Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/0/323830343a363461303a343030303a3a2f33342d3334203d3e20323639343339.roa
File:                     323830343a363461303a343030303a3a2f33342d3334203d3e20323639343339.roa (raw, json)
Hash identifier:          wtCjsGhw3QoNBCfKbHfXWIr/JnB8J/D0bZZIvqq/pGM=
Subject key identifier:   2C:0B:80:A6:D1:7F:B0:0A:52:47:7B:78:38:FD:8E:4B:AA:0C:66:6F
Certificate issuer:       /CN=C9CF4AE79887639859FD00106058BDCEBA1002AC
Certificate serial:       7952CB60B2624B7A08DDFE8ECE676ED5DD6099C1
Authority key identifier: C9:CF:4A:E7:98:87:63:98:59:FD:00:10:60:58:BD:CE:BA:10:02:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9CF4AE79887639859FD00106058BDCEBA1002AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/0/323830343a363461303a343030303a3a2f33342d3334203d3e20323639343339.roa
Signing time:             Wed 22 Jan 2025 12:55:53 +0000
ROA not before:           Wed 22 Jan 2025 12:50:53 +0000
ROA not after:            Wed 21 Jan 2026 12:55:53 +0000
asID:                     269439
IP address blocks:        2804:64a0:4000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:52:cb:60:b2:62:4b:7a:08:dd:fe:8e:ce:67:6e:d5:dd:60:99:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9CF4AE79887639859FD00106058BDCEBA1002AC
        Validity
            Not Before: Jan 22 12:50:53 2025 GMT
            Not After : Jan 21 12:55:53 2026 GMT
        Subject: CN=2C0B80A6D17FB00A52477B7838FD8E4BAA0C666F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fc:77:45:88:dd:58:95:01:f6:bb:80:f0:7e:
                    81:16:45:77:0a:09:c4:82:8a:ff:5b:95:b4:6d:8a:
                    3c:99:36:3c:4d:39:7e:7c:92:87:88:98:6d:99:ea:
                    66:0a:1d:e0:c9:32:2c:4b:11:b4:26:f3:a8:31:e3:
                    52:8f:4f:7a:bb:19:16:7b:2a:86:a2:2b:53:49:1e:
                    ec:41:25:09:06:6a:9f:90:cf:08:d0:2e:16:5d:54:
                    0a:fd:28:39:ed:45:1e:15:d0:c0:50:89:a0:b8:a8:
                    79:95:81:30:45:4d:f3:b6:e0:11:ba:ec:39:60:28:
                    11:97:5d:3d:8d:ea:c3:2a:5f:f5:93:29:34:73:80:
                    12:e1:c1:fc:86:21:fa:3f:1a:e3:ab:d2:8f:d8:5f:
                    23:4c:98:0c:fb:70:6e:da:6c:3b:4e:e4:f3:cb:5f:
                    b8:12:bb:75:c6:ca:9f:7c:23:56:95:c4:48:68:35:
                    93:fd:13:2b:8a:4c:42:a6:5f:91:7f:8f:82:ea:be:
                    98:46:b9:90:34:ec:77:77:c9:9a:84:9e:46:0b:0d:
                    0a:1b:57:21:77:e4:f5:22:08:c1:c9:c1:da:a1:bf:
                    e4:ca:c8:40:b8:51:07:a4:d6:f3:0d:7a:50:90:5c:
                    3d:6a:55:88:91:1f:6f:e7:d3:03:74:1c:b7:62:b0:
                    39:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:0B:80:A6:D1:7F:B0:0A:52:47:7B:78:38:FD:8E:4B:AA:0C:66:6F
            X509v3 Authority Key Identifier:
                keyid:C9:CF:4A:E7:98:87:63:98:59:FD:00:10:60:58:BD:CE:BA:10:02:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/0/C9CF4AE79887639859FD00106058BDCEBA1002AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9CF4AE79887639859FD00106058BDCEBA1002AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/0/323830343a363461303a343030303a3a2f33342d3334203d3e20323639343339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:64a0:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         68:5f:fe:65:a3:e0:c3:8d:ed:fd:b3:8b:98:1c:7c:12:dc:b7:
         ed:d6:da:66:2c:b3:a3:4f:18:13:15:be:a7:f4:ed:6a:e9:b9:
         5f:4c:07:0f:42:b1:66:d8:53:60:27:da:ae:3a:24:b7:2d:b4:
         50:aa:e9:84:19:23:3e:6a:45:de:66:cc:9b:62:9f:8f:a0:99:
         ef:7c:98:e3:f9:64:5b:af:9c:96:d7:51:c7:18:29:55:dd:2f:
         87:d2:b1:d0:6a:10:8e:93:37:6c:b7:7a:c3:1a:62:a8:60:ed:
         98:59:8b:9a:5e:fd:2b:8a:4e:8d:d7:fa:cc:ad:15:19:97:fa:
         56:5f:47:f7:1a:d0:e2:a6:5e:c9:cf:be:aa:72:1a:bc:d6:93:
         55:a6:ef:6a:61:eb:dd:65:6e:eb:b3:4d:47:2e:dc:35:41:21:
         b3:44:6a:11:90:44:f6:35:19:b6:23:35:39:2c:55:22:5e:88:
         d2:4b:95:56:53:d8:c9:fe:42:92:bd:07:4e:eb:11:8d:7a:b8:
         ff:8b:e5:7f:d1:cb:d4:6d:7b:45:3f:a3:2f:28:09:5f:b9:03:
         75:25:24:81:c5:7b:76:2a:7a:71:92:b6:40:b4:2e:47:42:4f:
         02:e9:9c:36:85:bc:32:53:5f:c4:13:a8:d3:45:0f:5b:bc:48:
         d7:61:56:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:14:55 2025 by rpki-client