Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/323830343a373462303a343030303a3a2f33342d3334203d3e20323730393937.roa
File:                     323830343a373462303a343030303a3a2f33342d3334203d3e20323730393937.roa (raw, json)
Hash identifier:          t+RdKCRK0wpZYRijqw+L9AvYKK5tpS4HSoDk7RvOuS8=
Subject key identifier:   69:70:F2:A2:01:C7:68:CC:71:25:7C:32:99:9E:69:A9:07:0E:04:77
Certificate issuer:       /CN=7F6FAE9CA33ED01F7D117FD35091BA8AF44FF0A2
Certificate serial:       59CFA3A6DFDA5307F0999108CD1021084865A734
Authority key identifier: 7F:6F:AE:9C:A3:3E:D0:1F:7D:11:7F:D3:50:91:BA:8A:F4:4F:F0:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F6FAE9CA33ED01F7D117FD35091BA8AF44FF0A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/323830343a373462303a343030303a3a2f33342d3334203d3e20323730393937.roa
Signing time:             Tue 14 Jan 2025 14:01:11 +0000
ROA not before:           Tue 14 Jan 2025 13:56:11 +0000
ROA not after:            Tue 13 Jan 2026 14:01:11 +0000
asID:                     270997
IP address blocks:        2804:74b0:4000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:cf:a3:a6:df:da:53:07:f0:99:91:08:cd:10:21:08:48:65:a7:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F6FAE9CA33ED01F7D117FD35091BA8AF44FF0A2
        Validity
            Not Before: Jan 14 13:56:11 2025 GMT
            Not After : Jan 13 14:01:11 2026 GMT
        Subject: CN=6970F2A201C768CC71257C32999E69A9070E0477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d1:f6:30:22:d7:56:58:9f:33:14:a9:53:24:
                    74:cd:49:e2:7f:8a:87:cb:44:f8:86:96:5a:4f:23:
                    f5:b7:0a:a0:1f:6b:ca:6e:a0:2f:54:39:0c:a8:21:
                    a2:b1:92:3e:be:a4:ec:cd:b0:d8:16:59:b7:c9:d6:
                    5e:1f:9d:68:c0:3d:ee:91:52:39:1e:f0:dd:ad:72:
                    74:fc:2c:07:27:0d:ab:43:77:47:f4:38:14:6e:e9:
                    f5:59:6c:e9:62:f9:86:4c:5c:d5:64:79:20:36:17:
                    c4:81:a5:ae:fb:4b:82:fc:d5:8e:5e:b4:42:e6:21:
                    c3:84:8f:14:5e:86:ad:70:4a:3c:cf:ea:31:a2:bb:
                    85:6e:07:f9:f9:44:1b:26:e7:d5:80:8e:84:6e:23:
                    6b:57:30:2d:26:00:7d:84:85:37:f8:ca:ff:50:2e:
                    a6:92:5c:d5:00:99:ea:7e:58:ac:b7:a2:fb:03:01:
                    08:aa:d8:1f:8a:36:db:36:88:a3:6f:12:dc:3c:31:
                    c0:25:60:dd:28:e3:e8:d9:47:a3:1c:e1:ea:d5:3c:
                    75:91:4d:da:b8:ff:d1:28:e5:c6:c9:d7:a1:e3:d0:
                    39:75:86:5c:f6:ec:a7:58:42:36:a8:9c:3b:b0:9b:
                    13:6a:87:0a:62:1d:25:08:e9:59:e1:80:22:ae:54:
                    c3:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:70:F2:A2:01:C7:68:CC:71:25:7C:32:99:9E:69:A9:07:0E:04:77
            X509v3 Authority Key Identifier:
                keyid:7F:6F:AE:9C:A3:3E:D0:1F:7D:11:7F:D3:50:91:BA:8A:F4:4F:F0:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/7F6FAE9CA33ED01F7D117FD35091BA8AF44FF0A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F6FAE9CA33ED01F7D117FD35091BA8AF44FF0A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/323830343a373462303a343030303a3a2f33342d3334203d3e20323730393937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74b0:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         9c:13:f5:45:cb:0d:0e:ac:74:9a:27:6f:7e:0f:d9:53:92:ee:
         3e:02:d2:4d:16:1f:16:df:60:f0:40:e6:a0:2b:9e:fc:8d:d5:
         4c:4c:55:52:9b:43:52:2d:51:3e:e6:04:88:a8:3b:0b:a8:db:
         90:67:b6:a9:60:db:2d:82:76:1a:ff:72:32:ff:c9:44:07:f5:
         21:ef:a5:20:b0:0c:e8:dc:18:eb:f8:b8:99:14:93:09:79:17:
         07:4f:67:0b:b1:6f:2c:5e:ca:cd:1a:69:cc:50:3a:e2:dd:b6:
         81:50:17:ce:ee:ba:fc:78:b1:5f:c2:c6:ef:21:db:87:d9:2c:
         e0:62:dd:a8:c9:e9:f4:32:2a:e1:53:ac:bc:4a:da:76:34:5e:
         1a:da:20:3a:27:f1:fb:45:3a:af:30:ce:b0:77:64:35:a2:9e:
         0a:14:65:76:93:02:c6:61:3e:88:b1:e1:59:ea:a3:83:64:bf:
         29:a3:e4:4e:e7:cc:fc:3c:62:9b:ca:6a:70:7e:2a:85:b8:ce:
         c2:56:7d:fc:f7:95:bd:88:43:0d:e2:77:47:5a:98:d2:e0:33:
         1f:75:80:9b:bb:4f:bb:26:d9:6a:12:68:da:3a:b5:9d:4c:14:
         36:ac:64:5b:a8:e0:1a:ee:f5:a1:a8:09:c0:03:08:73:b1:6e:
         31:e3:79:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:58:05 2025 by rpki-client