Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/323830343a323265383a3a2f33322d3438203d3e20323634313330.roa
File:                     323830343a323265383a3a2f33322d3438203d3e20323634313330.roa (raw, json)
Hash identifier:          dfRuD5+053XuqbvUOk8huXXvMBztWwdbTAJx0nWgpPY=
Subject key identifier:   B4:71:33:0B:C5:D0:EB:D0:09:19:F9:45:34:89:80:D1:CB:77:45:E3
Certificate issuer:       /CN=A8BD0436E6BF9E340AF020F5EA34B5C289DED09A
Certificate serial:       33FD4D9A8CE36CAFCC92032DDB80AC95D771B3BA
Authority key identifier: A8:BD:04:36:E6:BF:9E:34:0A:F0:20:F5:EA:34:B5:C2:89:DE:D0:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8BD0436E6BF9E340AF020F5EA34B5C289DED09A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/323830343a323265383a3a2f33322d3438203d3e20323634313330.roa
Signing time:             Wed 22 Jan 2025 13:21:20 +0000
ROA not before:           Wed 22 Jan 2025 13:16:20 +0000
ROA not after:            Wed 21 Jan 2026 13:21:20 +0000
asID:                     264130
IP address blocks:        2804:22e8::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:fd:4d:9a:8c:e3:6c:af:cc:92:03:2d:db:80:ac:95:d7:71:b3:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8BD0436E6BF9E340AF020F5EA34B5C289DED09A
        Validity
            Not Before: Jan 22 13:16:20 2025 GMT
            Not After : Jan 21 13:21:20 2026 GMT
        Subject: CN=B471330BC5D0EBD00919F945348980D1CB7745E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e9:c5:9b:50:89:fa:fd:07:f3:29:0b:e0:05:
                    28:a2:03:4d:9a:9e:b7:01:b5:62:04:4d:49:5b:3a:
                    4b:00:fa:a7:d9:ae:cc:22:c4:2d:05:1d:31:51:f6:
                    2d:62:ce:a9:22:ed:dd:b2:22:59:b0:09:b3:5f:43:
                    35:9a:88:df:5f:99:ce:31:9a:3f:cd:d2:6b:ed:c5:
                    87:35:6b:6f:3f:f9:0a:ec:5c:8b:e7:b3:71:30:4b:
                    ac:e6:b0:ac:7a:f0:c1:7b:8e:7b:48:df:c0:ef:61:
                    13:51:74:08:85:62:56:b2:5e:c8:e8:73:ea:c5:9a:
                    66:a4:5e:65:5d:ec:64:0e:1f:03:25:d6:06:27:a7:
                    f5:fe:04:00:fb:e3:af:4d:58:bd:62:ea:98:cf:e5:
                    61:cf:ab:60:72:87:91:39:21:0b:10:f3:c8:0d:71:
                    bf:e0:13:49:39:a4:c8:e2:4f:2b:59:14:aa:f3:85:
                    91:b8:d1:1d:f3:f7:77:17:3c:4c:a4:bd:46:13:a9:
                    ee:ec:f4:b2:12:64:0c:e7:56:9b:f7:d9:56:24:83:
                    36:a6:94:6f:6c:31:88:38:79:67:68:e6:9c:97:fc:
                    64:8a:18:c9:4f:db:49:59:93:98:f8:e3:4c:b1:bf:
                    91:12:58:51:68:eb:1a:1b:29:6b:ac:cc:62:b3:90:
                    d9:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:71:33:0B:C5:D0:EB:D0:09:19:F9:45:34:89:80:D1:CB:77:45:E3
            X509v3 Authority Key Identifier:
                keyid:A8:BD:04:36:E6:BF:9E:34:0A:F0:20:F5:EA:34:B5:C2:89:DE:D0:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/A8BD0436E6BF9E340AF020F5EA34B5C289DED09A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8BD0436E6BF9E340AF020F5EA34B5C289DED09A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/323830343a323265383a3a2f33322d3438203d3e20323634313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:22e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:9d:f6:75:d1:c8:84:f4:78:8d:d2:0b:c9:74:07:2b:17:21:
         f4:c9:ff:6c:c8:3b:44:b8:29:e6:6e:ae:09:02:5b:5f:c4:24:
         e2:fa:ce:6d:9a:e0:8f:b8:23:c7:30:13:95:6c:fd:ed:d8:6e:
         40:ed:dd:3f:ab:8f:10:3a:87:51:75:61:0f:34:47:8a:9e:ba:
         b8:90:c5:75:e0:21:20:57:de:0f:36:1d:03:98:e7:d3:7e:b5:
         b6:15:f2:70:93:e0:c5:ec:8c:64:46:51:d0:e2:2a:e3:a6:75:
         2d:53:fd:d5:c0:a9:df:85:be:0e:18:2b:2e:37:79:97:00:07:
         4c:9f:d7:6f:46:7c:46:2a:7d:3b:25:ab:c9:80:f3:88:3d:b2:
         18:93:da:e7:3c:d6:38:f9:f3:b3:76:2a:57:40:07:0a:18:49:
         f0:f2:28:ae:b3:90:ae:bc:00:1d:1e:2b:d3:63:59:c4:56:b6:
         39:43:6b:b2:5a:ae:f7:c3:a8:72:16:37:50:1f:b8:74:91:e2:
         00:71:6c:99:33:2d:60:81:90:39:c4:29:5a:b1:c8:34:41:a5:
         05:69:e2:ba:2b:c2:80:0c:56:ef:33:ed:cf:f4:cd:92:21:cc:
         47:58:cb:24:4c:cc:77:5c:a2:36:49:94:b3:eb:5f:84:25:c7:
         04:e1:d2:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:54:29 2025 by rpki-client