Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/323830343a313132383a3a2f33322d313238203d3e20323633363631.roa
File:                     323830343a313132383a3a2f33322d313238203d3e20323633363631.roa (raw, json)
Hash identifier:          HwPBtqW5vhEBd8koAzFK9LedqHixBcZSsXLmwZ7Cp68=
Subject key identifier:   46:43:E1:33:08:90:1B:61:6C:27:DB:62:ED:01:46:21:1B:31:6A:19
Certificate issuer:       /CN=8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65
Certificate serial:       2B4E05AD7BD13E7B36E923F6472DE63E5F8764D0
Authority key identifier: 8E:82:2B:DA:67:B7:20:70:9C:3F:DC:0A:A1:CE:0B:9C:53:7F:2A:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/323830343a313132383a3a2f33322d313238203d3e20323633363631.roa
Signing time:             Mon 24 Feb 2025 14:54:36 +0000
ROA not before:           Mon 24 Feb 2025 14:49:36 +0000
ROA not after:            Mon 23 Feb 2026 14:54:36 +0000
asID:                     263661
IP address blocks:        2804:1128::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:4e:05:ad:7b:d1:3e:7b:36:e9:23:f6:47:2d:e6:3e:5f:87:64:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65
        Validity
            Not Before: Feb 24 14:49:36 2025 GMT
            Not After : Feb 23 14:54:36 2026 GMT
        Subject: CN=4643E13308901B616C27DB62ED0146211B316A19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c1:e8:8e:2c:a9:92:fa:fc:79:f0:84:20:3a:
                    3c:dc:cd:35:38:60:c7:9b:96:7d:2e:e3:e4:f8:6e:
                    38:88:fe:a3:fd:2d:30:ee:dd:7e:87:b9:f0:5e:fa:
                    23:d2:84:66:23:dc:40:85:a6:4f:82:63:2c:74:ec:
                    67:ae:06:bc:70:bd:70:c0:03:cd:4e:f0:7f:63:e4:
                    78:4f:9f:ef:a1:f9:c7:21:3b:55:5b:08:44:82:78:
                    28:78:ff:d4:82:76:61:53:3f:d9:6c:12:eb:2a:b6:
                    da:9f:cc:00:62:b4:bf:b7:fa:7d:11:12:6c:6a:e1:
                    e9:07:89:fa:68:6a:73:32:76:27:82:2e:a1:4a:aa:
                    12:b3:3c:86:58:8d:34:32:ee:d8:4f:a7:21:88:e5:
                    44:b7:7f:3b:fe:9b:d6:d7:3b:10:15:72:89:56:d8:
                    e5:ae:84:96:f8:76:36:33:3f:a1:85:98:42:85:9f:
                    eb:1a:10:90:5b:b7:88:9a:3f:0c:4d:42:91:88:e4:
                    2d:48:4b:f7:ed:f3:5e:ee:3d:03:41:38:e6:da:27:
                    cc:16:a0:f0:16:89:b1:46:9b:bf:f6:77:5e:0c:de:
                    e1:ff:2a:91:a9:d0:f4:d3:79:8b:e3:20:15:a7:e2:
                    9f:46:7c:1f:83:ab:b3:50:c0:80:88:72:b3:f8:9d:
                    36:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:43:E1:33:08:90:1B:61:6C:27:DB:62:ED:01:46:21:1B:31:6A:19
            X509v3 Authority Key Identifier:
                keyid:8E:82:2B:DA:67:B7:20:70:9C:3F:DC:0A:A1:CE:0B:9C:53:7F:2A:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/323830343a313132383a3a2f33322d313238203d3e20323633363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1128::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:7e:19:b0:dc:af:64:be:d5:b7:8a:77:64:82:37:e3:83:30:
         4d:74:0a:13:e5:22:a4:0a:b3:d6:70:f4:3f:03:f7:04:c6:2a:
         75:8d:78:9a:ca:ac:4c:a7:58:bc:c8:ec:f7:14:7d:c2:e9:5f:
         5f:17:97:f0:7e:e8:9d:9c:b9:f5:5e:ad:48:27:e2:66:cf:83:
         65:43:75:29:6c:5c:24:ff:dd:0f:f4:e5:f1:29:f6:50:54:26:
         21:7a:86:f1:68:95:50:eb:0e:91:57:6c:6f:ea:14:d5:33:f0:
         9b:af:b1:b6:30:8d:bc:97:75:b4:19:b0:ac:93:c0:e4:b2:ce:
         b3:99:fe:ba:76:a7:e9:70:8c:8c:5e:a6:05:02:90:6c:29:a0:
         9f:25:fd:3b:f4:62:01:31:c7:d6:7b:7b:4a:00:dc:54:a8:7c:
         5d:2b:10:ae:2d:90:51:c9:f9:95:8c:6c:de:17:25:23:5c:4f:
         a5:ee:0c:eb:13:43:f0:7d:76:36:a2:97:51:56:be:ac:74:2d:
         a1:d8:8d:c4:00:bc:d0:39:b4:4f:01:66:21:34:4b:05:7c:5b:
         88:c0:00:cc:78:92:8d:f0:a7:05:a9:88:50:e6:2b:11:28:b9:
         58:d5:3b:ad:44:7d:3b:4b:9f:73:bd:83:5f:80:3f:e3:50:ab:
         fd:57:4e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:10:37 2025 by rpki-client