Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/323830343a366330343a663030303a3a2f33372d3337203d3e20323730343430.roa
File:                     323830343a366330343a663030303a3a2f33372d3337203d3e20323730343430.roa (raw, json)
Hash identifier:          tHaFtg3a+iDVAORJdlWjb9PVSStnS6+a0kiz/Mp3ySc=
Subject key identifier:   EA:55:B9:E7:07:A4:F1:E3:7E:02:75:00:B3:CC:E3:96:D9:E7:D0:56
Certificate issuer:       /CN=88F8C25C5F36E30578C91973467F9861B5E60B72
Certificate serial:       75C8CB3F6317E18AF0B6B9F548B7B890181EDFA0
Authority key identifier: 88:F8:C2:5C:5F:36:E3:05:78:C9:19:73:46:7F:98:61:B5:E6:0B:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88F8C25C5F36E30578C91973467F9861B5E60B72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/323830343a366330343a663030303a3a2f33372d3337203d3e20323730343430.roa
Signing time:             Sat 14 Sep 2024 17:37:31 +0000
ROA not before:           Sat 14 Sep 2024 17:32:31 +0000
ROA not after:            Sat 13 Sep 2025 17:37:31 +0000
asID:                     270440
IP address blocks:        2804:6c04:f000::/37 maxlen: 37
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:c8:cb:3f:63:17:e1:8a:f0:b6:b9:f5:48:b7:b8:90:18:1e:df:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88F8C25C5F36E30578C91973467F9861B5E60B72
        Validity
            Not Before: Sep 14 17:32:31 2024 GMT
            Not After : Sep 13 17:37:31 2025 GMT
        Subject: CN=EA55B9E707A4F1E37E027500B3CCE396D9E7D056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:1b:5d:c2:71:8a:47:7e:73:9c:e3:f9:2e:a8:
                    96:46:a0:0d:12:b1:98:81:0e:87:af:80:45:df:8e:
                    30:f2:d7:88:f4:bc:9b:15:75:b5:c2:ed:9b:2e:6a:
                    15:31:bb:3b:66:8b:75:97:3d:22:b8:da:c8:4c:e2:
                    92:3a:39:df:27:b1:00:94:e1:73:21:bf:9b:bf:5e:
                    b5:fb:e9:bc:12:b4:ed:22:79:3f:e5:86:af:86:73:
                    ca:e4:bf:02:1b:82:12:d3:3d:15:ff:1e:11:dc:f7:
                    34:c5:a7:41:f2:d3:35:22:21:20:7a:2e:37:69:f5:
                    8f:8f:cc:4c:d0:59:64:be:4f:07:82:38:91:14:e1:
                    33:35:13:e8:11:3b:cb:37:58:35:3c:f0:0c:c8:ae:
                    fe:fd:6a:1b:6f:b4:c2:72:98:0d:b8:97:13:d0:65:
                    8a:d2:dd:8a:b7:fe:85:33:72:f6:25:9f:23:11:27:
                    ff:85:97:b2:e1:bf:08:f8:4e:59:ee:ae:db:88:5c:
                    54:2e:22:9b:5f:e1:12:8e:88:60:08:d7:f9:b8:49:
                    53:20:44:8a:ea:61:37:45:0c:28:2f:8f:59:51:05:
                    84:86:3d:b6:1f:c9:f4:e8:34:b6:51:6a:0a:fe:c4:
                    e7:a8:cb:f1:49:b4:99:13:7d:ae:7f:db:7d:d1:dc:
                    11:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:55:B9:E7:07:A4:F1:E3:7E:02:75:00:B3:CC:E3:96:D9:E7:D0:56
            X509v3 Authority Key Identifier:
                keyid:88:F8:C2:5C:5F:36:E3:05:78:C9:19:73:46:7F:98:61:B5:E6:0B:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/88F8C25C5F36E30578C91973467F9861B5E60B72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88F8C25C5F36E30578C91973467F9861B5E60B72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/323830343a366330343a663030303a3a2f33372d3337203d3e20323730343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c04:f000::/37

    Signature Algorithm: sha256WithRSAEncryption
         39:d9:5f:d7:c7:99:6c:6a:73:8a:8d:77:38:b5:bb:64:69:4c:
         02:78:c5:c5:72:54:17:f3:3f:79:6b:36:f2:4e:97:87:16:f9:
         46:27:76:80:bf:91:04:1b:74:59:ea:19:ab:a0:c6:b4:31:ad:
         66:f4:e2:76:42:82:af:ee:3d:df:2c:9c:43:1a:23:00:13:48:
         de:b6:65:2c:13:61:65:29:2f:bd:ea:3f:08:c8:a1:37:35:0c:
         ba:6d:5d:ea:d3:f1:8e:8d:1c:31:14:e3:c8:30:50:1a:90:7c:
         ee:b3:4e:bf:f3:99:84:82:6f:99:f3:4f:43:9d:93:89:1e:e0:
         6b:44:60:a9:46:d9:cc:72:7e:45:56:47:09:c4:78:e6:dc:8c:
         e7:0e:45:58:92:c4:2b:7e:11:0b:65:a8:52:a4:ba:b9:30:eb:
         e4:84:1b:1a:42:4b:a2:19:e1:91:bb:43:36:cc:8e:97:9b:a2:
         7c:89:66:d9:d5:7a:3d:9a:7c:47:59:15:b7:5c:2a:a0:aa:86:
         3b:fa:92:14:88:a3:d9:d3:57:c5:be:f8:86:c1:56:53:1b:86:
         f6:db:f8:72:13:ca:bf:7f:57:f1:0e:01:7e:e1:ef:4b:61:1d:
         ba:04:8c:3b:77:32:bd:8e:bc:e5:22:d4:be:f3:1e:aa:8a:55:
         b9:16:33:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:14:09 2025 by rpki-client