Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HadFShe2BY5mx3E748UfkJX6nzQxJLCVFZ9vksJ1Tmc/0/323830343a353833343a3a2f33332d3333203d3e20323638313133.roa
File:                     323830343a353833343a3a2f33332d3333203d3e20323638313133.roa (raw, json)
Hash identifier:          Wr8jNFqPYDG4bqaUctdA9aKPDuvrRj+JGbj2A2UQqHI=
Subject key identifier:   72:D2:DD:11:6B:80:82:64:22:68:6F:67:E8:D4:5A:82:80:6B:75:1C
Certificate issuer:       /CN=A39AA144A61634B60A33E417B9A20C7C061D86A3
Certificate serial:       2FA02AE3E6677DA22D658EA39BDEFE08D6FCEF94
Authority key identifier: A3:9A:A1:44:A6:16:34:B6:0A:33:E4:17:B9:A2:0C:7C:06:1D:86:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A39AA144A61634B60A33E417B9A20C7C061D86A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HadFShe2BY5mx3E748UfkJX6nzQxJLCVFZ9vksJ1Tmc/0/323830343a353833343a3a2f33332d3333203d3e20323638313133.roa
Signing time:             Wed 26 Mar 2025 17:01:30 +0000
ROA not before:           Wed 26 Mar 2025 16:56:30 +0000
ROA not after:            Wed 25 Mar 2026 17:01:30 +0000
asID:                     268113
IP address blocks:        2804:5834::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:a0:2a:e3:e6:67:7d:a2:2d:65:8e:a3:9b:de:fe:08:d6:fc:ef:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A39AA144A61634B60A33E417B9A20C7C061D86A3
        Validity
            Not Before: Mar 26 16:56:30 2025 GMT
            Not After : Mar 25 17:01:30 2026 GMT
        Subject: CN=72D2DD116B80826422686F67E8D45A82806B751C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:76:db:fa:72:b9:d5:e7:cc:3a:e7:71:0e:ba:
                    96:8b:35:99:ef:1e:da:7d:b2:be:69:e3:08:8f:84:
                    6c:79:1c:e7:1a:94:00:0d:21:6a:70:a1:96:aa:2f:
                    cb:da:3f:c1:c0:b4:1c:e5:a5:eb:9c:7d:02:a7:be:
                    44:30:0e:19:58:db:85:07:46:5c:d7:f9:aa:9f:87:
                    f0:31:31:26:46:16:e2:e5:a7:ac:31:a6:a5:59:7e:
                    66:93:64:4c:4c:d9:48:87:9a:3d:a8:cd:0f:b6:e5:
                    22:eb:b2:b1:a1:9c:a7:da:fc:20:77:20:16:38:9d:
                    a5:e6:82:5b:ac:d0:3c:d3:18:4d:70:5a:8d:7d:f8:
                    a9:23:e0:b6:63:ea:7d:96:08:7f:17:06:d8:6a:b7:
                    fd:67:b7:04:20:78:c4:b0:67:0e:eb:35:64:58:c5:
                    03:03:1c:5f:e4:32:16:ee:e2:f9:37:42:86:a4:39:
                    0c:7a:7a:32:1d:4f:68:67:5e:40:a5:47:3c:22:37:
                    d0:66:7a:d8:6a:76:de:69:25:70:a6:d4:35:1b:6b:
                    3d:4e:8d:f6:a8:5a:92:01:15:70:19:04:db:cc:57:
                    b9:c5:99:b3:80:59:bc:a9:95:a4:ee:2d:72:14:d0:
                    4f:17:2e:29:28:fd:84:64:26:8e:33:f8:9b:76:f9:
                    69:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:D2:DD:11:6B:80:82:64:22:68:6F:67:E8:D4:5A:82:80:6B:75:1C
            X509v3 Authority Key Identifier:
                keyid:A3:9A:A1:44:A6:16:34:B6:0A:33:E4:17:B9:A2:0C:7C:06:1D:86:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HadFShe2BY5mx3E748UfkJX6nzQxJLCVFZ9vksJ1Tmc/0/A39AA144A61634B60A33E417B9A20C7C061D86A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A39AA144A61634B60A33E417B9A20C7C061D86A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HadFShe2BY5mx3E748UfkJX6nzQxJLCVFZ9vksJ1Tmc/0/323830343a353833343a3a2f33332d3333203d3e20323638313133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5834::/33

    Signature Algorithm: sha256WithRSAEncryption
         97:1c:60:88:7c:d6:87:5d:3a:88:99:2a:15:90:3c:c6:d2:35:
         8e:9d:73:6a:ca:b1:69:06:64:37:bf:eb:42:e6:a0:6d:51:a8:
         77:68:ec:16:9b:19:c5:22:01:0b:f0:c7:77:dd:55:f5:5b:a3:
         5a:2e:ef:1c:f9:26:3e:29:b6:c0:6f:fc:8c:4d:ad:cc:8b:2e:
         1e:66:83:37:2a:ab:44:3b:df:86:df:ad:3b:ab:93:82:9a:bb:
         65:9e:a0:37:95:6c:d2:ac:f2:b7:3a:27:59:b2:df:8e:cd:c5:
         e7:3e:a3:33:ad:39:77:f1:d9:19:66:60:db:28:5a:75:c5:24:
         ba:9d:17:e1:36:26:0c:0e:ff:94:05:e3:2d:41:0b:43:44:a9:
         dd:5f:64:05:af:52:57:b5:56:1e:8e:f4:14:35:94:99:68:fe:
         7f:ee:4c:f4:88:46:77:3c:44:69:68:a9:22:f9:ac:b3:51:45:
         e7:d0:c0:77:07:b7:96:31:ed:90:fa:78:0c:45:43:20:71:a7:
         3b:0f:de:c9:ee:13:9c:b5:70:6b:a7:79:c0:13:b5:54:84:14:
         15:b5:51:f2:6b:89:80:ac:a8:ff:5d:1d:42:e5:4f:8c:26:80:
         6c:9c:34:19:df:0c:c5:ec:e8:e2:4a:e1:9f:7c:79:90:4a:b1:
         fb:50:47:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 01:22:44 2025 by rpki-client