Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/0/323830343a363461303a3a2f33322d3332203d3e20323639343339.roa
File:                     323830343a363461303a3a2f33322d3332203d3e20323639343339.roa (raw, json)
Hash identifier:          V5LoCABebn+54qVBR/6W24DlutZVe2zXdIbVdk3i1Rg=
Subject key identifier:   6B:31:C0:53:FB:58:DE:CA:B3:88:EE:7E:2F:22:C0:FC:EA:36:9D:59
Certificate issuer:       /CN=C9CF4AE79887639859FD00106058BDCEBA1002AC
Certificate serial:       64C95F46823CB1D56B15A8A9711924447B3F7D7E
Authority key identifier: C9:CF:4A:E7:98:87:63:98:59:FD:00:10:60:58:BD:CE:BA:10:02:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9CF4AE79887639859FD00106058BDCEBA1002AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/0/323830343a363461303a3a2f33322d3332203d3e20323639343339.roa
Signing time:             Wed 22 Jan 2025 12:55:56 +0000
ROA not before:           Wed 22 Jan 2025 12:50:56 +0000
ROA not after:            Wed 21 Jan 2026 12:55:56 +0000
asID:                     269439
IP address blocks:        2804:64a0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:c9:5f:46:82:3c:b1:d5:6b:15:a8:a9:71:19:24:44:7b:3f:7d:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9CF4AE79887639859FD00106058BDCEBA1002AC
        Validity
            Not Before: Jan 22 12:50:56 2025 GMT
            Not After : Jan 21 12:55:56 2026 GMT
        Subject: CN=6B31C053FB58DECAB388EE7E2F22C0FCEA369D59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1b:2f:4a:61:0f:e7:11:c6:2a:4b:42:bd:c9:
                    ed:92:90:11:a8:ee:74:49:50:98:d9:92:29:58:ad:
                    46:ea:25:76:64:50:d3:8a:48:fd:47:e8:80:a8:02:
                    71:18:53:30:21:7e:ed:03:5a:03:be:8f:a8:60:2d:
                    a4:11:c8:cf:71:68:d7:91:e1:d6:f0:55:1c:4f:19:
                    0d:2f:a9:5c:31:03:2b:75:87:f9:af:7e:a8:09:c1:
                    ad:a1:e2:5f:8d:21:9a:5c:41:83:22:46:dd:46:b0:
                    d1:74:2e:71:51:8a:fa:97:2b:3d:88:74:a9:5f:e2:
                    ca:f7:cb:90:4a:f9:07:cd:41:b2:7a:9c:64:b6:49:
                    e1:42:6a:b5:f3:db:4e:5f:2d:2b:5c:d4:43:aa:00:
                    f5:a4:7c:ca:6f:d4:22:c6:08:9b:43:a2:5e:c6:b9:
                    1e:fa:94:4d:0f:1a:be:48:05:f2:b0:63:60:4e:6e:
                    a3:ba:bb:c7:af:85:60:a4:59:77:ce:94:e3:f7:a3:
                    12:21:d0:05:db:57:52:ee:93:9e:f9:03:b2:01:e0:
                    4a:3e:27:6b:1c:69:7c:4c:18:05:e7:5e:b4:b5:7b:
                    b3:6b:7a:16:d3:4f:a2:e9:89:b7:93:f9:c4:c7:41:
                    37:e6:9d:7c:91:d0:9a:e9:38:be:ae:5a:50:ba:d8:
                    75:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:31:C0:53:FB:58:DE:CA:B3:88:EE:7E:2F:22:C0:FC:EA:36:9D:59
            X509v3 Authority Key Identifier:
                keyid:C9:CF:4A:E7:98:87:63:98:59:FD:00:10:60:58:BD:CE:BA:10:02:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/0/C9CF4AE79887639859FD00106058BDCEBA1002AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9CF4AE79887639859FD00106058BDCEBA1002AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/0/323830343a363461303a3a2f33322d3332203d3e20323639343339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:64a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:a1:65:b9:b1:01:6d:95:6c:9f:ac:bc:e4:1b:26:3a:33:d8:
         80:c8:4c:a4:ca:13:fd:51:6e:ef:e4:ab:3c:db:ae:c9:4b:4a:
         19:84:a7:e0:f4:8f:b0:93:d6:8b:b5:32:f7:d7:cf:09:30:a4:
         15:ae:d1:6c:9c:d7:28:30:ac:64:0a:3f:c3:0d:77:81:ce:cc:
         2a:f4:a7:0f:13:ef:4a:6b:1a:45:3f:69:48:17:09:58:80:dc:
         f8:7b:94:a8:ef:7a:d1:0c:e0:f5:6b:fa:4d:59:19:4f:38:6f:
         28:70:a7:50:3b:d1:6e:aa:cb:47:34:60:7b:06:ca:61:51:42:
         40:ce:55:a0:21:b1:52:db:11:b7:c8:d5:c8:06:ec:f6:4c:69:
         87:42:f8:4b:bb:7d:8f:cc:03:0c:63:df:78:50:00:81:8d:e2:
         bc:74:25:79:f5:aa:00:c9:c4:64:7e:7a:a1:a4:86:2d:70:dd:
         49:7a:20:61:e3:0d:9e:96:ac:68:7d:eb:8d:1d:3d:03:54:e8:
         ae:82:29:37:b6:be:e6:2b:87:7b:36:c6:8a:7f:78:4a:c9:26:
         c3:48:07:44:df:b8:34:22:05:78:a5:1f:a1:43:e2:91:cf:a7:
         06:f1:1f:31:2c:0b:b4:0e:21:b0:57:ca:4d:15:d7:2f:2d:1a:
         be:1b:0e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:34:07 2025 by rpki-client