Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ENAsAeBvqssLvgXkM9jr3zTTCTysa5voNYz4bu4Vtmbj/0/323830343a383265383a3a2f33322d3332203d3e20323732313634.roa
File:                     323830343a383265383a3a2f33322d3332203d3e20323732313634.roa (raw, json)
Hash identifier:          e+ZeRTvAiqLdD/gv3WWdsCHD8YmXgoqlzyzNii9UT1s=
Subject key identifier:   60:0D:5A:76:8A:13:38:54:15:47:0B:69:DE:50:49:7A:26:4B:06:37
Certificate issuer:       /CN=999BAB4331AD91DD7B08643BF9CAB750C9C37E76
Certificate serial:       224C9CCF97C1B7109383DB08F1D8D5739512EF36
Authority key identifier: 99:9B:AB:43:31:AD:91:DD:7B:08:64:3B:F9:CA:B7:50:C9:C3:7E:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/999BAB4331AD91DD7B08643BF9CAB750C9C37E76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ENAsAeBvqssLvgXkM9jr3zTTCTysa5voNYz4bu4Vtmbj/0/323830343a383265383a3a2f33322d3332203d3e20323732313634.roa
Signing time:             Fri 31 Jan 2025 18:37:52 +0000
ROA not before:           Fri 31 Jan 2025 18:32:52 +0000
ROA not after:            Fri 30 Jan 2026 18:37:52 +0000
asID:                     272164
IP address blocks:        2804:82e8::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:4c:9c:cf:97:c1:b7:10:93:83:db:08:f1:d8:d5:73:95:12:ef:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=999BAB4331AD91DD7B08643BF9CAB750C9C37E76
        Validity
            Not Before: Jan 31 18:32:52 2025 GMT
            Not After : Jan 30 18:37:52 2026 GMT
        Subject: CN=600D5A768A13385415470B69DE50497A264B0637
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:8f:0b:07:70:f6:86:ce:a7:34:66:09:8c:c0:
                    a5:8e:3f:5e:61:04:23:18:bd:fa:53:b4:fc:e6:e3:
                    f1:de:54:93:80:41:10:77:01:42:d4:cc:ed:fa:45:
                    54:05:fb:1c:0e:e7:d8:e9:12:f2:09:ad:ce:a8:5f:
                    e6:43:df:d9:00:ce:81:d1:62:47:ca:e2:d2:98:0b:
                    f3:84:40:5b:3f:78:af:15:c0:f4:1e:ea:d0:fb:83:
                    53:6e:79:5c:93:f8:f6:bc:9b:40:5b:e6:68:1e:69:
                    86:21:c4:0f:49:25:d9:a1:fe:8e:e7:d7:67:f3:a1:
                    5d:97:7c:a4:b6:a9:bf:a3:c1:12:d2:4f:a3:0f:b3:
                    6e:36:89:67:3d:44:dc:75:ef:7b:1d:d1:62:a7:71:
                    75:f2:e6:d2:c9:b3:97:e4:9a:1d:ae:ee:12:fe:72:
                    a5:0f:f8:93:6b:bb:09:e2:a9:8e:ff:a6:84:46:a1:
                    2a:db:17:1c:cd:8c:b7:e9:97:08:0d:71:cc:7a:a6:
                    ad:b9:b9:5a:74:7c:25:6b:71:fa:bd:68:86:ae:96:
                    73:66:aa:7f:e9:2a:e5:85:f0:c0:1a:57:e9:f8:27:
                    c7:15:d4:34:af:c3:7a:61:24:dc:0b:08:99:c8:55:
                    d8:e0:fa:ac:fe:b5:a8:f0:50:f0:c0:5c:a0:b4:21:
                    c5:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:0D:5A:76:8A:13:38:54:15:47:0B:69:DE:50:49:7A:26:4B:06:37
            X509v3 Authority Key Identifier:
                keyid:99:9B:AB:43:31:AD:91:DD:7B:08:64:3B:F9:CA:B7:50:C9:C3:7E:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ENAsAeBvqssLvgXkM9jr3zTTCTysa5voNYz4bu4Vtmbj/0/999BAB4331AD91DD7B08643BF9CAB750C9C37E76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/999BAB4331AD91DD7B08643BF9CAB750C9C37E76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ENAsAeBvqssLvgXkM9jr3zTTCTysa5voNYz4bu4Vtmbj/0/323830343a383265383a3a2f33322d3332203d3e20323732313634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:82e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         b9:b3:de:f7:ff:ca:da:9e:38:53:3f:34:e9:e8:09:01:f0:37:
         dc:93:b8:db:b5:07:7d:59:ea:cd:1e:ba:86:1b:76:e1:ad:00:
         ee:8c:00:0e:92:51:54:c1:38:b6:6e:68:ef:82:bc:1b:b7:fe:
         50:10:00:5c:f5:7a:8a:2d:68:85:e3:a9:72:a0:99:5a:66:9d:
         ea:f8:d1:c2:e7:3e:80:56:36:b7:e0:45:8f:6c:88:2d:a2:45:
         94:c7:b7:aa:a4:10:6e:65:05:79:4f:90:a9:3b:16:15:d2:e8:
         f3:d4:70:59:9e:d1:e5:3e:c8:3f:42:7d:0f:f6:81:be:b3:ca:
         ab:15:1d:92:06:68:45:ef:86:dd:80:31:d3:96:e0:1a:5f:4b:
         3d:30:f1:18:ec:e8:96:43:81:a5:38:0a:e9:80:a4:a4:c9:32:
         ee:f1:a2:85:b8:81:48:ed:72:08:76:71:ad:2f:a8:12:fe:06:
         b0:45:3d:f8:53:84:29:fd:f1:99:89:e1:b1:3e:8d:fa:85:64:
         4f:c5:35:5b:65:09:d3:e1:e9:f6:e9:6b:c9:36:02:60:2a:ea:
         b6:2f:a3:eb:44:67:05:22:24:dc:7e:e8:cc:b4:fb:af:08:8a:
         63:1f:3e:34:e9:34:0e:c9:5b:20:f9:c7:40:0f:3a:b8:6d:da:
         ed:1e:9d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:29:17 2025 by rpki-client