Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/323830343a336461633a3130303a3a2f34302d3430203d3e20323636353436.roa
File:                     323830343a336461633a3130303a3a2f34302d3430203d3e20323636353436.roa (raw, json)
Hash identifier:          gWndqDf/KjLw2qVw3t8sxy0AXuV/rGY0gtWagTvEZGg=
Subject key identifier:   76:D0:7D:C0:AA:14:5E:42:3B:56:E6:A9:39:10:EF:A8:44:93:4E:82
Certificate issuer:       /CN=A780A1AD6EBBB6D78B2FF5DADD9A31707A4BEE8A
Certificate serial:       647BEE5F9A116E3F72E1E080D4E62383B7A93712
Authority key identifier: A7:80:A1:AD:6E:BB:B6:D7:8B:2F:F5:DA:DD:9A:31:70:7A:4B:EE:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A780A1AD6EBBB6D78B2FF5DADD9A31707A4BEE8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/323830343a336461633a3130303a3a2f34302d3430203d3e20323636353436.roa
Signing time:             Tue 18 Mar 2025 20:06:34 +0000
ROA not before:           Tue 18 Mar 2025 20:01:34 +0000
ROA not after:            Tue 17 Mar 2026 20:06:34 +0000
asID:                     266546
IP address blocks:        2804:3dac:100::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:7b:ee:5f:9a:11:6e:3f:72:e1:e0:80:d4:e6:23:83:b7:a9:37:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A780A1AD6EBBB6D78B2FF5DADD9A31707A4BEE8A
        Validity
            Not Before: Mar 18 20:01:34 2025 GMT
            Not After : Mar 17 20:06:34 2026 GMT
        Subject: CN=76D07DC0AA145E423B56E6A93910EFA844934E82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:93:b4:c0:32:c8:89:5e:f1:48:85:2a:98:84:
                    c1:8d:a3:d8:2f:f8:dd:99:30:a6:c8:78:3a:17:cd:
                    60:4f:5c:88:17:c1:59:73:3e:ec:c8:40:bf:94:3a:
                    22:99:eb:cd:8b:2f:f3:d3:3b:28:ae:16:84:48:0c:
                    3e:c9:83:7c:cc:a1:26:a3:d7:9e:d5:74:1e:84:52:
                    7a:fb:c5:c2:4d:99:3c:f5:bf:9b:83:0b:a4:02:5c:
                    a3:f2:02:b3:51:e4:4c:13:9c:29:cc:b5:a9:f7:da:
                    89:29:f4:73:31:d3:72:12:6a:10:c8:1f:45:38:9f:
                    b2:b3:25:94:34:d2:3f:11:82:b8:ad:6c:27:81:34:
                    ef:f7:63:0e:16:6f:80:16:13:1e:20:85:aa:0a:17:
                    e2:c2:77:84:83:3c:e6:14:94:c9:4c:82:57:d4:7d:
                    a3:4c:13:ba:fd:d5:19:31:9e:db:73:d1:92:15:e8:
                    25:26:4b:80:44:01:4d:6a:f9:27:e6:62:e3:a5:2f:
                    77:16:a4:5e:59:da:6a:20:1c:5c:1b:df:cf:40:a8:
                    61:f0:ed:1f:32:68:0d:82:83:1f:6b:d3:5c:6c:59:
                    37:f3:a9:02:39:67:2c:1e:0d:1e:d5:bd:36:42:58:
                    b5:d3:47:34:e1:bb:78:0c:e3:00:10:d6:b3:02:07:
                    ee:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:D0:7D:C0:AA:14:5E:42:3B:56:E6:A9:39:10:EF:A8:44:93:4E:82
            X509v3 Authority Key Identifier:
                keyid:A7:80:A1:AD:6E:BB:B6:D7:8B:2F:F5:DA:DD:9A:31:70:7A:4B:EE:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/A780A1AD6EBBB6D78B2FF5DADD9A31707A4BEE8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A780A1AD6EBBB6D78B2FF5DADD9A31707A4BEE8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/323830343a336461633a3130303a3a2f34302d3430203d3e20323636353436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3dac:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         7a:c4:07:f4:e9:d6:64:2c:75:fc:0b:26:64:e5:71:0f:28:df:
         05:cd:a0:30:8b:dc:99:9e:f2:cc:1e:c2:69:4b:17:71:7a:11:
         05:08:e8:51:d4:7d:4e:fc:08:19:36:05:a0:e4:c9:87:04:33:
         af:e3:3c:97:c8:32:96:1a:6a:f7:d2:98:cb:86:4a:84:7e:ce:
         2d:ff:fe:f2:d7:e4:8d:cb:d6:29:82:0c:3a:95:70:57:9b:a7:
         a4:d5:86:da:b3:df:9c:37:da:6a:b5:be:b1:7c:d1:6e:8e:dc:
         23:c1:06:69:1b:15:4a:ce:86:fc:9d:a8:1d:91:44:ce:b7:5b:
         b3:af:b6:c6:9b:08:7c:11:37:07:1e:33:b7:54:1e:c4:61:e5:
         a0:a3:b1:c6:31:42:69:f3:c9:2b:5e:c0:4c:2c:17:a2:cc:6f:
         45:23:2f:1d:88:bc:43:c3:d2:3b:26:52:04:91:cd:dd:1b:c2:
         77:e7:d7:9a:99:bd:04:14:91:3b:80:c5:ff:c5:ab:c0:9f:fe:
         b8:5b:c8:59:1f:1f:be:4e:4a:3d:43:64:07:3a:8e:a5:e5:4c:
         b3:b9:7b:82:cd:7d:c4:9e:0a:4b:10:d0:d6:75:25:c7:f7:4f:
         00:77:29:18:20:71:c2:91:61:20:f5:04:34:40:c4:ee:7e:89:
         2a:8e:c7:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:23:43 2025 by rpki-client