Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMVQK8UVGGtLfbhzKkkQXcxREps8G9hfa2tjqZj6BR88/0/323830343a373531343a3a2f33322d313238203d3e20323731303232.roa
File:                     323830343a373531343a3a2f33322d313238203d3e20323731303232.roa (raw, json)
Hash identifier:          jkcSrPp9LlA5kj3jbECLhUqNuaIKctG5NBSH0vdV4g4=
Subject key identifier:   05:CB:C9:BD:5E:2C:14:DA:D7:27:0C:EB:42:25:F9:FA:52:04:37:47
Certificate issuer:       /CN=90B94A2532C6C0783CF4EEE63413FBA6605C4412
Certificate serial:       338A85FF3617CE7C1E119A292445A68895976324
Authority key identifier: 90:B9:4A:25:32:C6:C0:78:3C:F4:EE:E6:34:13:FB:A6:60:5C:44:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90B94A2532C6C0783CF4EEE63413FBA6605C4412.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMVQK8UVGGtLfbhzKkkQXcxREps8G9hfa2tjqZj6BR88/0/323830343a373531343a3a2f33322d313238203d3e20323731303232.roa
Signing time:             Mon 10 Feb 2025 18:07:56 +0000
ROA not before:           Mon 10 Feb 2025 18:02:56 +0000
ROA not after:            Mon 09 Feb 2026 18:07:56 +0000
asID:                     271022
IP address blocks:        2804:7514::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:8a:85:ff:36:17:ce:7c:1e:11:9a:29:24:45:a6:88:95:97:63:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90B94A2532C6C0783CF4EEE63413FBA6605C4412
        Validity
            Not Before: Feb 10 18:02:56 2025 GMT
            Not After : Feb  9 18:07:56 2026 GMT
        Subject: CN=05CBC9BD5E2C14DAD7270CEB4225F9FA52043747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6f:49:8d:11:c7:56:7d:ca:80:f2:07:ee:98:
                    01:87:13:fd:1a:4c:34:db:12:a0:48:3a:96:3d:75:
                    3e:39:b0:c0:ad:f6:b3:6e:9d:21:4d:4c:8e:f5:91:
                    a7:c5:14:03:2e:54:30:c7:c7:f7:ad:5e:2a:56:e1:
                    bc:93:e9:d9:82:c8:31:69:f9:4a:d9:26:c8:8d:14:
                    7f:2c:cb:5f:5e:15:45:dc:c9:ab:14:22:5a:1d:9c:
                    2d:ce:f1:f4:3f:b7:0b:7c:f2:b5:eb:a6:aa:09:ea:
                    ec:0e:9f:84:b1:6b:b2:ee:f1:ba:05:54:ed:6a:da:
                    c8:27:79:66:ca:2c:94:36:41:07:4d:eb:45:9f:51:
                    55:f2:a1:4c:9b:de:5c:6e:02:f5:ce:2d:3a:c0:12:
                    d0:c7:cb:ae:1f:d5:ab:05:be:1d:0e:e8:df:15:1a:
                    46:2b:8a:5b:cd:f5:12:44:e1:94:48:73:bb:e5:cc:
                    ca:bd:a5:ae:63:5a:85:57:ae:e1:21:1a:33:92:76:
                    da:6e:a2:bc:c2:91:1e:f9:5d:12:15:81:12:69:fb:
                    0e:c7:b5:74:b0:bc:73:4f:03:a7:0c:73:a4:26:52:
                    da:c8:a1:00:b3:a3:bd:a8:34:51:fb:f0:f9:f9:c8:
                    86:03:c0:b8:38:08:f8:85:bc:a6:d3:2a:08:c0:92:
                    12:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:CB:C9:BD:5E:2C:14:DA:D7:27:0C:EB:42:25:F9:FA:52:04:37:47
            X509v3 Authority Key Identifier:
                keyid:90:B9:4A:25:32:C6:C0:78:3C:F4:EE:E6:34:13:FB:A6:60:5C:44:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMVQK8UVGGtLfbhzKkkQXcxREps8G9hfa2tjqZj6BR88/0/90B94A2532C6C0783CF4EEE63413FBA6605C4412.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90B94A2532C6C0783CF4EEE63413FBA6605C4412.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMVQK8UVGGtLfbhzKkkQXcxREps8G9hfa2tjqZj6BR88/0/323830343a373531343a3a2f33322d313238203d3e20323731303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7514::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:ba:85:fb:60:ba:33:fe:e2:64:93:e1:ee:24:a0:2d:e0:18:
         a3:6c:eb:b9:e1:f5:b7:36:8d:86:bf:0b:fd:47:c7:3a:9f:ae:
         6b:b6:00:5d:67:8f:9b:42:15:f1:a9:f4:3f:dc:a5:78:a3:8f:
         60:6c:4b:6c:42:da:f3:16:20:2c:14:da:30:b1:22:25:fd:15:
         5f:1f:0d:7e:a3:a2:4f:44:0d:32:9b:f1:b5:f8:3d:3c:9e:2d:
         89:f8:09:0b:b7:67:1f:75:18:24:5f:c7:fd:04:aa:a7:0c:dd:
         3d:ba:83:c8:f5:d0:a4:cd:a8:f0:86:b7:90:03:44:c0:26:fd:
         f4:fb:0a:ee:fa:66:31:9b:ff:2b:0e:87:68:63:0c:40:1e:e6:
         6a:a7:ea:af:d1:e0:4a:6d:e4:5d:0a:93:bc:66:e9:a2:30:f1:
         cc:c5:ff:4a:c9:7b:cd:c5:51:ff:a0:57:8c:3c:b0:06:86:fc:
         7a:e8:80:95:52:89:ab:5f:93:5e:94:88:1b:8c:a2:ce:e8:6f:
         32:17:7e:83:6e:b4:02:06:46:c5:1c:1e:a0:be:32:ee:e2:b2:
         28:37:e8:dd:ee:24:c8:23:a6:82:2b:86:78:60:53:5a:19:02:
         57:2a:ef:b5:25:f1:e6:56:04:22:54:b8:f5:a6:fb:3f:75:12:
         85:07:99:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:03:36 2025 by rpki-client