:0c:44:
                    0c:73:ec:00:d8:1a:78:4e:75:3f:ba:1c:c5:86:d5:
                    7b:db:e3:10:49:cb:a5:ea:9e:fd:09:04:9a:c7:35:
                    8b:dc:a3:b8:d1:34:14:f2:ef:a6:2f:b5:99:d3:a8:
                    b2:ef:37:b5:ef:1f:09:9a:ec:8e:f4:3e:94:8b:bd:
                    6f:9c:86:1c:c0:f9:73:40:18:f5:a6:9d:18:51:bf:
                    b3:40:e9:bd:5e:8b:fc:68:bc:99:a3:9a:22:6a:73:
                    11:9e:55:71:dc:77:2f:5b:40:51:09:cd:66:27:d8:
                    e1:24:ad:20:c9:63:1b:12:b2:2f:20:a1:ad:fb:79:
                    28:f8:d3:87:32:a1:60:0b:5a:a4:ef:7d:9e:fe:70:
                    34:c2:1d:38:bb:0d:11:b2:ae:a0:7b:c2:05:ee:bb:
                    da:9d:02:8d:e9:4d:37:3b:4f:4d:2e:7b:51:96:13:
                    04:63:df:ba:07:48:f5:76:13:4d:60:ab:23:dc:7b:
                    3d:2f:82:1f:4c:d2:6d:65:7e:6a:f5:0d:15:0f:0b:
                    ae:62:38:ac:80:8a:0e:13:b9:70:ea:2c:0a:47:76:
                    09:b1:96:f8:da:5a:c7:33:b2:e8:8d:91:65:7f:6a:
                    1d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:A5:7C:B1:C9:A7:24:01:62:5C:23:4E:4D:42:38:54:DF:62:E5:40
            X509v3 Authority Key Identifier:
                keyid:37:42:F5:D0:76:8B:3C:1C:D0:ED:56:18:3E:AF:AF:59:38:C7:34:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/3742F5D0768B3C1CD0ED56183EAFAF5938C73431.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3742F5D0768B3C1CD0ED56183EAFAF5938C73431.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/323830343a343131343a3a2f33322d3332203d3e20323636303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4114::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:ed:36:01:0d:b2:a2:60:8f:cf:96:fc:17:d0:f4:46:f8:2c:
         2b:68:4c:30:73:25:0f:b3:2a:5a:c1:69:57:72:9f:56:d5:d5:
         90:a4:d3:f3:ca:88:59:cd:d9:5a:72:dd:77:f5:04:bb:0f:a5:
         2c:c7:64:91:6e:63:24:9a:3d:8a:89:09:14:09:a6:4d:17:a5:
         c4:90:da:7d:89:4a:a5:7d:11:2e:45:39:b8:e1:23:ea:9d:19:
         74:f8:af:6d:9d:f4:63:51:13:17:6a:ae:a5:15:f5:3d:d8:82:
         67:9a:a7:f2:48:e3:c9:b1:35:38:66:97:76:b2:bd:5b:46:e5:
         27:7e:cb:43:81:50:7d:d4:a4:71:76:0f:1d:3d:71:b1:9a:35:
         32:c6:52:23:56:c7:5b:f1:6a:dc:09:94:03:e2:b6:bf:cb:df:
         3c:9d:0a:94:6d:5a:4d:e6:ab:65:8f:6a:75:da:0e:29:eb:9f:
         78:79:f1:a9:39:bc:dd:eb:de:fc:8b:0f:5a:af:06:5a:55:e0:
         96:5b:64:0c:40:00:08:cb:10:42:f8:51:4e:fe:3e:ec:50:0e:
         f2:a7:71:c9:5b:a6:f0:7d:e3:5b:d3:d2:bf:63:0a:ab:3e:20:
         6a:d5:28:1e:fc:c6:4a:66:ab:10:88:82:45:9a:82:8e:1f:f6:
         ba:a1:d8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:49:16 2025 by rpki-client