Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/323830343a336631303a363030303a3a2f33352d3335203d3e20323632353636.roa
File:                     323830343a336631303a363030303a3a2f33352d3335203d3e20323632353636.roa (raw, json)
Hash identifier:          3tQBkJUb6z2DLUL1y2MSGFGW5mEn8pLSfLIBuGFbwrY=
Subject key identifier:   1C:23:E4:37:4C:5A:FD:03:A4:81:E5:19:FF:B8:0E:D1:75:AF:3E:4A
Certificate issuer:       /CN=C8232E7ADA2149C400868144F5DA83930BC26309
Certificate serial:       4729FB27D4B116F2C60C6F5D50F7DD3A5BB512EF
Authority key identifier: C8:23:2E:7A:DA:21:49:C4:00:86:81:44:F5:DA:83:93:0B:C2:63:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8232E7ADA2149C400868144F5DA83930BC26309.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/323830343a336631303a363030303a3a2f33352d3335203d3e20323632353636.roa
Signing time:             Thu 27 Mar 2025 18:15:53 +0000
ROA not before:           Thu 27 Mar 2025 18:10:53 +0000
ROA not after:            Thu 26 Mar 2026 18:15:53 +0000
asID:                     262566
IP address blocks:        2804:3f10:6000::/35 maxlen: 35
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:29:fb:27:d4:b1:16:f2:c6:0c:6f:5d:50:f7:dd:3a:5b:b5:12:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8232E7ADA2149C400868144F5DA83930BC26309
        Validity
            Not Before: Mar 27 18:10:53 2025 GMT
            Not After : Mar 26 18:15:53 2026 GMT
        Subject: CN=1C23E4374C5AFD03A481E519FFB80ED175AF3E4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7a:bd:76:a2:5e:9e:db:35:ca:e9:21:78:d1:
                    fa:45:29:69:3a:25:9d:a3:a1:d8:5b:86:c3:7c:74:
                    23:08:1b:83:32:99:9d:63:6f:2f:7d:b1:a7:dc:fc:
                    98:1f:7d:7a:aa:b1:0a:c7:07:70:7f:fc:89:d8:9e:
                    c4:16:7e:43:dc:2a:ea:dd:ce:bb:35:11:dd:f5:4d:
                    8b:d7:46:ee:b2:05:8d:e5:e4:13:3b:0d:4f:94:b2:
                    0c:43:f7:fc:07:d4:50:3a:ee:f1:46:17:8b:ec:ec:
                    e2:3b:06:7d:ec:c2:9f:e4:25:81:b7:8b:a0:07:a3:
                    b6:f9:0f:f3:2f:ee:bd:72:07:9f:84:35:09:48:ac:
                    66:ca:13:c4:23:8e:e0:8d:d4:53:7e:94:6a:b2:9a:
                    9e:6c:df:e3:7e:ad:96:48:21:c5:3a:14:29:e1:e2:
                    71:cb:5e:0a:93:88:60:df:59:4c:ae:b9:b5:19:57:
                    40:99:c6:5a:f1:f9:30:ec:a8:51:11:ce:e8:ab:93:
                    8c:5e:07:9c:ea:e9:9a:80:4a:e8:f0:3e:15:31:af:
                    1f:2b:d9:dc:48:e7:e5:27:2a:55:e2:24:80:1f:2c:
                    77:16:ca:16:d2:fe:79:f6:f7:23:23:ca:59:42:9e:
                    ee:22:93:f6:b0:e8:5c:a9:04:d0:04:a4:80:3c:f0:
                    03:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:23:E4:37:4C:5A:FD:03:A4:81:E5:19:FF:B8:0E:D1:75:AF:3E:4A
            X509v3 Authority Key Identifier:
                keyid:C8:23:2E:7A:DA:21:49:C4:00:86:81:44:F5:DA:83:93:0B:C2:63:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/C8232E7ADA2149C400868144F5DA83930BC26309.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8232E7ADA2149C400868144F5DA83930BC26309.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/323830343a336631303a363030303a3a2f33352d3335203d3e20323632353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3f10:6000::/35

    Signature Algorithm: sha256WithRSAEncryption
         23:88:61:33:a7:5a:ef:b8:c8:83:10:cd:f3:79:24:5b:97:61:
         ee:ce:4b:59:0d:26:f4:68:84:41:c3:fd:fa:9a:97:90:b6:1f:
         b7:78:2f:27:11:89:bc:b4:47:d2:3b:5e:0d:d7:c7:b6:96:ad:
         a1:4c:69:54:37:e4:ab:5c:39:41:79:3f:66:4a:e7:76:d2:88:
         d6:1a:58:5c:de:0e:f3:d9:98:58:88:59:30:bf:06:bc:22:0a:
         b2:3c:09:7d:21:b2:3b:19:85:22:fc:c4:9d:6f:b5:7a:b2:3e:
         c1:11:05:ab:1c:d0:b6:1f:bd:1e:e1:07:d0:76:30:16:22:59:
         fc:c3:6e:ed:d8:2d:6c:3a:43:9e:9e:f0:ef:e7:65:a1:b7:d0:
         a2:45:36:0d:0e:af:fc:af:2d:b2:44:de:69:5f:c6:b6:2f:29:
         3f:d9:bb:4a:60:c8:42:95:cf:10:50:7b:a7:e0:9b:35:3c:89:
         05:d9:80:26:05:18:e1:10:2b:9b:e9:80:3b:1b:d7:51:8c:93:
         4a:2a:68:2e:95:2e:31:f6:b7:76:ce:96:5b:ce:9f:25:2f:4b:
         30:d1:49:d8:44:db:74:1e:f4:6a:4f:84:85:ad:3d:00:90:b0:
         6d:7d:93:5f:0c:c9:1e:59:59:fc:76:50:10:67:63:7c:c1:70:
         d6:19:79:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:58:04 2025 by rpki-client