Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/323830343a3932303a3a2f33322d313238203d3e20323633303533.roa
File:                     323830343a3932303a3a2f33322d313238203d3e20323633303533.roa (raw, json)
Hash identifier:          A4veDEozCWPqHUpqSYM9W9Q85p4Af8ImGYweZ9ReUkw=
Subject key identifier:   7F:C6:06:AD:33:4F:88:C2:7B:9B:E1:04:28:FF:A6:1A:6E:A6:0E:FE
Certificate issuer:       /CN=7712A7E13E9B64DD9CFFF2779A9ABCE998490DE6
Certificate serial:       7C63FAA4AE60618E06613F5B7F5991F6A59FD49B
Authority key identifier: 77:12:A7:E1:3E:9B:64:DD:9C:FF:F2:77:9A:9A:BC:E9:98:49:0D:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7712A7E13E9B64DD9CFFF2779A9ABCE998490DE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/323830343a3932303a3a2f33322d313238203d3e20323633303533.roa
Signing time:             Wed 19 Mar 2025 21:03:46 +0000
ROA not before:           Wed 19 Mar 2025 20:58:46 +0000
ROA not after:            Wed 18 Mar 2026 21:03:46 +0000
asID:                     263053
IP address blocks:        2804:920::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:63:fa:a4:ae:60:61:8e:06:61:3f:5b:7f:59:91:f6:a5:9f:d4:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7712A7E13E9B64DD9CFFF2779A9ABCE998490DE6
        Validity
            Not Before: Mar 19 20:58:46 2025 GMT
            Not After : Mar 18 21:03:46 2026 GMT
        Subject: CN=7FC606AD334F88C27B9BE10428FFA61A6EA60EFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ad:25:d3:45:88:7f:2d:1f:a2:df:38:8a:e0:
                    8a:8d:09:c0:76:85:33:03:be:d4:49:1d:d9:3b:30:
                    c5:55:4a:68:ac:a7:fd:56:d6:21:8e:2d:11:49:07:
                    5b:7a:b1:59:24:62:b4:15:98:29:e5:ba:c2:97:79:
                    5c:34:ea:5f:9a:04:09:66:b4:4c:9f:91:85:77:54:
                    a0:16:f5:97:0a:c6:b5:22:05:03:69:77:36:ad:86:
                    53:5a:03:99:27:7d:69:6f:7e:42:61:44:cd:e5:e0:
                    21:15:10:f2:b4:fd:b7:9d:a1:9d:1e:a8:20:ad:60:
                    9c:d5:d9:67:2c:05:92:dd:b3:3e:d5:33:1a:f9:2d:
                    3b:4c:13:d1:c0:bc:c0:ce:3a:8c:d2:3d:bb:e2:94:
                    f7:84:e8:c0:b7:41:0b:fa:7d:5b:c6:cc:3f:89:be:
                    96:f3:19:04:8f:37:70:ea:21:83:a3:08:c5:8f:22:
                    f4:68:0a:03:c3:02:49:ff:c1:2d:6c:91:6d:f1:fa:
                    fe:8c:33:68:a4:bb:59:f1:dc:11:ef:83:36:9f:4c:
                    1e:f9:de:6b:07:82:e2:08:b3:29:f6:f1:72:85:54:
                    30:b7:0a:cf:e3:96:63:d9:f3:f2:ca:2b:cf:ea:f8:
                    f0:ca:3b:9e:5f:fb:94:30:dc:c8:bf:2a:94:65:0b:
                    32:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:C6:06:AD:33:4F:88:C2:7B:9B:E1:04:28:FF:A6:1A:6E:A6:0E:FE
            X509v3 Authority Key Identifier:
                keyid:77:12:A7:E1:3E:9B:64:DD:9C:FF:F2:77:9A:9A:BC:E9:98:49:0D:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/7712A7E13E9B64DD9CFFF2779A9ABCE998490DE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7712A7E13E9B64DD9CFFF2779A9ABCE998490DE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/323830343a3932303a3a2f33322d313238203d3e20323633303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:920::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:5d:28:ac:6b:42:10:00:76:32:1f:12:9b:00:44:d1:b2:ff:
         34:60:28:64:51:a7:4d:54:08:a4:83:53:a9:6b:f0:df:27:55:
         1f:85:a8:d4:47:4a:4c:ba:cb:59:a2:29:b5:08:36:7f:96:09:
         ce:45:34:4e:c5:37:be:8a:fd:7c:00:b8:44:d6:be:22:71:f9:
         79:af:b8:9a:7b:d0:02:67:19:c8:57:6d:4b:4d:fb:d5:9f:69:
         03:bc:35:f4:8c:a5:59:40:55:00:20:a2:57:b0:86:72:c9:01:
         2d:99:97:d0:62:d9:91:bf:6d:1e:4a:4f:6f:0c:d4:2f:f3:0d:
         1c:cd:70:07:67:ca:2b:0b:96:d0:4a:00:c2:51:94:78:9e:5e:
         df:c1:61:98:38:b8:98:99:46:d8:d1:a9:e4:21:29:f9:f4:fb:
         c0:9a:c4:b3:9b:58:04:fe:02:b5:32:f7:56:95:b2:8b:05:49:
         b8:5a:86:56:e7:5c:3f:e7:29:0f:9e:13:4e:fc:c1:16:ca:b6:
         8e:09:d4:07:ef:75:66:a0:29:57:7c:f4:dc:d8:8f:90:1b:01:
         1d:ac:62:19:57:49:f9:8e:10:74:80:00:c6:88:13:38:f6:51:
         30:cf:f2:89:8c:a5:45:49:af:56:f8:65:ff:a9:6f:f4:1d:56:
         1c:b7:bc:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:33:25 2025 by rpki-client