Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EiQunpdw1DDUQ5HVJVLbGFnxusZ8ThJaFSGvP6sp2J99/1/323830343a326438303a3a2f33322d3438203d3e20323632333738.roa
File:                     323830343a326438303a3a2f33322d3438203d3e20323632333738.roa (raw, json)
Hash identifier:          dA6Vai2Ay51ihnh9aF4He2B33POVvAOdYfL9/2xS2S8=
Subject key identifier:   54:F2:8D:0A:8A:F0:52:AE:89:DC:B6:4F:DD:3F:65:FA:F7:04:6D:F2
Certificate issuer:       /CN=12C3FEB9DEC6176EE5952F85CAF7A44B3F63F3CA
Certificate serial:       256204BBFA0A3170A42510AA1232B0C5396E43D7
Authority key identifier: 12:C3:FE:B9:DE:C6:17:6E:E5:95:2F:85:CA:F7:A4:4B:3F:63:F3:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12C3FEB9DEC6176EE5952F85CAF7A44B3F63F3CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EiQunpdw1DDUQ5HVJVLbGFnxusZ8ThJaFSGvP6sp2J99/1/323830343a326438303a3a2f33322d3438203d3e20323632333738.roa
Signing time:             Thu 06 Mar 2025 20:06:07 +0000
ROA not before:           Thu 06 Mar 2025 20:01:07 +0000
ROA not after:            Thu 05 Mar 2026 20:06:07 +0000
asID:                     262378
IP address blocks:        2804:2d80::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:62:04:bb:fa:0a:31:70:a4:25:10:aa:12:32:b0:c5:39:6e:43:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12C3FEB9DEC6176EE5952F85CAF7A44B3F63F3CA
        Validity
            Not Before: Mar  6 20:01:07 2025 GMT
            Not After : Mar  5 20:06:07 2026 GMT
        Subject: CN=54F28D0A8AF052AE89DCB64FDD3F65FAF7046DF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e4:8c:ed:0a:6f:3a:ff:d1:e5:32:3c:21:de:
                    c4:ae:61:3d:ec:29:f8:c1:f9:03:a3:29:f7:24:eb:
                    e6:ce:18:45:04:f7:69:d8:71:99:b5:10:ba:e0:f5:
                    0e:be:4d:47:0c:ef:f5:f5:d8:36:54:90:56:6d:4d:
                    ea:76:46:39:77:80:76:f3:34:95:85:7f:27:ab:85:
                    f9:43:da:3b:86:9a:da:aa:25:91:75:66:30:9b:6c:
                    d2:c3:ce:bc:18:3e:a3:ce:f7:45:7d:33:a1:cb:96:
                    b2:94:9e:f7:b6:dd:63:ca:44:92:f2:e5:ee:74:05:
                    8e:20:a6:d5:ec:e5:12:e9:59:b8:eb:4d:2c:0e:08:
                    20:50:83:c0:1c:64:ea:2c:3a:55:68:7a:b1:14:fd:
                    9c:e5:81:66:43:fa:cb:ce:dc:9a:cb:f9:28:63:9a:
                    13:17:ce:66:8d:9a:4a:38:55:f0:52:34:46:97:6c:
                    99:26:88:4d:a7:94:ff:22:05:58:b5:a1:2a:52:a7:
                    f2:73:c3:65:02:80:ef:c9:5e:d3:f1:c7:f4:c0:e6:
                    7c:8d:17:81:14:15:e6:c7:47:e7:77:52:ea:ae:79:
                    94:c3:35:b2:bf:2b:15:68:c3:64:a1:ba:c0:58:ef:
                    bf:3c:a9:00:02:58:ec:25:4a:e0:14:14:e8:44:44:
                    28:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:F2:8D:0A:8A:F0:52:AE:89:DC:B6:4F:DD:3F:65:FA:F7:04:6D:F2
            X509v3 Authority Key Identifier:
                keyid:12:C3:FE:B9:DE:C6:17:6E:E5:95:2F:85:CA:F7:A4:4B:3F:63:F3:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EiQunpdw1DDUQ5HVJVLbGFnxusZ8ThJaFSGvP6sp2J99/1/12C3FEB9DEC6176EE5952F85CAF7A44B3F63F3CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12C3FEB9DEC6176EE5952F85CAF7A44B3F63F3CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EiQunpdw1DDUQ5HVJVLbGFnxusZ8ThJaFSGvP6sp2J99/1/323830343a326438303a3a2f33322d3438203d3e20323632333738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2d80::/32

    Signature Algorithm: sha256WithRSAEncryption
         cc:93:56:36:20:4c:35:ab:6d:8a:58:11:df:ae:47:d9:da:dc:
         bb:e9:87:17:8b:9c:bc:cc:ff:d7:0e:4b:dd:b1:18:45:15:91:
         0d:ed:c8:92:f7:a8:53:37:82:7f:e5:4f:17:ca:b4:1d:54:7e:
         f8:c3:b2:24:e4:aa:ce:af:e1:7b:ad:cd:0b:25:f5:62:2a:26:
         92:c4:99:78:b4:b3:d1:06:97:f0:f2:3b:a2:8f:dc:7b:3c:83:
         3d:de:2a:f2:65:8c:ca:77:6d:2c:2c:f0:79:59:8a:3b:aa:b9:
         65:5f:09:92:58:97:3e:7c:12:34:2d:67:13:a1:2f:32:62:ce:
         a6:4b:b5:12:28:46:50:1c:0f:20:28:fb:5f:1e:53:76:09:2d:
         80:48:d5:0a:c8:3d:2f:03:f9:88:fa:41:1b:76:27:f8:3a:2b:
         de:a2:4b:42:8f:99:00:1d:d5:8c:ac:1c:17:db:2e:4f:db:73:
         51:fc:e6:68:c4:fe:34:59:59:81:fc:7c:19:4a:54:13:50:82:
         03:c8:d4:fe:b2:94:ce:aa:56:d6:26:51:37:23:48:c6:52:50:
         4f:65:66:ff:45:7e:9e:6b:25:95:c2:ca:e0:97:f1:3a:e7:80:
         6c:73:94:99:8e:ce:93:83:3a:f9:4f:54:4b:37:3d:2d:4c:5a:
         61:5d:a8:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 03:10:53 2025 by rpki-client