Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HbVaYTz4f318BQgdfUHnXDxSkRPM4XHpCkAZieAAbSWR/0/323830343a373765633a3a2f33322d3438203d3e20323731323038.roa
File:                     323830343a373765633a3a2f33322d3438203d3e20323731323038.roa (raw, json)
Hash identifier:          aHnR2sjYUlVflXJ2bCmgzD3cFsLBAa8dt2S6+Vz+ONs=
Subject key identifier:   86:5C:49:42:2B:1B:A9:45:AB:B8:6A:AD:9E:7D:47:29:BD:A2:74:FF
Certificate issuer:       /CN=65A0E0483F8FEB1975830B245B8AE1088D76B211
Certificate serial:       512168DF5516E558B6829A4BDEBCF5ECFB8656D5
Authority key identifier: 65:A0:E0:48:3F:8F:EB:19:75:83:0B:24:5B:8A:E1:08:8D:76:B2:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65A0E0483F8FEB1975830B245B8AE1088D76B211.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HbVaYTz4f318BQgdfUHnXDxSkRPM4XHpCkAZieAAbSWR/0/323830343a373765633a3a2f33322d3438203d3e20323731323038.roa
Signing time:             Wed 04 Dec 2024 19:01:06 +0000
ROA not before:           Wed 04 Dec 2024 18:56:06 +0000
ROA not after:            Wed 03 Dec 2025 19:01:06 +0000
asID:                     271208
IP address blocks:        2804:77ec::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:21:68:df:55:16:e5:58:b6:82:9a:4b:de:bc:f5:ec:fb:86:56:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65A0E0483F8FEB1975830B245B8AE1088D76B211
        Validity
            Not Before: Dec  4 18:56:06 2024 GMT
            Not After : Dec  3 19:01:06 2025 GMT
        Subject: CN=865C49422B1BA945ABB86AAD9E7D4729BDA274FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:2a:52:50:67:03:41:8c:4d:a3:6b:18:17:a3:
                    75:eb:40:b1:69:45:ba:44:92:d0:c3:1f:75:01:f2:
                    92:3b:18:d3:8d:cb:46:00:76:74:22:5a:49:0b:ec:
                    77:6e:65:52:12:b1:80:46:d0:20:21:e5:52:80:96:
                    ea:e6:ce:48:6a:da:80:19:64:a8:b3:66:e5:5d:06:
                    a1:14:a3:f0:e7:e3:ba:33:7d:dd:cf:cf:0f:e0:44:
                    10:d2:ec:83:01:56:a2:c3:59:cf:e6:cc:21:2c:af:
                    cc:13:90:d6:9b:7e:c3:49:6f:bf:d3:b6:ca:2c:3e:
                    59:42:1e:c5:93:16:95:60:ab:c5:81:7f:77:df:84:
                    9e:c0:c7:27:a7:c8:d2:a9:6f:7f:7e:c2:62:0e:0d:
                    1b:48:48:7a:b2:41:a5:a6:d6:e9:e7:8c:ca:fb:b0:
                    30:65:18:5a:ec:33:b8:27:91:aa:58:1f:56:6d:9a:
                    19:87:a8:1d:ac:75:84:73:34:aa:9d:fe:59:4f:b6:
                    1a:dc:5f:3e:b1:61:37:a7:11:97:48:7d:01:e8:a5:
                    c0:e9:fd:eb:5c:7f:67:7e:16:94:f0:c5:df:d6:c0:
                    c5:3a:f5:d4:b1:36:59:76:b6:1d:4d:ab:38:94:f7:
                    85:37:91:29:9e:a2:c4:2d:b5:3e:e9:6d:cc:95:61:
                    b0:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:5C:49:42:2B:1B:A9:45:AB:B8:6A:AD:9E:7D:47:29:BD:A2:74:FF
            X509v3 Authority Key Identifier:
                keyid:65:A0:E0:48:3F:8F:EB:19:75:83:0B:24:5B:8A:E1:08:8D:76:B2:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HbVaYTz4f318BQgdfUHnXDxSkRPM4XHpCkAZieAAbSWR/0/65A0E0483F8FEB1975830B245B8AE1088D76B211.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65A0E0483F8FEB1975830B245B8AE1088D76B211.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HbVaYTz4f318BQgdfUHnXDxSkRPM4XHpCkAZieAAbSWR/0/323830343a373765633a3a2f33322d3438203d3e20323731323038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:77ec::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:7b:fe:a4:79:2a:07:4a:45:db:d5:43:13:26:96:31:88:ad:
         f7:b1:b8:ed:b0:6e:0b:ad:84:dd:63:cc:78:0b:fd:e8:48:0d:
         cf:e8:71:0d:6e:c2:f5:50:77:e0:92:12:a8:a3:4d:c4:43:79:
         99:41:7c:d1:3e:84:19:4d:60:5a:2d:9b:e9:4d:3b:2a:df:c3:
         b5:c6:63:e6:5b:46:08:05:c5:35:0f:44:cc:e0:2b:c6:11:62:
         65:f5:42:8f:bb:f9:5c:b3:bb:13:88:cc:f3:e6:e8:77:41:cb:
         60:1e:63:38:fe:e8:9e:95:d8:91:a3:86:87:a2:28:22:49:aa:
         d4:3f:39:ed:4b:fc:f9:8d:08:d2:d2:46:e6:69:48:85:ac:dd:
         1e:03:8f:c5:e9:57:30:32:2c:ed:1d:c5:39:91:55:fe:e1:15:
         81:51:71:09:81:e4:5c:d5:d1:71:d0:80:41:4f:55:e6:c4:c0:
         90:2e:c0:82:8d:b4:a4:33:f2:e6:43:dc:0f:f7:7e:fa:8a:c2:
         77:5c:78:2e:3d:f8:aa:02:ba:f3:5a:43:7c:fd:60:d5:69:e5:
         34:68:25:a0:4b:bc:52:3b:6a:8e:78:ef:4f:20:3b:ca:90:b0:
         63:ac:97:4c:09:c5:fa:cc:19:ad:50:e7:fb:93:02:87:5c:65:
         81:3a:6a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 08:31:05 2025 by rpki-client