Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/323830343a373462303a3a2f33332d3333203d3e20323730393937.roa
File:                     323830343a373462303a3a2f33332d3333203d3e20323730393937.roa (raw, json)
Hash identifier:          0WorHwsH51qq4DjoivY8lNmW3Kj/COOKLKtuEeNLe8A=
Subject key identifier:   B2:66:33:C8:7D:B3:A6:13:48:97:7E:AA:47:12:5F:54:FF:3C:0B:54
Certificate issuer:       /CN=7F6FAE9CA33ED01F7D117FD35091BA8AF44FF0A2
Certificate serial:       6076342E1C329714D7D78578D3D9E6AD223B9A8D
Authority key identifier: 7F:6F:AE:9C:A3:3E:D0:1F:7D:11:7F:D3:50:91:BA:8A:F4:4F:F0:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F6FAE9CA33ED01F7D117FD35091BA8AF44FF0A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/323830343a373462303a3a2f33332d3333203d3e20323730393937.roa
Signing time:             Tue 14 Jan 2025 14:00:59 +0000
ROA not before:           Tue 14 Jan 2025 13:55:59 +0000
ROA not after:            Tue 13 Jan 2026 14:00:59 +0000
asID:                     270997
IP address blocks:        2804:74b0::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:76:34:2e:1c:32:97:14:d7:d7:85:78:d3:d9:e6:ad:22:3b:9a:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F6FAE9CA33ED01F7D117FD35091BA8AF44FF0A2
        Validity
            Not Before: Jan 14 13:55:59 2025 GMT
            Not After : Jan 13 14:00:59 2026 GMT
        Subject: CN=B26633C87DB3A61348977EAA47125F54FF3C0B54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:fc:1d:8c:bd:d7:29:9b:ee:25:2a:80:e4:df:
                    81:7e:71:ee:79:b7:4b:c6:d1:f1:6a:9a:57:e6:f1:
                    47:a8:e4:93:5b:63:28:1e:b9:b7:84:a6:de:c7:5e:
                    65:ec:02:fa:2b:07:64:ae:a6:35:69:1b:08:11:34:
                    c8:6c:77:0f:79:f1:e1:c4:e9:f3:f9:f2:fb:88:eb:
                    be:eb:9a:a3:dc:41:34:51:01:11:66:7e:97:d5:49:
                    6c:e8:3e:b4:f2:f7:83:2f:ac:99:22:37:93:03:08:
                    db:68:d5:a4:59:23:91:cd:c0:2c:28:1c:4f:c5:78:
                    d8:2b:6c:57:cc:18:8d:aa:38:c4:c9:5c:51:ce:ea:
                    22:26:b6:4d:6d:3f:4b:8f:b3:de:79:b6:b6:79:18:
                    c7:bb:12:d2:55:36:a3:bd:df:16:89:53:c1:81:8c:
                    e1:af:dd:a5:87:47:6c:83:ca:4c:2c:b3:ec:27:e7:
                    39:d6:d2:ba:98:31:80:5a:21:96:ac:0c:06:9d:2b:
                    b2:28:9c:af:f9:ca:3d:88:24:cf:43:80:5b:06:d7:
                    0e:31:bc:8d:3f:44:c3:4c:9b:18:8b:48:e6:f8:34:
                    41:9a:14:a1:06:f9:bb:02:50:dc:53:9e:70:53:9a:
                    3d:aa:0f:af:58:25:23:0d:af:e2:6a:71:c1:07:f6:
                    bb:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:66:33:C8:7D:B3:A6:13:48:97:7E:AA:47:12:5F:54:FF:3C:0B:54
            X509v3 Authority Key Identifier:
                keyid:7F:6F:AE:9C:A3:3E:D0:1F:7D:11:7F:D3:50:91:BA:8A:F4:4F:F0:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/7F6FAE9CA33ED01F7D117FD35091BA8AF44FF0A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F6FAE9CA33ED01F7D117FD35091BA8AF44FF0A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/323830343a373462303a3a2f33332d3333203d3e20323730393937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74b0::/33

    Signature Algorithm: sha256WithRSAEncryption
         15:e5:af:b6:0f:41:b8:c9:b8:52:d5:37:ec:2a:d5:58:3e:77:
         43:06:e4:24:db:68:14:b9:de:26:6d:2a:67:3d:3c:f7:5f:f1:
         16:bb:70:33:ad:30:bc:d7:6f:f0:98:cb:8f:47:04:87:d7:58:
         24:2c:05:fe:51:46:74:aa:ce:f1:2d:c1:a5:79:dd:8f:3d:1f:
         9c:d3:fb:e7:ce:9d:73:29:c8:5f:44:6c:f1:96:14:0d:14:e0:
         2f:8c:ae:a3:8d:b9:65:2c:1f:6c:f2:33:79:07:cf:1a:60:ef:
         94:7d:8a:b8:f0:89:b1:3a:42:95:f1:38:d6:c7:e3:15:c1:d2:
         36:31:0b:b5:20:c3:6d:6e:29:11:71:10:f6:4f:e8:c1:fe:ee:
         5c:22:e6:c1:81:c9:a7:4b:30:0f:d6:2d:3d:e5:66:e8:16:2b:
         a7:0d:5a:ce:b4:f5:d7:aa:ae:ff:84:2f:1d:ad:87:1e:45:90:
         66:1d:39:61:c7:14:34:cf:0c:21:30:ca:f1:dc:33:dc:a5:d5:
         be:0a:7f:34:4e:14:f5:97:93:a3:c3:12:54:58:8e:f4:e1:0a:
         34:d9:c4:e4:8c:41:44:1d:17:85:82:c3:1a:ab:9a:0b:0d:85:
         c4:16:57:37:d8:e8:d6:bd:27:f3:cb:7e:b0:04:8a:01:40:35:
         d9:40:d0:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:37:08 2025 by rpki-client