Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ei4TUh6yfq5wpZBaDqEhSdx9MkdnHHavmV8TxwR759nR/0/323830343a343064633a383030303a3a2f33342d3334203d3e20323635393836.roa
File:                     323830343a343064633a383030303a3a2f33342d3334203d3e20323635393836.roa (raw, json)
Hash identifier:          +UJueSGV9A1DbtBxvhwYWaMp1E1oynNVlodAvFOJzXE=
Subject key identifier:   1B:EB:DE:2F:0C:0C:33:79:B3:F9:6E:03:1F:21:D6:38:7B:5C:FE:AF
Certificate issuer:       /CN=200D6A4F731D3AA371C0F0BED5EA7D32A5998642
Certificate serial:       787BD991D00D16C9AF97ADB9F2622C5E19F7DF11
Authority key identifier: 20:0D:6A:4F:73:1D:3A:A3:71:C0:F0:BE:D5:EA:7D:32:A5:99:86:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/200D6A4F731D3AA371C0F0BED5EA7D32A5998642.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ei4TUh6yfq5wpZBaDqEhSdx9MkdnHHavmV8TxwR759nR/0/323830343a343064633a383030303a3a2f33342d3334203d3e20323635393836.roa
Signing time:             Tue 11 Feb 2025 18:28:10 +0000
ROA not before:           Tue 11 Feb 2025 18:23:10 +0000
ROA not after:            Tue 10 Feb 2026 18:28:10 +0000
asID:                     265986
IP address blocks:        2804:40dc:8000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:7b:d9:91:d0:0d:16:c9:af:97:ad:b9:f2:62:2c:5e:19:f7:df:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=200D6A4F731D3AA371C0F0BED5EA7D32A5998642
        Validity
            Not Before: Feb 11 18:23:10 2025 GMT
            Not After : Feb 10 18:28:10 2026 GMT
        Subject: CN=1BEBDE2F0C0C3379B3F96E031F21D6387B5CFEAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c5:c7:78:01:4f:ff:fa:27:fa:0d:d5:d8:e0:
                    d4:20:45:39:f8:db:48:4d:76:e6:7f:2a:d2:4c:f4:
                    ce:72:0b:14:5a:bf:e1:87:8d:3b:13:6f:2d:15:ab:
                    ce:79:fc:14:fb:17:bb:19:c5:8a:4b:a8:b0:7e:1e:
                    c9:fd:7a:47:c2:40:57:87:11:c1:d2:83:f4:a5:b6:
                    d0:59:8c:73:13:44:14:56:aa:3a:15:dd:f2:2f:81:
                    af:a5:d8:c5:d2:7b:3e:54:95:95:2d:9d:a1:11:57:
                    21:f9:f2:2d:6a:20:3d:06:e6:86:62:02:5f:2a:0b:
                    b0:2c:29:73:2a:69:a4:5f:e6:de:9a:3a:47:17:fb:
                    d1:85:4a:f7:24:9b:8e:95:26:0d:4f:8f:cf:42:e9:
                    7a:8c:5b:7d:93:f1:4d:28:19:bb:a7:64:1a:5f:99:
                    9c:1a:f9:6d:a9:b7:ca:fd:8b:b9:a7:e3:6a:22:8f:
                    ee:6e:77:7e:b7:a2:b7:6f:ec:a2:67:4c:d9:59:3b:
                    0b:13:52:00:ff:97:50:16:1f:a9:a9:b2:3d:5c:fa:
                    46:ce:ee:a2:4c:5a:45:3d:a3:e9:88:f0:59:e3:cb:
                    b5:ae:95:0e:fa:20:07:22:c5:e0:5e:e5:2c:20:0d:
                    57:77:92:91:3c:2d:f6:27:9d:99:aa:54:b8:77:f7:
                    d1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:EB:DE:2F:0C:0C:33:79:B3:F9:6E:03:1F:21:D6:38:7B:5C:FE:AF
            X509v3 Authority Key Identifier:
                keyid:20:0D:6A:4F:73:1D:3A:A3:71:C0:F0:BE:D5:EA:7D:32:A5:99:86:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ei4TUh6yfq5wpZBaDqEhSdx9MkdnHHavmV8TxwR759nR/0/200D6A4F731D3AA371C0F0BED5EA7D32A5998642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/200D6A4F731D3AA371C0F0BED5EA7D32A5998642.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ei4TUh6yfq5wpZBaDqEhSdx9MkdnHHavmV8TxwR759nR/0/323830343a343064633a383030303a3a2f33342d3334203d3e20323635393836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:40dc:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         75:43:d1:59:d5:1c:1c:a8:18:60:e3:42:c1:a2:48:e3:7b:74:
         70:91:d2:67:88:37:70:0a:77:7e:82:4c:42:aa:25:90:ce:50:
         8e:67:ce:98:0a:57:c9:73:95:fd:81:60:a8:fe:3e:c5:c4:3a:
         2a:3b:6d:ad:66:ad:3a:ae:cd:8e:27:c2:62:6b:7f:00:48:e5:
         03:eb:7b:8d:0e:1d:da:69:0c:6a:4e:f4:62:97:51:79:e6:df:
         a3:de:7d:8b:09:c7:7b:d7:cc:81:7a:a4:d1:c0:28:47:13:1e:
         72:5d:50:be:22:3a:82:6d:c8:7b:b0:24:51:21:68:bb:bd:86:
         cb:2f:bf:59:ea:db:5e:8c:63:f9:87:85:f7:3d:fd:57:2d:ec:
         e1:f6:95:9c:5a:1c:fe:3c:a2:b3:89:d5:e3:29:d5:e5:04:60:
         0c:14:ac:67:94:38:f0:17:55:a5:50:ff:1f:65:a2:73:6d:07:
         71:fc:df:95:4f:53:15:41:7d:c7:97:7d:41:7e:34:9f:eb:d8:
         a7:1c:0f:38:d2:e3:b9:25:55:17:54:a2:36:d9:7d:f3:20:b7:
         41:69:b0:63:51:b3:89:d9:fe:d6:d8:3e:06:d1:a2:ff:7a:6f:
         4c:c8:c2:ac:f2:b7:34:b3:3e:15:78:a4:b1:11:7d:c3:cf:44:
         18:f6:d0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:23:13 2025 by rpki-client