Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/323830343a333465303a633030303a3a2f33342d313238203d3e20323635343836.roa
File:                     323830343a333465303a633030303a3a2f33342d313238203d3e20323635343836.roa (raw, json)
Hash identifier:          DDRvSTmkh4ukAhgSidSG/++46zCK4kqL3BElI1tbqdA=
Subject key identifier:   76:68:A5:14:99:AE:17:22:52:F7:2A:D8:E4:47:54:98:ED:DA:90:23
Certificate issuer:       /CN=27632DA3487449475BFE4ADEE3C17ADDED4EC60F
Certificate serial:       18C56F734C994106E1E559DEFF530D81F04B9DE5
Authority key identifier: 27:63:2D:A3:48:74:49:47:5B:FE:4A:DE:E3:C1:7A:DD:ED:4E:C6:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27632DA3487449475BFE4ADEE3C17ADDED4EC60F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/323830343a333465303a633030303a3a2f33342d313238203d3e20323635343836.roa
Signing time:             Thu 09 Jan 2025 22:19:31 +0000
ROA not before:           Thu 09 Jan 2025 22:14:31 +0000
ROA not after:            Thu 08 Jan 2026 22:19:31 +0000
asID:                     265486
IP address blocks:        2804:34e0:c000::/34 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:c5:6f:73:4c:99:41:06:e1:e5:59:de:ff:53:0d:81:f0:4b:9d:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27632DA3487449475BFE4ADEE3C17ADDED4EC60F
        Validity
            Not Before: Jan  9 22:14:31 2025 GMT
            Not After : Jan  8 22:19:31 2026 GMT
        Subject: CN=7668A51499AE172252F72AD8E4475498EDDA9023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:89:17:28:62:49:ad:a9:b3:d3:8f:52:e1:33:
                    16:30:5d:7d:2f:9d:39:94:ab:dd:8b:bd:75:72:a6:
                    86:43:3e:c8:86:f7:ad:10:14:74:85:5c:5b:90:cc:
                    ea:ba:16:ae:2e:f0:75:eb:33:ab:90:e9:fd:85:e2:
                    f0:4c:5a:45:15:30:5d:cf:d3:a0:39:e3:df:59:81:
                    5d:bd:78:26:20:ef:2f:6f:19:0e:32:46:a7:d7:9e:
                    56:80:de:e4:38:9c:d2:9c:40:3e:f2:49:3a:03:28:
                    64:bb:6d:a1:80:65:9f:87:6f:3d:1a:c2:d0:ef:15:
                    6e:26:e2:ac:86:ae:e5:5d:3a:1d:00:59:7f:14:1b:
                    98:4b:28:be:82:4a:39:31:20:e3:bd:d3:83:9f:18:
                    93:9c:da:a3:91:a5:c8:2d:af:a7:4d:57:e2:c1:44:
                    d0:be:5c:66:dd:25:08:28:b0:d7:4a:e6:cd:1d:d1:
                    e4:c2:bd:26:62:5c:e2:ce:48:db:96:1c:62:3b:3a:
                    44:93:07:5e:c9:56:6d:b5:61:f7:f9:42:a6:a0:e6:
                    50:a9:e6:bb:f9:22:fa:34:01:e2:b2:22:b0:f4:9c:
                    19:86:0b:f1:34:17:9b:b6:29:f7:92:12:37:6a:18:
                    64:7b:af:ab:f0:3e:e0:de:d2:53:e1:3a:94:41:40:
                    27:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:68:A5:14:99:AE:17:22:52:F7:2A:D8:E4:47:54:98:ED:DA:90:23
            X509v3 Authority Key Identifier:
                keyid:27:63:2D:A3:48:74:49:47:5B:FE:4A:DE:E3:C1:7A:DD:ED:4E:C6:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/27632DA3487449475BFE4ADEE3C17ADDED4EC60F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27632DA3487449475BFE4ADEE3C17ADDED4EC60F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/323830343a333465303a633030303a3a2f33342d313238203d3e20323635343836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:34e0:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         9e:d0:aa:a5:94:d6:af:2d:72:a5:8c:d3:fd:3f:9d:ef:c9:9c:
         8d:d0:0e:77:cb:f9:82:5d:09:b2:cf:ed:2d:38:4b:fb:cd:cd:
         dd:b3:f2:05:09:32:92:8c:7f:c6:fc:85:0d:f3:74:49:3e:07:
         ec:a9:4d:7f:c0:82:32:e7:07:cd:1d:60:c4:04:8f:57:63:f1:
         c1:a6:a5:1c:88:22:3f:ed:bb:ab:9f:b8:64:2e:00:28:79:b0:
         f9:cc:77:af:f9:78:4f:13:c4:c3:45:42:76:c9:30:d7:d8:14:
         cc:9e:d3:ad:49:c6:cd:8c:cd:70:e0:b1:6c:a2:c0:a0:17:dd:
         0f:55:2c:21:9b:80:4d:f0:1b:3c:c2:81:b8:25:d5:5b:6a:fa:
         96:9d:a3:39:e1:c8:0f:6d:61:2d:75:fc:2a:e1:68:b9:6a:59:
         36:67:31:a4:5f:cb:3f:ae:92:d5:e3:91:4d:fc:d0:24:5b:34:
         8d:e9:37:24:a7:84:34:b6:dc:4d:12:0c:07:e8:19:5b:54:bd:
         79:d8:7e:94:40:4c:63:7c:b7:df:f2:cc:b3:f1:c2:6c:2c:c1:
         e8:f6:10:c6:57:49:df:c0:1f:84:7d:c6:0b:2b:0c:a7:57:58:
         0f:5b:62:fb:e4:58:2f:a2:92:73:37:42:3a:10:c5:06:4d:a9:
         89:41:bf:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:05:13 2025 by rpki-client