Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/323830343a366665303a3a2f33322d3336203d3e20323730363930.roa
File:                     323830343a366665303a3a2f33322d3336203d3e20323730363930.roa (raw, json)
Hash identifier:          uZqp4Wgh9r1u3S27RMEiTIHkcnYebpfguoeafqx6tVw=
Subject key identifier:   D0:C3:C8:0E:47:B5:57:32:3F:38:99:23:1B:9F:4E:13:C1:A5:62:7E
Certificate issuer:       /CN=296B5A42104756A14E2651E7EAC81D02EA0F7531
Certificate serial:       70A22AB952CAC4EF373E2E660C53DAD8C6B9A5BD
Authority key identifier: 29:6B:5A:42:10:47:56:A1:4E:26:51:E7:EA:C8:1D:02:EA:0F:75:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/323830343a366665303a3a2f33322d3336203d3e20323730363930.roa
Signing time:             Wed 05 Mar 2025 19:26:04 +0000
ROA not before:           Wed 05 Mar 2025 19:21:04 +0000
ROA not after:            Wed 04 Mar 2026 19:26:04 +0000
asID:                     270690
IP address blocks:        2804:6fe0::/32 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:a2:2a:b9:52:ca:c4:ef:37:3e:2e:66:0c:53:da:d8:c6:b9:a5:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296B5A42104756A14E2651E7EAC81D02EA0F7531
        Validity
            Not Before: Mar  5 19:21:04 2025 GMT
            Not After : Mar  4 19:26:04 2026 GMT
        Subject: CN=D0C3C80E47B557323F3899231B9F4E13C1A5627E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:20:e5:11:38:2e:0b:06:d6:0d:49:1a:95:e8:
                    c9:c2:ca:f5:84:a5:14:3b:b0:79:e3:ee:4c:e0:55:
                    a3:71:09:c7:73:8d:07:77:25:6a:24:cd:56:39:26:
                    8b:a8:73:32:e3:97:d3:1a:3c:8c:39:88:88:86:91:
                    31:ad:3b:59:3d:13:27:3e:5e:b2:54:c8:04:06:56:
                    6d:80:4a:3a:4a:76:0b:d8:aa:4c:a5:64:ed:32:50:
                    49:40:65:a5:0f:54:83:ef:bd:2e:08:d4:77:32:70:
                    f4:6e:a2:31:68:c2:02:e8:89:c1:12:f7:93:31:96:
                    3d:ee:f2:72:e1:43:2a:67:7b:28:ee:80:c2:32:e8:
                    65:07:57:b4:0a:fc:a6:a4:b8:20:e5:64:b1:37:6a:
                    b4:d6:a5:2d:82:b1:31:50:87:f8:c4:3b:65:9a:de:
                    4c:6e:0b:18:6a:fa:15:45:78:d0:b3:de:d1:a9:12:
                    8a:7c:3f:f0:84:97:b3:24:69:54:7d:51:2a:0a:b9:
                    5f:f0:3b:a2:c4:5b:d8:8b:e4:44:a8:6a:d3:ff:bc:
                    eb:91:ad:de:86:26:1c:a6:41:51:80:89:61:ce:ea:
                    b2:42:71:0d:6d:b7:29:85:87:f4:82:b8:4e:a0:a0:
                    a9:6a:92:3c:51:9c:1d:5d:a2:4d:33:98:4e:25:e9:
                    2d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:C3:C8:0E:47:B5:57:32:3F:38:99:23:1B:9F:4E:13:C1:A5:62:7E
            X509v3 Authority Key Identifier:
                keyid:29:6B:5A:42:10:47:56:A1:4E:26:51:E7:EA:C8:1D:02:EA:0F:75:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/323830343a366665303a3a2f33322d3336203d3e20323730363930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6fe0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:5b:99:29:aa:79:78:80:2d:48:12:56:99:b1:65:7d:04:bf:
         7b:4e:a8:df:3a:79:81:db:82:b0:3a:c0:a7:8a:a2:a4:91:d0:
         9c:10:3e:cc:65:b5:ec:68:80:61:d8:e6:a9:5c:75:47:8f:d7:
         2f:81:ae:1e:cf:bb:c3:dd:9e:10:8a:22:29:e9:1c:1f:64:d1:
         5c:d9:81:8b:5f:b3:e3:89:fe:09:84:6c:aa:15:2b:ac:8a:cb:
         41:20:d4:43:5a:6e:d8:f7:9a:07:82:a8:a9:a2:7a:5d:d2:b1:
         1c:ec:51:bc:c4:2e:dc:49:42:c3:4a:36:e8:f0:cf:91:37:f9:
         a8:fd:3b:18:b8:d0:7c:6b:16:ac:0b:3e:06:d1:d2:60:2b:ec:
         b2:2e:40:b4:05:af:8d:f4:81:b8:d8:eb:c2:c6:10:1f:c9:a1:
         1e:d2:7f:82:ab:4a:c1:d1:11:22:8e:0f:a0:5b:08:f8:ce:af:
         b7:f3:70:88:c8:24:59:31:e2:09:c9:51:c0:c8:4e:8e:21:27:
         c1:1c:b1:1e:23:10:22:16:d7:6c:4c:50:f5:61:50:67:39:0b:
         bf:7e:d0:49:3c:df:ad:f1:5a:44:96:13:62:83:82:ef:25:b7:
         9e:b3:c3:41:92:10:a5:aa:23:47:f3:22:80:db:d5:84:d3:dd:
         d4:e8:1d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:29:37 2025 by rpki-client