Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a633834383a3a2f34382d3438203d3e20323632343933.roa
File:                     323830343a6665633a633834383a3a2f34382d3438203d3e20323632343933.roa (raw, json)
Hash identifier:          YVwUJ0c6Vk8Snn1HvrYPMH2GY0Lil3lxuGrN0qUDS48=
Subject key identifier:   D4:1A:8B:13:CF:C8:A9:26:BE:F9:71:49:EF:F9:D0:C0:02:47:9C:6F
Certificate issuer:       /CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
Certificate serial:       64767B5EB4721200B7179D4F52E7ACAC0AFE81C4
Authority key identifier: 2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a633834383a3a2f34382d3438203d3e20323632343933.roa
Signing time:             Thu 07 Nov 2024 20:54:39 +0000
ROA not before:           Thu 07 Nov 2024 20:49:39 +0000
ROA not after:            Thu 06 Nov 2025 20:54:39 +0000
asID:                     262493
IP address blocks:        2804:fec:c848::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:76:7b:5e:b4:72:12:00:b7:17:9d:4f:52:e7:ac:ac:0a:fe:81:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
        Validity
            Not Before: Nov  7 20:49:39 2024 GMT
            Not After : Nov  6 20:54:39 2025 GMT
        Subject: CN=D41A8B13CFC8A926BEF97149EFF9D0C002479C6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f2:3d:55:b8:3f:7d:8b:39:ea:d8:24:52:b3:
                    e6:75:75:ab:9a:32:7f:5d:07:f8:48:31:07:a0:83:
                    d0:eb:db:b0:65:25:79:2d:82:5e:6d:71:99:fd:b3:
                    0a:20:d7:a4:de:3a:f1:77:a2:01:2a:b9:f2:dd:19:
                    cc:13:24:b1:3f:2e:69:3d:4f:e2:91:c5:1d:e7:7d:
                    ea:d5:49:5c:a7:b0:94:1b:0f:74:a0:97:79:46:7f:
                    6c:34:4d:90:a4:d0:df:ed:aa:13:1b:58:ae:be:3d:
                    04:65:8e:e4:92:7f:d6:e6:f4:9e:18:e8:b2:b4:bf:
                    35:f8:ec:7e:11:37:0d:e6:0d:81:28:9e:74:6b:cc:
                    44:e1:84:e1:10:ec:eb:99:55:1e:46:05:2c:75:d9:
                    d2:e4:2b:17:80:c7:20:eb:3e:37:07:fb:d6:db:d1:
                    12:15:dc:0c:48:6e:09:bf:07:cf:6f:a0:da:29:96:
                    d0:2a:52:6a:27:0a:e5:27:4b:04:bb:f4:65:27:f8:
                    1f:38:f4:6a:dd:6f:3b:23:c0:c9:27:b3:dc:ce:e0:
                    f7:17:64:d7:e8:9e:83:3f:ef:48:75:36:e2:f1:02:
                    84:5e:78:a5:cc:75:5a:d1:38:68:91:f3:e3:97:6c:
                    46:d7:1b:75:0f:e6:f0:66:3b:89:b8:71:2d:59:76:
                    9f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:1A:8B:13:CF:C8:A9:26:BE:F9:71:49:EF:F9:D0:C0:02:47:9C:6F
            X509v3 Authority Key Identifier:
                keyid:2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a633834383a3a2f34382d3438203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:fec:c848::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:3e:ad:5c:7a:d1:37:74:5f:3c:33:9d:e2:8b:89:fa:04:e7:
         ec:c7:75:38:4b:08:92:24:67:c6:95:73:29:8e:62:6b:c6:7b:
         1a:16:71:98:4b:b3:9b:d4:55:06:be:78:6c:72:ae:eb:03:d5:
         fc:9e:6c:a1:97:f8:1a:c6:d5:da:fe:28:24:df:a8:cc:b2:50:
         ac:90:91:89:74:bf:f2:7e:9a:5e:1b:75:23:b3:6e:6b:b0:d0:
         63:68:23:e4:79:8b:fa:1d:e1:6b:1b:79:7c:d4:d8:75:e5:3e:
         2a:ee:e0:7b:7e:a4:3e:d1:dd:3f:98:b0:3b:f4:76:87:0a:02:
         5a:73:90:e0:ab:f0:2f:94:9e:53:91:81:b6:67:88:2b:5d:02:
         97:38:62:c8:bd:04:0b:b6:ea:d4:46:e3:8d:26:cc:3c:2b:f2:
         e9:16:84:0f:a7:cc:31:ef:ab:ae:20:89:93:5c:38:f8:00:0e:
         53:a2:33:fc:94:fb:f4:75:fe:2b:29:cd:20:a9:92:96:d5:8d:
         80:d0:74:e5:d1:d7:7b:2f:11:e3:40:7b:1a:e1:29:3f:34:bd:
         02:7c:a8:11:87:bc:fe:b4:db:cf:47:88:a0:9b:20:cf:1d:99:
         1a:5c:d1:42:2b:a7:23:d0:cf:85:73:3a:3e:82:c3:9f:79:b6:
         11:38:3b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:40:47 2025 by rpki-client