Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/323830343a313765303a633030303a3a2f33342d3334203d3e20323633323536.roa
File:                     323830343a313765303a633030303a3a2f33342d3334203d3e20323633323536.roa (raw, json)
Hash identifier:          lWa5thjlAvu5RegzdowEbs2Bqp7vlk/TjKdDM2djTCU=
Subject key identifier:   DA:22:A6:EB:2F:DD:B3:D2:CD:25:7E:5D:D9:0B:18:B7:98:E0:39:4E
Certificate issuer:       /CN=0156B956215AE4C7F951D9FABA7689B0C1830680
Certificate serial:       0BCA5DCD4363554EFE4338CE69E5081FBE3D5C58
Authority key identifier: 01:56:B9:56:21:5A:E4:C7:F9:51:D9:FA:BA:76:89:B0:C1:83:06:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0156B956215AE4C7F951D9FABA7689B0C1830680.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/323830343a313765303a633030303a3a2f33342d3334203d3e20323633323536.roa
Signing time:             Fri 23 May 2025 16:53:05 +0000
ROA not before:           Fri 23 May 2025 16:48:05 +0000
ROA not after:            Fri 22 May 2026 16:53:05 +0000
asID:                     263256
IP address blocks:        2804:17e0:c000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:ca:5d:cd:43:63:55:4e:fe:43:38:ce:69:e5:08:1f:be:3d:5c:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0156B956215AE4C7F951D9FABA7689B0C1830680
        Validity
            Not Before: May 23 16:48:05 2025 GMT
            Not After : May 22 16:53:05 2026 GMT
        Subject: CN=DA22A6EB2FDDB3D2CD257E5DD90B18B798E0394E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:30:ef:e7:90:f7:c8:3e:97:05:cb:23:c2:07:
                    72:f5:f3:cc:27:bc:d9:39:5e:9a:63:de:56:0f:10:
                    aa:2e:0e:d7:50:f5:2b:19:2f:02:17:6a:da:02:55:
                    09:0b:e3:d6:b2:5d:e1:aa:cf:33:89:58:9f:7c:39:
                    04:dd:95:a7:9c:03:51:31:4a:77:58:3a:72:67:ba:
                    5f:73:52:c8:ea:49:c7:bc:f3:88:4e:3f:8c:67:59:
                    f5:d9:a2:af:a0:66:72:40:d3:09:d0:d1:41:28:9f:
                    dc:61:b6:97:be:75:8a:64:9d:1d:3b:04:fb:68:ce:
                    7e:b4:27:43:8f:89:1a:3f:95:b5:d2:a3:18:c2:08:
                    e9:e3:7f:ad:33:7a:1d:a6:a5:a7:28:6e:96:b4:2b:
                    97:e9:1c:bf:43:f4:52:60:1b:98:cb:bd:c3:39:97:
                    99:4b:b0:54:59:49:ea:61:5c:04:78:70:f6:45:2a:
                    53:4c:97:fe:13:e1:a7:1d:cc:4a:27:78:86:ff:d2:
                    91:08:f9:08:89:bc:08:aa:b3:02:04:41:6e:cc:f9:
                    e2:4b:10:d9:91:1f:a2:62:a1:d9:d2:3c:cc:1e:80:
                    87:81:f5:ef:84:de:f0:65:92:f4:6d:2a:17:66:e6:
                    ec:7f:39:65:be:68:2d:26:87:1a:0d:75:3e:2f:39:
                    44:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:22:A6:EB:2F:DD:B3:D2:CD:25:7E:5D:D9:0B:18:B7:98:E0:39:4E
            X509v3 Authority Key Identifier:
                keyid:01:56:B9:56:21:5A:E4:C7:F9:51:D9:FA:BA:76:89:B0:C1:83:06:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/0156B956215AE4C7F951D9FABA7689B0C1830680.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0156B956215AE4C7F951D9FABA7689B0C1830680.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/323830343a313765303a633030303a3a2f33342d3334203d3e20323633323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:17e0:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         3e:5d:ba:4a:ec:e9:13:60:91:e9:a8:94:ce:e3:a6:5d:fe:76:
         5b:a7:01:33:58:89:67:b0:6c:62:78:fc:c3:99:ff:31:e7:3c:
         1f:0a:cf:20:75:f4:15:ed:0e:eb:9f:ba:be:38:22:3d:9b:73:
         2d:89:33:d3:2d:14:60:a4:b1:1b:4a:c8:ab:ca:ee:88:bc:e8:
         e9:13:31:c3:a4:14:b1:8e:5f:63:33:95:e7:14:4d:c4:bc:13:
         65:d3:19:ac:06:eb:0a:53:92:f3:c4:8b:b0:f9:1d:c5:99:e3:
         ba:5c:4e:88:f9:09:af:cb:3b:d3:06:48:43:b3:82:ac:a2:06:
         b9:ba:79:47:7a:91:0d:6a:47:2a:67:91:f0:1d:d3:6a:06:0c:
         29:49:a1:97:cf:8a:52:83:b9:be:8d:86:b1:80:45:1a:3b:3a:
         30:28:90:c5:2c:00:e7:79:ac:fd:6c:8f:35:24:ea:43:a1:4d:
         78:99:55:86:04:3d:d3:31:5c:d9:a4:d4:d3:dd:ed:7d:2d:52:
         87:53:b4:56:97:9e:74:8b:84:17:1d:d3:71:47:a3:dd:05:75:
         e4:3e:d3:75:f3:3c:7d:bc:d3:48:1a:31:22:97:90:ae:b2:e8:
         29:85:86:b6:27:6d:cc:c3:e7:ca:85:91:31:38:73:d4:b6:1a:
         a3:97:ec:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 08:39:28 2025 by rpki-client