Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ENj9YHJgPQp4adH7iZ68zZKzFq3ZHamTvVu6xFBbqPvE/0/323830343a343331383a3230303a3a2f34302d3430203d3e20323637353438.roa
File:                     323830343a343331383a3230303a3a2f34302d3430203d3e20323637353438.roa (raw, json)
Hash identifier:          aHvqoUPoSBXPR1zKjXWvYOWZPlQa5May+pxH5QFbENI=
Subject key identifier:   09:72:72:EA:B4:B4:CC:81:ED:07:3E:F9:D3:AA:05:72:9C:87:7A:41
Certificate issuer:       /CN=E36722E12D3D74530F7B920A984B1FD5187151B6
Certificate serial:       6512F69B0BB4895B2B3C48F5DC618B103137B296
Authority key identifier: E3:67:22:E1:2D:3D:74:53:0F:7B:92:0A:98:4B:1F:D5:18:71:51:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E36722E12D3D74530F7B920A984B1FD5187151B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ENj9YHJgPQp4adH7iZ68zZKzFq3ZHamTvVu6xFBbqPvE/0/323830343a343331383a3230303a3a2f34302d3430203d3e20323637353438.roa
Signing time:             Thu 27 Feb 2025 16:16:23 +0000
ROA not before:           Thu 27 Feb 2025 16:11:23 +0000
ROA not after:            Thu 26 Feb 2026 16:16:23 +0000
asID:                     267548
IP address blocks:        2804:4318:200::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:12:f6:9b:0b:b4:89:5b:2b:3c:48:f5:dc:61:8b:10:31:37:b2:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E36722E12D3D74530F7B920A984B1FD5187151B6
        Validity
            Not Before: Feb 27 16:11:23 2025 GMT
            Not After : Feb 26 16:16:23 2026 GMT
        Subject: CN=097272EAB4B4CC81ED073EF9D3AA05729C877A41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:2b:29:e3:73:57:1a:34:b3:70:8b:33:3f:99:
                    6c:3e:20:c8:4b:68:7d:3d:a5:a9:12:13:3c:fb:1f:
                    d4:6e:f4:f2:2f:49:2c:ae:d7:b5:a3:e0:07:d3:79:
                    e8:4f:39:9d:c5:90:b4:69:66:fd:a2:14:4f:85:3e:
                    90:2b:59:2c:c8:a2:e2:b1:09:4f:3e:d0:27:84:72:
                    92:2d:54:79:b2:ed:53:6f:85:57:b0:eb:b2:f8:f8:
                    65:0d:85:3e:dd:f2:ff:02:52:d5:ea:e7:1f:b6:03:
                    e8:c0:1d:86:53:0b:61:8b:51:61:52:4d:fd:0a:da:
                    e9:af:bd:c9:ec:80:b6:5a:54:33:e6:90:2e:68:e1:
                    60:0a:ff:52:62:81:43:6f:2e:57:e9:63:93:6d:70:
                    64:4e:47:5e:d0:d5:0e:2c:6b:28:5a:b1:b0:af:a8:
                    0a:be:54:ca:ef:c2:27:74:f0:3c:2a:a1:e3:36:8d:
                    bc:1c:ed:c7:dc:5a:26:b0:b1:7c:96:8e:e2:d6:97:
                    34:da:c7:5c:c4:46:d7:54:99:7b:90:cf:8a:d1:c0:
                    08:e3:b2:e1:ba:d6:7d:94:5c:a4:3c:6c:5d:ea:86:
                    9f:79:83:7f:93:c4:0b:79:fa:67:22:d3:54:64:05:
                    76:29:d2:7b:79:70:3a:59:4e:45:b4:46:f5:53:af:
                    88:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:72:72:EA:B4:B4:CC:81:ED:07:3E:F9:D3:AA:05:72:9C:87:7A:41
            X509v3 Authority Key Identifier:
                keyid:E3:67:22:E1:2D:3D:74:53:0F:7B:92:0A:98:4B:1F:D5:18:71:51:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ENj9YHJgPQp4adH7iZ68zZKzFq3ZHamTvVu6xFBbqPvE/0/E36722E12D3D74530F7B920A984B1FD5187151B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E36722E12D3D74530F7B920A984B1FD5187151B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ENj9YHJgPQp4adH7iZ68zZKzFq3ZHamTvVu6xFBbqPvE/0/323830343a343331383a3230303a3a2f34302d3430203d3e20323637353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4318:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         87:07:9b:4c:f9:39:3d:49:89:13:e4:1f:ee:7a:d3:36:69:e9:
         21:08:8b:e0:5a:d9:1d:28:8b:a0:67:de:af:da:e6:46:15:c3:
         bb:81:f2:2e:0b:d6:d9:67:ae:ba:91:c6:5c:ab:2f:23:9e:ae:
         83:ea:96:b3:c1:7c:f5:c1:ee:9f:df:91:2f:8e:bb:c1:f8:fb:
         cd:16:53:75:14:cd:f2:98:94:54:5c:95:bd:f8:21:24:e4:30:
         62:40:3d:c6:a9:92:a5:d2:ff:4f:8c:28:4d:af:4e:b7:b9:26:
         a9:3e:e7:d5:95:11:66:2c:ea:51:5f:1a:bf:fe:4b:54:f1:84:
         3d:ec:99:8b:3a:ee:4f:40:ec:a7:85:56:63:5b:22:d8:48:5b:
         69:5f:61:49:f5:19:71:60:62:45:f5:c4:a5:e5:91:5f:cd:9d:
         3d:41:40:be:e3:ae:8c:68:a4:a4:34:31:a1:7d:af:70:43:50:
         91:58:ad:6c:0e:71:9f:1f:aa:3b:5d:f4:95:d5:6c:e0:6f:e2:
         16:b0:02:6e:9c:94:ce:dd:db:13:7d:34:9b:99:d5:29:ec:75:
         5f:98:02:48:72:36:1c:78:c6:41:90:15:7d:d8:89:93:41:cb:
         6e:dd:45:d9:5d:ea:86:4b:da:29:bb:f2:36:05:62:2b:8f:90:
         0b:60:c0:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 08:11:27 2025 by rpki-client