Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383031383a3a2f34382d3438203d3e203532343638.roa
File:                     323830343a326237383a383031383a3a2f34382d3438203d3e203532343638.roa (raw, json)
Hash identifier:          w6Y8ItWHT9ns1felnQcAyN/eBX2HXy2L6xuAJPEYuTc=
Subject key identifier:   6D:0B:33:AB:7C:E5:20:96:CE:96:F7:E2:84:62:39:9E:63:C4:ED:20
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       0D767AFD7AA4CB9BE29F932B4F8341F4319027BC
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383031383a3a2f34382d3438203d3e203532343638.roa
Signing time:             Fri 07 Mar 2025 20:41:17 +0000
ROA not before:           Fri 07 Mar 2025 20:36:17 +0000
ROA not after:            Fri 06 Mar 2026 20:41:17 +0000
asID:                     52468
IP address blocks:        2804:2b78:8018::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:76:7a:fd:7a:a4:cb:9b:e2:9f:93:2b:4f:83:41:f4:31:90:27:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Mar  7 20:36:17 2025 GMT
            Not After : Mar  6 20:41:17 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e7:3c:b8:ce:b7:68:a5:ba:df:67:08:dc:96:
                    42:6f:00:25:be:5c:43:6c:fd:5a:a9:d0:1d:97:b1:
                    21:76:94:76:dd:78:bf:0b:96:a9:0a:ac:e3:ba:a4:
                    41:80:d1:51:ec:0d:5f:e7:eb:09:3e:0d:81:18:ef:
                    bf:2f:63:8b:52:6f:1e:37:97:a2:a4:47:07:7d:14:
                    fa:20:5e:bc:6a:96:51:a7:b4:22:3f:59:13:67:46:
                    33:1c:8f:d9:2a:16:50:ad:9e:f2:6e:0a:da:fa:4a:
                    98:e8:36:53:33:aa:57:4e:aa:0c:dc:dc:4d:d9:25:
                    8b:70:0a:25:54:df:a0:e2:9c:dc:c1:41:a3:f6:40:
                    d7:3c:03:9c:05:49:82:21:db:78:58:6c:7d:10:20:
                    3e:f2:9b:22:d4:93:14:07:7b:2b:41:71:5d:c6:28:
                    11:29:2f:3d:a3:1b:22:1b:5a:b8:25:ec:15:28:ab:
                    e9:fe:59:55:92:e7:7a:ef:0b:a1:ae:59:20:f3:e6:
                    7c:65:c9:bf:af:0f:7e:d6:9e:6d:df:ad:97:18:40:
                    4c:8e:93:92:8d:f2:87:e6:7b:1e:7a:41:89:1c:06:
                    5c:a4:be:57:d5:3c:16:74:43:6c:87:38:23:66:c5:
                    63:d8:fe:d4:34:6d:28:18:68:2d:21:8d:f3:8b:06:
                    07:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:0B:33:AB:7C:E5:20:96:CE:96:F7:E2:84:62:39:9E:63:C4:ED:20
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383031383a3a2f34382d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b78:8018::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:e2:b7:d6:21:6f:1e:c7:9e:e9:be:e0:c0:b8:19:58:3f:35:
         35:08:03:3c:e8:97:e6:2d:3d:95:8e:f6:31:65:1f:66:7a:24:
         72:71:8b:0d:5a:59:5a:77:fa:8a:af:d9:dc:6f:60:6c:a3:7c:
         90:bb:23:3f:3f:b5:29:e5:9a:e6:54:a5:95:c4:76:64:d2:31:
         ca:ad:42:5d:a4:d6:38:59:c4:91:58:b7:7a:23:2c:c6:c6:8e:
         ad:13:de:2b:da:75:ab:45:f4:e5:79:32:28:d4:1a:98:be:f5:
         4c:69:63:c9:56:0a:d5:2b:39:9f:0d:aa:a4:5c:66:e0:67:f7:
         0f:95:38:62:12:f8:11:e2:37:e5:ef:f9:1b:b0:ed:49:3d:ac:
         27:e8:2c:6a:0e:15:75:f0:79:6c:42:3a:25:e0:83:35:cc:f8:
         45:68:34:8e:e5:f8:ae:31:ff:95:40:97:10:04:05:d2:4b:2a:
         e2:29:f7:72:f1:72:db:08:f8:86:00:99:88:4d:1d:16:16:d7:
         01:b5:4c:e8:87:94:8b:ec:96:a3:fc:64:66:4b:19:2e:d8:a2:
         1c:34:dc:d5:62:23:6a:d4:52:72:15:d0:5b:cb:3c:ef:c3:1f:
         a9:1c:e8:c8:2f:3a:36:99:8b:4a:ba:c7:0e:7d:89:84:8b:d3:
         dc:c7:02:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:30:44 2025 by rpki-client