Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EKkBAvBpYRx6fvwWnJc7mDWqabmaXQAayutRKS7dFyMi/1/323830343a343133343a3a2f33322d3332203d3e20323636303130.roa
File:                     323830343a343133343a3a2f33322d3332203d3e20323636303130.roa (raw, json)
Hash identifier:          xzEnl3gtC8KA7OYBN4dSw4oRCvSszmBfEuZV4+TOdpc=
Subject key identifier:   59:20:53:D8:02:FA:42:02:DA:7B:D7:79:F1:B6:AF:4E:1F:37:F4:63
Certificate issuer:       /CN=D27F46706288934EA75FEFCBDB933497E0E92077
Certificate serial:       16EAA38CAE6931494CE78D13BFFDFBFD56B397A7
Authority key identifier: D2:7F:46:70:62:88:93:4E:A7:5F:EF:CB:DB:93:34:97:E0:E9:20:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D27F46706288934EA75FEFCBDB933497E0E92077.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EKkBAvBpYRx6fvwWnJc7mDWqabmaXQAayutRKS7dFyMi/1/323830343a343133343a3a2f33322d3332203d3e20323636303130.roa
Signing time:             Wed 05 Mar 2025 20:52:43 +0000
ROA not before:           Wed 05 Mar 2025 20:47:43 +0000
ROA not after:            Wed 04 Mar 2026 20:52:43 +0000
asID:                     266010
IP address blocks:        2804:4134::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:ea:a3:8c:ae:69:31:49:4c:e7:8d:13:bf:fd:fb:fd:56:b3:97:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D27F46706288934EA75FEFCBDB933497E0E92077
        Validity
            Not Before: Mar  5 20:47:43 2025 GMT
            Not After : Mar  4 20:52:43 2026 GMT
        Subject: CN=592053D802FA4202DA7BD779F1B6AF4E1F37F463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:11:1b:ab:d7:3a:11:cc:c2:a0:f7:84:10:f8:
                    91:b0:5d:4e:63:3d:e3:ec:c6:b9:a8:0c:3a:b4:d7:
                    b3:a6:ce:70:0f:02:ae:c7:a9:86:1a:67:b0:71:9d:
                    d0:58:f8:f6:fe:c5:b6:ff:cb:53:d3:75:6e:71:ca:
                    cc:b9:4b:ad:99:a6:1f:01:d7:4d:5c:6d:35:eb:ab:
                    01:20:9f:04:98:df:6d:d2:56:5e:58:b5:2e:8d:1e:
                    ff:71:86:f3:c4:d1:7f:a0:5c:c0:3d:7e:b4:54:3a:
                    10:c8:5a:b0:de:8b:29:ab:c7:bb:c3:4e:17:eb:b8:
                    d0:1d:99:7d:1c:0a:49:9f:0a:99:36:c3:44:e2:bf:
                    89:ab:11:41:1b:b5:87:05:3c:ef:64:75:47:21:41:
                    6d:e0:2a:8c:ec:02:46:eb:70:cc:14:db:8a:03:76:
                    fd:c9:60:13:5c:cb:be:e8:fb:b2:b3:01:9a:22:b7:
                    0c:54:3f:51:0e:df:1b:96:80:69:04:73:34:8e:06:
                    e4:16:b4:4d:5a:aa:71:cc:7e:6c:cd:cb:99:34:6c:
                    cc:aa:d0:42:18:0c:0c:cd:cf:4d:b1:85:a9:ab:1c:
                    0a:e1:9f:fd:ab:90:3e:92:98:ba:04:10:6b:b7:2c:
                    c5:ed:50:2c:92:46:46:99:46:35:6f:62:13:72:f9:
                    4b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:20:53:D8:02:FA:42:02:DA:7B:D7:79:F1:B6:AF:4E:1F:37:F4:63
            X509v3 Authority Key Identifier:
                keyid:D2:7F:46:70:62:88:93:4E:A7:5F:EF:CB:DB:93:34:97:E0:E9:20:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EKkBAvBpYRx6fvwWnJc7mDWqabmaXQAayutRKS7dFyMi/1/D27F46706288934EA75FEFCBDB933497E0E92077.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D27F46706288934EA75FEFCBDB933497E0E92077.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EKkBAvBpYRx6fvwWnJc7mDWqabmaXQAayutRKS7dFyMi/1/323830343a343133343a3a2f33322d3332203d3e20323636303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4134::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:a9:e9:0d:c2:99:84:0e:2a:f5:a6:f9:3b:ba:c5:70:cf:73:
         69:bd:b4:03:ce:0b:13:d5:81:18:4c:af:e5:cc:f9:76:57:ad:
         f6:cb:dd:b1:39:1e:73:b4:0c:f7:ae:79:22:95:cf:51:62:ef:
         52:70:6e:b9:21:aa:51:69:ce:f2:91:67:a7:c6:36:4e:35:29:
         7d:92:37:71:6a:8f:d2:a1:f2:79:9c:46:1c:66:ef:3e:38:0a:
         cc:72:97:f1:89:67:15:8f:35:95:fb:aa:12:cd:d2:b2:fc:5a:
         35:82:18:03:4e:93:8b:a8:d6:f9:1a:63:58:db:41:7f:0b:40:
         6c:34:51:c0:54:4a:14:00:48:be:e8:2e:9b:e2:1f:31:e1:f1:
         59:83:fc:16:10:f5:d5:74:d6:78:2c:6f:f7:4b:52:5d:e7:68:
         9f:fb:93:6b:5a:a6:99:64:86:47:89:85:dc:1d:e2:d8:3c:6b:
         f6:76:74:9f:31:10:14:7b:0f:0f:94:77:ac:1f:18:83:95:14:
         4c:34:51:ed:07:3a:b8:40:e9:ae:47:f6:f5:33:54:86:3e:9c:
         dd:49:43:92:3f:14:40:9e:f6:8a:f2:c7:8b:0e:b6:f2:e1:4c:
         d7:1c:8d:6d:26:74:63:42:12:4c:dc:0e:15:c0:46:9a:65:34:
         61:51:c1:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:21:09 2025 by rpki-client