Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HFeC61ypvTMds8UMuZPpgA3ijbqr51LqjWcfgFo5BQip/0/323830343a333162383a3a2f33322d3438203d3e20323635303333.roa
File:                     323830343a333162383a3a2f33322d3438203d3e20323635303333.roa (raw, json)
Hash identifier:          BNZpzlEIQGsFuLkBGOI0BFw0jNrx0C5XnNZ0rCIWUTE=
Subject key identifier:   F5:09:24:3D:E3:1F:E2:74:D9:F9:A3:5C:E9:18:78:50:70:17:6B:C4
Certificate issuer:       /CN=7ED7FB77C6430C0662EFBB0086DC22532C394D9F
Certificate serial:       03A5085F940A92AF14CF6D6EFD6F22DAEAC794F3
Authority key identifier: 7E:D7:FB:77:C6:43:0C:06:62:EF:BB:00:86:DC:22:53:2C:39:4D:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ED7FB77C6430C0662EFBB0086DC22532C394D9F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HFeC61ypvTMds8UMuZPpgA3ijbqr51LqjWcfgFo5BQip/0/323830343a333162383a3a2f33322d3438203d3e20323635303333.roa
Signing time:             Tue 02 Jul 2024 13:29:47 +0000
ROA not before:           Tue 02 Jul 2024 13:24:47 +0000
ROA not after:            Tue 01 Jul 2025 13:29:47 +0000
asID:                     265033
IP address blocks:        2804:31b8::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:a5:08:5f:94:0a:92:af:14:cf:6d:6e:fd:6f:22:da:ea:c7:94:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ED7FB77C6430C0662EFBB0086DC22532C394D9F
        Validity
            Not Before: Jul  2 13:24:47 2024 GMT
            Not After : Jul  1 13:29:47 2025 GMT
        Subject: CN=F509243DE31FE274D9F9A35CE918785070176BC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:e9:d5:02:26:4e:00:5e:52:61:c4:33:f6:25:
                    e5:22:27:e8:7d:b7:6c:59:5e:cc:f8:f7:25:d6:64:
                    fb:f3:a3:e4:fe:a2:df:1e:fa:e0:f3:f7:12:15:b3:
                    41:75:84:0e:59:f7:ac:41:1e:c8:31:d0:de:8e:2c:
                    7a:13:5c:ac:0b:74:a3:12:3a:7f:1c:6c:7c:40:9e:
                    34:4e:36:e3:37:a4:e9:f6:ae:f1:86:5a:a2:83:a9:
                    10:6d:cb:4d:fc:b6:a6:88:f6:22:62:d4:58:7f:4e:
                    1c:51:b0:92:15:8a:76:87:57:2d:19:79:12:e7:f4:
                    c7:fa:bb:20:06:26:c7:8d:86:63:44:7c:3f:ed:8c:
                    d8:60:c0:de:c9:65:99:df:a5:30:32:a3:a7:95:06:
                    35:ca:ee:c5:03:4a:4f:80:b4:cf:9f:30:8c:a9:a3:
                    77:33:38:11:66:9b:30:f7:3f:4f:9c:31:af:1d:64:
                    65:dd:8f:a9:98:27:03:fb:54:a3:b0:5a:88:5e:5c:
                    7d:a1:d6:5f:b1:5b:91:2c:45:cb:89:a6:25:9f:15:
                    6f:61:30:a3:64:26:d7:b9:15:5f:79:79:cb:b2:b5:
                    09:be:c3:e9:77:88:34:00:ba:e7:ec:a8:36:d4:89:
                    ce:ce:72:5b:0b:47:52:d4:4a:c7:41:2f:5d:a2:c4:
                    da:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:09:24:3D:E3:1F:E2:74:D9:F9:A3:5C:E9:18:78:50:70:17:6B:C4
            X509v3 Authority Key Identifier:
                keyid:7E:D7:FB:77:C6:43:0C:06:62:EF:BB:00:86:DC:22:53:2C:39:4D:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HFeC61ypvTMds8UMuZPpgA3ijbqr51LqjWcfgFo5BQip/0/7ED7FB77C6430C0662EFBB0086DC22532C394D9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ED7FB77C6430C0662EFBB0086DC22532C394D9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFeC61ypvTMds8UMuZPpgA3ijbqr51LqjWcfgFo5BQip/0/323830343a333162383a3a2f33322d3438203d3e20323635303333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:31b8::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:32:69:1b:ec:0e:a6:44:20:93:10:f2:7d:67:1f:5a:f0:03:
         3b:35:b9:6d:0c:0c:3a:74:5c:ca:83:2b:22:3f:70:eb:d0:9b:
         86:e4:13:85:19:b5:a0:3b:ca:b9:7b:79:f0:9b:73:e8:4e:4e:
         0a:9a:3d:26:31:34:5c:91:58:e3:43:30:6d:d9:85:66:6b:f3:
         6c:f3:2f:5b:f1:ea:11:83:40:dd:40:c6:6f:19:23:22:8d:2d:
         d2:b6:6f:bb:ba:a3:ba:54:eb:31:ce:cf:da:cb:a1:59:61:ae:
         07:d1:78:0a:2a:bb:e9:15:c2:01:59:1a:6a:ae:33:0f:7d:eb:
         77:08:4f:f1:a5:63:0f:4e:46:5f:f0:d3:42:27:ad:16:70:0a:
         a5:9c:9e:0a:68:8d:80:f0:46:69:23:0e:42:3d:e7:df:46:4c:
         02:4f:ab:ac:1a:0a:75:73:01:51:f1:9d:41:51:2f:42:be:48:
         2a:39:42:a5:27:3b:32:e5:0c:84:46:f2:ce:83:6b:09:d8:75:
         93:5d:4b:f3:b0:d8:1b:e8:4f:75:c9:d2:b9:7a:1d:60:42:1a:
         63:c9:c7:a3:94:e3:33:2a:06:25:87:ed:c8:48:70:b0:b9:e8:
         1f:60:bd:ad:59:3d:7b:88:87:24:41:d7:47:51:26:ad:ea:7e:
         e1:3e:ab:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:26:48 2025 by rpki-client