Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/1/323830343a336539343a3a2f33322d3332203d3e20323636363037.roa
File:                     323830343a336539343a3a2f33322d3332203d3e20323636363037.roa (raw, json)
Hash identifier:          JCZyE1444pj85qBIrRbKs8AGV6/KYCpWBvgH6q0obww=
Subject key identifier:   87:C4:2E:81:4B:9D:19:F0:6F:A2:18:64:82:6A:AB:22:A8:E0:72:D1
Certificate issuer:       /CN=512D0D56D1561B4AFE3C13FF6432B23FB5B38C51
Certificate serial:       2390D425A927D303C9A53EAA801977C101EA441E
Authority key identifier: 51:2D:0D:56:D1:56:1B:4A:FE:3C:13:FF:64:32:B2:3F:B5:B3:8C:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/512D0D56D1561B4AFE3C13FF6432B23FB5B38C51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/1/323830343a336539343a3a2f33322d3332203d3e20323636363037.roa
Signing time:             Wed 05 Mar 2025 22:06:12 +0000
ROA not before:           Wed 05 Mar 2025 22:01:12 +0000
ROA not after:            Wed 04 Mar 2026 22:06:12 +0000
asID:                     266607
IP address blocks:        2804:3e94::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:90:d4:25:a9:27:d3:03:c9:a5:3e:aa:80:19:77:c1:01:ea:44:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=512D0D56D1561B4AFE3C13FF6432B23FB5B38C51
        Validity
            Not Before: Mar  5 22:01:12 2025 GMT
            Not After : Mar  4 22:06:12 2026 GMT
        Subject: CN=87C42E814B9D19F06FA21864826AAB22A8E072D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5b:a6:9e:9f:82:4f:e7:94:25:af:97:f6:81:
                    c2:4d:c3:1e:53:7f:8d:35:54:51:4e:a5:1e:ec:61:
                    ab:1c:37:59:95:62:eb:ce:f1:ff:ba:f4:8f:f9:5f:
                    1d:8e:4a:a9:49:1a:16:bb:02:aa:0d:dc:8e:d1:a9:
                    b4:54:7f:51:2b:28:ab:45:a4:97:80:70:14:5d:2e:
                    15:9d:08:ce:97:f5:87:05:47:5c:b8:23:41:a4:b6:
                    94:8d:3c:51:c8:54:b7:fd:b7:23:8a:56:b3:f0:4d:
                    64:ae:df:71:61:85:49:64:42:d0:80:87:24:ef:5c:
                    31:06:ab:b1:64:1d:4f:56:b2:2b:6c:f9:36:08:d9:
                    23:0f:e1:f6:d4:2b:21:88:7f:77:56:c3:8f:19:23:
                    d0:d0:d9:45:ac:9c:66:f0:47:b8:ea:3e:c2:3c:3a:
                    dc:ed:57:2d:4a:7c:b7:a1:7e:18:af:ae:29:0e:99:
                    22:65:98:0d:24:62:a8:67:fc:f9:5c:b3:b8:f8:10:
                    43:71:f8:6f:73:c5:4a:9a:90:fb:4b:2c:cc:3b:63:
                    e1:35:b2:38:3c:f9:da:ef:a3:6f:32:0b:04:82:40:
                    ce:a2:4a:d6:42:94:64:cf:15:ac:ab:15:71:09:a1:
                    e6:46:c0:c8:04:7d:b7:09:0f:c7:61:d6:f8:8c:b4:
                    a4:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:C4:2E:81:4B:9D:19:F0:6F:A2:18:64:82:6A:AB:22:A8:E0:72:D1
            X509v3 Authority Key Identifier:
                keyid:51:2D:0D:56:D1:56:1B:4A:FE:3C:13:FF:64:32:B2:3F:B5:B3:8C:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/1/512D0D56D1561B4AFE3C13FF6432B23FB5B38C51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/512D0D56D1561B4AFE3C13FF6432B23FB5B38C51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/1/323830343a336539343a3a2f33322d3332203d3e20323636363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3e94::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:eb:0c:bc:fe:43:44:6b:42:fa:75:82:34:68:02:ed:8a:30:
         9a:2d:d7:e9:76:d5:e2:9c:8a:f0:50:2b:56:ec:58:96:d9:05:
         46:4f:0b:eb:7e:e3:2e:ae:48:59:d2:b2:79:5c:2f:1c:79:fe:
         e6:6e:aa:f9:c1:4b:03:59:7a:66:fa:45:0b:79:5a:f6:4c:52:
         e6:6d:18:b0:ca:a4:f4:14:b1:63:2f:aa:0c:07:76:b6:cb:3f:
         a2:c1:3a:1d:bc:28:50:70:f2:3f:c0:ae:95:67:05:ad:45:2d:
         a1:2e:40:95:4f:6c:1b:0d:24:89:75:d4:5f:fa:01:9d:20:20:
         da:41:ad:ca:7d:c1:86:68:a1:f5:dd:0c:77:ed:65:7c:f5:37:
         ab:f8:27:2b:21:31:cb:8e:df:bf:89:d6:65:ad:ee:20:ce:91:
         52:27:f2:d2:99:42:5e:3d:b7:9e:29:ed:3b:f6:64:d1:99:77:
         55:f7:89:34:47:0d:8d:95:35:91:45:79:24:62:33:f4:a8:1e:
         00:ac:00:67:24:48:80:dd:8d:53:b5:0c:1f:6b:a0:9c:21:56:
         18:e9:5a:4a:21:05:33:f4:ef:ac:73:70:4c:35:87:66:94:14:
         6a:a9:29:5c:a1:52:ea:e7:4b:5d:b9:05:e5:81:bc:bd:1e:0f:
         cf:6e:d0:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:39:37 2025 by rpki-client