Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383033393a3a2f34382d3438203d3e203532343638.roa
File:                     323830343a326237383a383033393a3a2f34382d3438203d3e203532343638.roa (raw, json)
Hash identifier:          23q6uKqScnbsYwW5OyBctLj8FH5s76uhIHI69gJYlGY=
Subject key identifier:   2C:8F:19:59:92:6E:29:0D:4D:2C:86:A9:1E:37:DC:DC:5C:BD:D2:E7
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       28172AF22108B867FB8B814834BDAB994CA826E9
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383033393a3a2f34382d3438203d3e203532343638.roa
Signing time:             Fri 07 Mar 2025 20:41:58 +0000
ROA not before:           Fri 07 Mar 2025 20:36:58 +0000
ROA not after:            Fri 06 Mar 2026 20:41:58 +0000
asID:                     52468
IP address blocks:        2804:2b78:8039::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:17:2a:f2:21:08:b8:67:fb:8b:81:48:34:bd:ab:99:4c:a8:26:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Mar  7 20:36:58 2025 GMT
            Not After : Mar  6 20:41:58 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e9:d1:94:fa:e7:49:f2:d3:67:a4:0d:2c:d6:
                    1a:5d:0c:73:64:40:18:00:cd:80:3a:5f:37:50:6d:
                    29:9b:af:31:e0:32:82:7b:52:2e:17:e3:73:a0:90:
                    f1:af:3e:93:b7:ae:e9:56:e5:11:6c:97:bf:95:dd:
                    82:7f:19:5a:f5:95:05:3b:55:aa:29:98:8a:1d:a3:
                    98:f3:e6:5a:ed:df:ec:1f:5b:63:bd:7a:b0:2f:1b:
                    27:7c:ae:c4:8e:e5:55:06:93:b1:cf:9e:ad:67:d9:
                    84:3a:71:76:8b:81:f7:85:df:eb:95:9a:1c:23:6e:
                    95:1b:07:89:5e:c6:63:26:4b:e9:1e:be:88:3d:73:
                    2d:93:cf:92:0f:1e:1b:ef:10:2e:f2:17:1a:e1:1a:
                    7e:7d:79:c3:6d:a6:7e:0c:24:01:6b:91:df:50:47:
                    41:c5:3e:c1:ea:03:e1:4d:1c:9b:da:e2:ac:1e:0d:
                    8e:7e:31:bb:1f:8f:99:31:33:69:2a:31:48:e1:f3:
                    75:be:07:80:b9:f4:de:1b:f5:45:ea:af:31:fa:e4:
                    c7:25:95:95:a6:2c:ff:21:08:0e:da:f0:3e:79:b2:
                    9a:69:92:6a:c6:17:81:11:5d:06:d7:20:38:d5:95:
                    8e:d1:c9:71:f5:81:27:40:71:45:70:16:a9:ee:cd:
                    31:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:8F:19:59:92:6E:29:0D:4D:2C:86:A9:1E:37:DC:DC:5C:BD:D2:E7
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383033393a3a2f34382d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b78:8039::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:30:61:c1:b0:52:92:83:17:5f:9c:7f:01:7f:8e:0e:54:b9:
         b5:d0:3d:45:ab:a5:4e:18:9e:87:e3:f3:88:57:af:a8:cd:91:
         a5:c4:15:b1:dc:fe:02:7f:d2:2f:53:33:4f:53:2a:09:6b:30:
         62:6f:cd:84:7f:8f:3d:c9:56:cb:3f:54:cb:bd:ae:a1:3f:af:
         70:51:f9:83:58:44:36:9d:7c:30:83:ee:6f:1a:de:a6:05:2c:
         38:ca:8c:1b:42:f3:8a:55:eb:71:32:29:61:0c:4f:45:be:7a:
         7e:c0:2b:06:21:c5:04:36:2a:d9:82:b6:7d:f4:45:8a:b7:52:
         55:c3:d4:c2:f5:f9:6d:5b:bb:45:e4:1e:bf:7a:ab:70:cb:be:
         ca:87:9d:3e:11:45:e6:f2:d3:cb:16:0e:05:56:c9:7b:63:10:
         e0:b2:58:12:42:5b:68:b8:73:e9:d8:dc:c8:df:c0:c4:53:98:
         16:bb:a3:65:76:71:cc:a0:d7:ee:7f:53:28:3b:ff:a6:f7:1b:
         1a:65:4a:76:e9:c1:c1:97:93:e7:20:81:1c:22:2c:76:51:5e:
         f8:8c:83:93:8d:6b:63:b9:13:61:99:11:e6:c4:e2:97:a7:af:
         56:65:59:68:67:eb:2e:c5:70:d9:05:d9:32:57:80:4f:c7:8c:
         e5:c0:b7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:18 2025 by rpki-client