Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/323830343a343131343a3a2f33322d3438203d3e20323636303032.roa
File:                     323830343a343131343a3a2f33322d3438203d3e20323636303032.roa (raw, json)
Hash identifier:          a4NYkVdo5aPWye3tCRJ4yAurrDJnbIRoOQNsCCCc7QM=
Subject key identifier:   B2:41:5C:29:6E:AF:5D:DC:37:CA:A5:8A:1C:B6:E1:05:DC:27:0D:BF
Certificate issuer:       /CN=658D206948C4D2E8D5E6077E923EB5A551F916BE
Certificate serial:       4BE64D8DEA9F0D7B81A6254E6271DB2EF3216461
Authority key identifier: 65:8D:20:69:48:C4:D2:E8:D5:E6:07:7E:92:3E:B5:A5:51:F9:16:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/658D206948C4D2E8D5E6077E923EB5A551F916BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/323830343a343131343a3a2f33322d3438203d3e20323636303032.roa
Signing time:             Thu 19 Dec 2024 15:58:26 +0000
ROA not before:           Thu 19 Dec 2024 15:53:26 +0000
ROA not after:            Thu 18 Dec 2025 15:58:26 +0000
asID:                     266002
IP address blocks:        2804:4114::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:e6:4d:8d:ea:9f:0d:7b:81:a6:25:4e:62:71:db:2e:f3:21:64:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=658D206948C4D2E8D5E6077E923EB5A551F916BE
        Validity
            Not Before: Dec 19 15:53:26 2024 GMT
            Not After : Dec 18 15:58:26 2025 GMT
        Subject: CN=B2415C296EAF5DDC37CAA58A1CB6E105DC270DBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a7:c8:26:72:98:28:93:d2:f5:b9:a0:9e:8d:
                    88:26:80:a6:6c:16:99:a6:fd:8c:1b:b9:33:90:d7:
                    da:5e:54:3a:19:90:8e:0f:ce:c5:8e:44:46:15:8c:
                    3d:9e:08:5e:6c:af:9e:4b:01:4e:6c:ff:1d:be:72:
                    4c:e1:2c:e7:f7:6f:d6:3d:e1:72:cf:00:35:30:8c:
                    cf:b3:d5:35:94:db:25:69:fd:d6:e0:91:bb:9c:ea:
                    5e:7f:cb:0c:10:8c:dd:c6:21:c2:76:49:ba:de:c5:
                    3b:04:07:f6:3f:09:bc:36:bf:a0:4e:1e:3e:ad:14:
                    8d:07:42:01:76:66:37:4e:23:eb:ff:19:ae:10:44:
                    a2:bf:62:b6:ff:64:6a:91:4d:31:6e:b6:66:6f:fd:
                    5a:c7:aa:18:e6:d2:d8:0b:ad:6d:53:af:24:2e:86:
                    19:1b:fb:11:b8:e7:fa:06:dc:41:47:61:81:39:a2:
                    1d:f0:f9:67:b3:a9:f6:d0:b7:43:9c:39:a1:53:04:
                    54:4b:57:ac:94:ca:cb:e4:6e:a1:b7:d1:ab:8e:03:
                    9d:96:db:78:75:21:71:21:a7:23:8c:1e:be:6b:a3:
                    56:52:4e:70:3f:f9:66:a0:e0:8b:2c:9b:29:7f:5f:
                    53:65:b8:04:ed:3a:4e:42:2b:66:e3:d8:20:90:fb:
                    40:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:41:5C:29:6E:AF:5D:DC:37:CA:A5:8A:1C:B6:E1:05:DC:27:0D:BF
            X509v3 Authority Key Identifier:
                keyid:65:8D:20:69:48:C4:D2:E8:D5:E6:07:7E:92:3E:B5:A5:51:F9:16:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/658D206948C4D2E8D5E6077E923EB5A551F916BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/658D206948C4D2E8D5E6077E923EB5A551F916BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/323830343a343131343a3a2f33322d3438203d3e20323636303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4114::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:e0:5d:66:28:b5:a3:57:e3:cf:bc:ff:f0:99:cd:62:2e:c7:
         26:5b:a6:10:db:91:3e:af:cb:c3:38:09:c8:48:0d:c6:df:fd:
         ff:2a:26:49:3c:81:9d:6d:0d:50:b0:3f:95:92:9f:a8:fe:97:
         2a:0a:ae:6f:df:94:85:f4:cb:31:9b:e1:56:c3:c0:da:07:47:
         a6:dd:6f:b0:9c:4e:a6:2e:63:37:e6:74:8c:f1:2a:06:b9:38:
         40:7c:94:e8:61:a3:4f:91:84:02:5f:1b:ce:67:36:d1:bc:7b:
         4a:85:5d:03:c7:83:bc:5b:c0:16:b9:ab:ef:7d:21:1e:99:16:
         da:d9:6e:bd:7f:da:a4:4e:db:9a:24:e9:7c:46:9b:14:b9:8a:
         a7:e7:b7:ac:d4:cf:2f:0b:65:58:8d:06:cd:1b:65:77:4f:e5:
         ff:c3:d8:84:37:0b:47:71:e1:06:27:c5:c8:4b:ad:ac:da:0f:
         f8:ac:b1:d0:a6:e2:4c:54:f7:bc:08:34:c9:22:29:c8:90:35:
         ef:84:12:5f:af:1d:e3:56:b1:45:18:a9:0f:71:22:24:91:f5:
         1f:a7:2a:06:c6:1b:15:dc:bb:52:4f:4a:9a:47:2b:c0:d3:c6:
         f9:d1:15:b5:1e:a5:fc:eb:a8:73:37:c3:17:c8:a3:ae:97:c9:
         d1:07:ab:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 07:54:28 2025 by rpki-client