Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/323830343a313765303a3a2f33322d3332203d3e20323633323536.roa
File:                     323830343a313765303a3a2f33322d3332203d3e20323633323536.roa (raw, json)
Hash identifier:          3s7/9gWLcezrhZaj9ouA/yzdSZoDY4T8RtnLqsMjCqg=
Subject key identifier:   8B:6D:FD:C9:26:0F:BA:01:7B:51:24:56:36:21:C0:D6:36:1C:7D:B6
Certificate issuer:       /CN=0156B956215AE4C7F951D9FABA7689B0C1830680
Certificate serial:       1021ECA1509143BDAF26E2AB90A9F66AEBE2C30C
Authority key identifier: 01:56:B9:56:21:5A:E4:C7:F9:51:D9:FA:BA:76:89:B0:C1:83:06:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0156B956215AE4C7F951D9FABA7689B0C1830680.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/323830343a313765303a3a2f33322d3332203d3e20323633323536.roa
Signing time:             Fri 23 May 2025 16:53:05 +0000
ROA not before:           Fri 23 May 2025 16:48:05 +0000
ROA not after:            Fri 22 May 2026 16:53:05 +0000
asID:                     263256
IP address blocks:        2804:17e0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:21:ec:a1:50:91:43:bd:af:26:e2:ab:90:a9:f6:6a:eb:e2:c3:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0156B956215AE4C7F951D9FABA7689B0C1830680
        Validity
            Not Before: May 23 16:48:05 2025 GMT
            Not After : May 22 16:53:05 2026 GMT
        Subject: CN=8B6DFDC9260FBA017B5124563621C0D6361C7DB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:29:f2:2a:14:f8:67:5d:55:ef:ce:0d:16:b2:
                    37:0f:c0:0c:0f:c9:37:9e:94:8d:83:47:c7:dc:e7:
                    87:bc:f0:b5:54:5a:c3:73:08:1e:4f:8d:f4:ba:76:
                    42:b0:ed:19:7a:a6:87:30:91:10:33:0c:df:24:68:
                    86:48:95:c5:ce:cc:bf:fd:d0:0d:ad:a4:c8:9a:79:
                    d0:0d:2b:3f:38:65:85:93:62:8e:bf:76:f4:2b:2a:
                    8c:f0:6b:5a:e7:4e:b5:ec:72:70:b9:48:62:f1:3b:
                    4f:09:87:b9:98:42:72:14:1d:7a:62:1d:0c:b8:c8:
                    54:d4:24:e5:a9:01:e0:69:6a:ca:24:59:6f:22:a0:
                    bd:e7:bc:5e:c0:20:ee:88:06:24:1b:09:9c:fb:9f:
                    4b:89:b5:07:3c:40:36:f8:bb:dc:15:fb:5f:34:32:
                    d0:30:eb:09:13:cf:1f:33:f5:51:2f:17:fd:93:f6:
                    22:51:9d:f4:4f:ff:8a:00:d0:8c:69:b0:17:9f:b0:
                    5a:c6:c6:c3:ed:f1:63:23:e2:d3:03:ec:65:e3:36:
                    ff:74:c0:88:8b:2c:01:ac:1b:4e:10:f8:67:af:ea:
                    27:fd:77:e2:39:89:db:75:e5:ba:c5:63:b0:1c:14:
                    15:00:90:48:ac:d5:da:de:f5:87:4b:2a:70:20:d2:
                    9f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:6D:FD:C9:26:0F:BA:01:7B:51:24:56:36:21:C0:D6:36:1C:7D:B6
            X509v3 Authority Key Identifier:
                keyid:01:56:B9:56:21:5A:E4:C7:F9:51:D9:FA:BA:76:89:B0:C1:83:06:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/0156B956215AE4C7F951D9FABA7689B0C1830680.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0156B956215AE4C7F951D9FABA7689B0C1830680.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/323830343a313765303a3a2f33322d3332203d3e20323633323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:17e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:62:ea:13:bf:d1:57:b5:2b:76:9b:c1:e1:5b:18:24:ea:bf:
         8d:72:3a:ec:0b:18:12:a6:eb:99:1f:5b:dd:dc:d0:66:c8:8d:
         5f:95:d7:ab:3a:7b:82:ff:a4:08:3f:46:f6:26:97:a8:bb:81:
         5b:6b:57:f9:69:d7:5b:5e:5e:b5:9e:c7:00:7d:f0:7b:8e:10:
         ce:9e:d3:d4:1e:cb:3a:09:1e:0e:d9:7c:c4:e5:90:b7:09:0c:
         ec:34:d6:3e:26:20:49:e2:50:85:7f:a9:8b:71:9c:8e:bf:84:
         0d:cb:58:23:69:47:5f:40:b5:6a:0c:78:12:80:4c:3e:03:7b:
         ad:a9:60:10:0e:9d:72:23:31:64:16:94:2a:d9:71:ef:4e:1b:
         da:01:90:26:e1:9d:ea:e9:c6:72:41:fa:25:a0:7a:96:ff:e7:
         f8:97:e4:97:ed:29:c4:fa:0c:95:c4:dc:9a:0b:76:2b:ed:a6:
         c3:ab:a3:ce:9d:60:48:73:1a:04:cf:0e:9f:50:95:ac:a8:f4:
         82:59:44:dc:c4:68:a4:a5:df:09:e0:d5:43:dd:ed:60:b5:00:
         7d:11:60:ca:a6:22:43:77:bb:f2:b8:a1:d9:36:61:59:72:54:
         dd:51:ec:77:b8:b9:3e:f9:fc:dd:5c:77:dc:ca:04:26:7d:a9:
         95:25:46:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 18:01:35 2025 by rpki-client