Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/323830343a353635383a3a2f33332d3333203d3e20323637393932.roa
File:                     323830343a353635383a3a2f33332d3333203d3e20323637393932.roa (raw, json)
Hash identifier:          EwaF7HfZ3c5Oqv5NE2rd9lWox1NxjTxlBeEd9LtyXz8=
Subject key identifier:   93:88:DF:51:CC:83:E6:2E:E0:2C:A8:92:1B:34:14:C4:64:1F:2A:0D
Certificate issuer:       /CN=ED7A28B5CA146BE4F2067D1878689F7AB75AC3F5
Certificate serial:       72CE3DC7B41A5CB27613D52DA1235C4D7568CB58
Authority key identifier: ED:7A:28:B5:CA:14:6B:E4:F2:06:7D:18:78:68:9F:7A:B7:5A:C3:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED7A28B5CA146BE4F2067D1878689F7AB75AC3F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/323830343a353635383a3a2f33332d3333203d3e20323637393932.roa
Signing time:             Mon 31 Mar 2025 14:13:23 +0000
ROA not before:           Mon 31 Mar 2025 14:08:23 +0000
ROA not after:            Mon 30 Mar 2026 14:13:23 +0000
asID:                     267992
IP address blocks:        2804:5658::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:ce:3d:c7:b4:1a:5c:b2:76:13:d5:2d:a1:23:5c:4d:75:68:cb:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED7A28B5CA146BE4F2067D1878689F7AB75AC3F5
        Validity
            Not Before: Mar 31 14:08:23 2025 GMT
            Not After : Mar 30 14:13:23 2026 GMT
        Subject: CN=9388DF51CC83E62EE02CA8921B3414C4641F2A0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e9:ac:9e:6f:b0:84:78:ce:47:46:d1:3a:24:
                    66:62:7f:c9:e8:61:fe:db:70:48:54:2f:b2:49:f6:
                    d4:59:cf:bf:aa:e9:ab:f5:4d:35:bc:dc:31:10:c2:
                    02:38:49:f7:4a:2b:20:a3:dd:b8:64:0d:d5:bd:ae:
                    4e:82:16:cd:54:23:e9:56:08:1d:39:f2:40:37:7c:
                    90:45:07:98:a8:a2:b1:8c:a3:88:2d:a5:51:81:0d:
                    89:0c:ee:51:a9:26:ec:9f:b2:03:6d:2d:57:a0:b5:
                    35:12:ad:5d:d8:51:19:57:fd:9a:4d:89:f1:ee:44:
                    38:9e:f8:a0:64:e5:f6:fa:30:08:73:3f:35:50:ee:
                    4b:49:a1:68:74:f5:e5:f9:e4:25:13:af:90:ea:74:
                    2e:58:db:5d:d5:04:b3:7f:f1:6a:27:21:6a:77:29:
                    27:01:fa:e4:c0:85:48:da:8e:06:e2:8f:b2:49:71:
                    c7:55:ed:89:8c:ab:95:6b:f4:40:49:88:d5:e1:07:
                    27:bd:a1:95:ec:9a:f6:d0:1d:83:da:dd:b4:2d:cd:
                    f3:62:a0:8c:4c:d2:0d:63:ab:7f:00:1d:25:1f:ae:
                    d0:3c:9c:f0:21:65:48:bb:73:cc:2a:24:11:75:81:
                    a4:76:55:26:30:5c:66:d3:95:7e:28:f5:94:9c:27:
                    ee:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:88:DF:51:CC:83:E6:2E:E0:2C:A8:92:1B:34:14:C4:64:1F:2A:0D
            X509v3 Authority Key Identifier:
                keyid:ED:7A:28:B5:CA:14:6B:E4:F2:06:7D:18:78:68:9F:7A:B7:5A:C3:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/ED7A28B5CA146BE4F2067D1878689F7AB75AC3F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED7A28B5CA146BE4F2067D1878689F7AB75AC3F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/323830343a353635383a3a2f33332d3333203d3e20323637393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5658::/33

    Signature Algorithm: sha256WithRSAEncryption
         df:e3:37:d2:ba:4c:08:5f:76:50:3b:7a:e0:cf:ef:1e:ac:90:
         57:1f:02:48:3d:33:40:06:ae:76:d1:fe:7f:4f:26:19:0c:39:
         37:49:4d:7b:81:2c:db:2f:d3:24:d5:c1:f4:cb:20:cf:0c:09:
         1f:f5:48:91:3b:48:c9:63:c3:9b:e0:8b:26:2e:e1:5e:12:48:
         43:98:3c:27:d7:a0:24:c9:c3:5b:57:3d:2f:cd:00:11:0a:ca:
         4c:09:ea:cf:0c:d9:ff:f4:8e:5a:78:f6:10:0b:99:cd:7d:c0:
         fe:cd:40:ba:dd:45:a3:8f:d3:7a:d2:17:5d:f8:50:9d:01:a2:
         13:6c:cb:01:56:1d:ba:fc:69:e7:1a:b6:42:e9:52:c2:a5:f6:
         c7:8b:9d:fc:2b:61:7c:7b:16:46:66:39:ed:69:53:ff:46:01:
         ee:e9:ad:1b:7e:7a:b2:15:bd:91:c1:9e:3a:2d:aa:03:da:74:
         c7:17:4f:3d:72:a7:dd:1b:41:df:6a:ca:99:41:c9:e8:16:8a:
         26:17:f2:c1:23:e4:87:2d:6d:97:a9:4f:6c:99:85:3a:8e:00:
         13:c5:f3:5b:10:c1:2d:75:53:3e:5b:fe:dd:c7:76:da:07:df:
         ff:25:23:95:42:fd:7c:87:d5:4b:12:2d:ab:53:7c:ea:6c:3a:
         93:f3:52:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 16:19:19 2025 by rpki-client