Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/323830343a376537303a343030303a3a2f33342d3334203d3e20323731363234.roa
File:                     323830343a376537303a343030303a3a2f33342d3334203d3e20323731363234.roa (raw, json)
Hash identifier:          jb38S2o1Fz3MP7StSVDFxaKroBTpNp/OQ5nI/sh4Gk0=
Subject key identifier:   93:E8:83:B2:9F:98:FC:3A:19:81:1A:4E:E3:D7:2D:3F:27:88:A6:34
Certificate issuer:       /CN=6BD10BD7311C36E4427262C587B0519198C93849
Certificate serial:       7C0E1B5B42CB97B2A2F2848F2DC0456781F285B4
Authority key identifier: 6B:D1:0B:D7:31:1C:36:E4:42:72:62:C5:87:B0:51:91:98:C9:38:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BD10BD7311C36E4427262C587B0519198C93849.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/323830343a376537303a343030303a3a2f33342d3334203d3e20323731363234.roa
Signing time:             Tue 11 Feb 2025 17:58:16 +0000
ROA not before:           Tue 11 Feb 2025 17:53:16 +0000
ROA not after:            Tue 10 Feb 2026 17:58:16 +0000
asID:                     271624
IP address blocks:        2804:7e70:4000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:0e:1b:5b:42:cb:97:b2:a2:f2:84:8f:2d:c0:45:67:81:f2:85:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BD10BD7311C36E4427262C587B0519198C93849
        Validity
            Not Before: Feb 11 17:53:16 2025 GMT
            Not After : Feb 10 17:58:16 2026 GMT
        Subject: CN=93E883B29F98FC3A19811A4EE3D72D3F2788A634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:22:7a:47:0c:c4:1c:10:27:93:a6:20:96:a7:
                    bd:ba:71:64:4c:d7:8c:3c:c2:2f:ae:c7:bc:f7:78:
                    7c:da:36:1d:e8:bd:c5:62:fc:cb:f3:88:f4:51:e9:
                    83:8e:65:42:50:d2:3f:f4:aa:97:14:d6:89:41:5d:
                    a8:8f:50:39:c0:30:01:89:cb:5e:c0:0d:76:ed:91:
                    e2:c6:04:88:48:b4:cf:51:fc:e3:b8:7a:cb:a4:8f:
                    1d:09:bf:3d:d6:5f:ae:ad:6e:d0:00:9d:78:83:9e:
                    2d:12:eb:d7:9d:f1:5b:f9:75:b4:4d:35:68:2f:31:
                    ef:f5:16:8d:51:a8:36:5b:42:af:6a:16:60:70:11:
                    4f:d3:a7:a1:91:e2:b3:66:c4:9b:2b:d0:c2:e5:12:
                    12:32:8c:35:ac:29:73:a5:10:20:79:5e:3a:95:1f:
                    58:0a:e6:21:ba:d0:60:07:8d:5c:0a:76:cd:26:a2:
                    1f:8b:84:58:c2:3d:b0:a3:48:3f:c0:9f:34:c0:9e:
                    72:43:e7:63:a9:38:ea:8a:03:a4:c7:a8:8f:bf:3b:
                    e2:9a:60:cf:81:7d:a2:d5:6a:18:21:23:91:70:69:
                    f7:74:42:da:9b:e8:45:28:22:30:fe:b0:ee:83:ad:
                    b6:b4:2e:a3:d1:eb:8a:93:9b:13:b5:cd:33:24:04:
                    66:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:E8:83:B2:9F:98:FC:3A:19:81:1A:4E:E3:D7:2D:3F:27:88:A6:34
            X509v3 Authority Key Identifier:
                keyid:6B:D1:0B:D7:31:1C:36:E4:42:72:62:C5:87:B0:51:91:98:C9:38:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/6BD10BD7311C36E4427262C587B0519198C93849.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BD10BD7311C36E4427262C587B0519198C93849.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/323830343a376537303a343030303a3a2f33342d3334203d3e20323731363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e70:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         97:54:3e:cf:9b:6f:54:43:ff:4f:34:8f:c9:ed:18:7a:2f:b6:
         3d:c5:80:fd:04:98:94:b6:c8:c2:a4:c2:62:5a:f9:3b:9d:45:
         0b:6d:df:ce:e1:68:4d:53:c1:2d:12:b4:2a:8a:9c:90:89:0f:
         5d:7c:d6:ad:77:df:97:90:01:af:4b:71:5d:73:cc:d0:bc:9c:
         f1:7e:4c:b6:2e:3e:41:6c:48:da:80:3b:f6:28:21:35:d1:80:
         3a:71:97:f9:58:bb:fe:93:9a:a8:9b:2d:ac:19:3d:69:88:07:
         23:93:41:7b:76:ba:fd:0a:e8:15:a2:69:95:1c:0d:8e:72:48:
         4e:8b:0f:d3:ea:84:d8:fd:14:4b:bb:f9:54:f2:8c:70:cc:4f:
         22:92:2a:99:c0:af:3f:1f:28:bb:62:eb:ab:d9:5a:59:ab:1c:
         f8:34:7f:ce:4f:a2:1c:35:74:1c:00:30:92:35:2b:47:e4:54:
         04:2a:32:c0:25:7d:88:f0:71:83:b1:55:85:59:cb:96:b9:e7:
         b8:1d:e8:9b:4b:fd:23:00:fc:27:b2:b4:f1:46:d7:92:de:93:
         2f:06:20:c6:68:48:c2:38:ea:03:96:2f:15:38:62:aa:17:16:
         dc:9c:82:e5:1b:fe:31:71:61:13:32:60:00:74:5e:fb:8f:6f:
         7d:73:b1:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:49:40 2025 by rpki-client