Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FMn2RzF1dWSDso9K5bc7e9pWQxGMSSZ8LBGGfETtysRb/0/323830343a323637633a3a2f33322d313238203d3e20323634333435.roa
File:                     323830343a323637633a3a2f33322d313238203d3e20323634333435.roa (raw, json)
Hash identifier:          SzNWtzRTaeBhKRsnuU2DEjwe+eItzcB3KhOQQtcUfxY=
Subject key identifier:   3A:E9:70:EA:97:1A:2C:46:21:81:20:E5:20:B0:86:0E:6C:A7:3E:47
Certificate issuer:       /CN=69CD8F9F14C792DC1F86C83F2EB2E23E9C074A72
Certificate serial:       37D2C05A4E25959AE4C65EF82A6244335738AA1A
Authority key identifier: 69:CD:8F:9F:14:C7:92:DC:1F:86:C8:3F:2E:B2:E2:3E:9C:07:4A:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69CD8F9F14C792DC1F86C83F2EB2E23E9C074A72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FMn2RzF1dWSDso9K5bc7e9pWQxGMSSZ8LBGGfETtysRb/0/323830343a323637633a3a2f33322d313238203d3e20323634333435.roa
Signing time:             Fri 13 Dec 2024 02:52:06 +0000
ROA not before:           Fri 13 Dec 2024 02:47:06 +0000
ROA not after:            Fri 12 Dec 2025 02:52:06 +0000
asID:                     264345
IP address blocks:        2804:267c::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:d2:c0:5a:4e:25:95:9a:e4:c6:5e:f8:2a:62:44:33:57:38:aa:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69CD8F9F14C792DC1F86C83F2EB2E23E9C074A72
        Validity
            Not Before: Dec 13 02:47:06 2024 GMT
            Not After : Dec 12 02:52:06 2025 GMT
        Subject: CN=3AE970EA971A2C46218120E520B0860E6CA73E47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:64:aa:5b:2a:9c:c7:c0:3c:b6:58:e3:d5:fd:
                    06:51:14:5e:72:a3:b9:8e:0d:e3:5b:23:1d:e5:de:
                    2c:23:e0:49:98:c5:d6:48:fe:b6:45:65:69:ce:5a:
                    78:2b:6b:b1:cb:07:c7:96:45:1c:bf:cd:c8:9c:af:
                    18:db:f3:a2:6a:0a:b8:d9:47:6f:3e:96:1e:d5:a8:
                    e9:a8:71:eb:b2:d4:48:b8:ec:78:04:29:47:1c:30:
                    8a:aa:cd:85:4a:b5:af:e9:e3:0a:6d:bc:0d:f0:82:
                    aa:2a:6e:c5:c5:0e:7a:13:2b:6d:ad:f8:50:c4:bc:
                    8a:50:b8:6d:3e:58:d6:2e:4f:e6:02:ea:91:d0:21:
                    fa:34:25:5a:6e:03:49:63:5e:87:4f:c1:f7:7e:68:
                    c0:94:7a:8b:00:c2:29:45:e9:9b:b0:42:74:6d:59:
                    18:36:0d:be:08:90:71:3d:3c:8e:76:8b:7d:da:bd:
                    19:f4:90:e7:6f:e3:7c:35:3a:f5:0b:e9:26:9f:1b:
                    b5:2d:08:14:2e:0d:0f:c2:97:fe:6d:c7:f8:e1:aa:
                    9c:1e:c3:8c:ae:15:87:1b:a7:d4:75:4a:35:31:78:
                    9f:ba:17:3a:9f:c8:4d:26:7f:a8:83:d6:24:2e:a0:
                    a9:8e:49:71:22:5e:39:b2:ec:ec:b3:24:03:82:90:
                    68:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:E9:70:EA:97:1A:2C:46:21:81:20:E5:20:B0:86:0E:6C:A7:3E:47
            X509v3 Authority Key Identifier:
                keyid:69:CD:8F:9F:14:C7:92:DC:1F:86:C8:3F:2E:B2:E2:3E:9C:07:4A:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FMn2RzF1dWSDso9K5bc7e9pWQxGMSSZ8LBGGfETtysRb/0/69CD8F9F14C792DC1F86C83F2EB2E23E9C074A72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69CD8F9F14C792DC1F86C83F2EB2E23E9C074A72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FMn2RzF1dWSDso9K5bc7e9pWQxGMSSZ8LBGGfETtysRb/0/323830343a323637633a3a2f33322d313238203d3e20323634333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:267c::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:f5:80:be:13:77:fa:e0:38:26:7a:2a:46:9d:54:87:9e:c7:
         17:a9:da:cd:20:92:fa:82:9d:f7:90:28:aa:20:f8:73:ec:6a:
         91:e5:1d:59:eb:60:85:cb:6c:9f:82:98:f4:39:e9:04:02:da:
         ee:01:8c:a7:25:73:b0:72:df:ff:12:9c:4f:cd:8e:ef:cf:22:
         87:d1:18:4f:40:2f:46:ad:c9:fb:6a:c2:26:81:ab:3c:28:04:
         5b:39:46:87:36:da:ec:58:09:99:9a:b0:cb:cd:31:34:0c:c7:
         19:84:88:11:14:04:fa:5f:d2:cb:40:45:3b:50:3c:66:74:22:
         30:3c:09:a9:8c:06:4b:b9:7b:19:36:13:ae:39:6c:ee:f0:6c:
         1d:c0:f4:17:93:ff:c3:e5:7a:a4:90:9b:9f:0c:ac:00:ea:8c:
         d6:f1:42:6d:f5:c4:91:e3:e5:98:9f:aa:7b:56:54:f2:bf:64:
         9f:0e:c2:f5:67:47:39:f2:cd:9f:30:ae:d6:35:4c:d9:db:8f:
         57:6a:56:78:66:e7:08:2f:50:2b:d8:af:2c:b9:0c:dc:28:00:
         6d:d4:0d:92:b9:da:74:6a:a2:b4:fe:bc:30:ee:fb:2a:31:ed:
         02:8d:fd:25:ef:c7:f4:cb:9c:86:e9:dd:a6:58:d7:8e:c4:bd:
         38:ff:52:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:37:45 2025 by rpki-client