Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3730643a3a2f34382d3438203d3e203631353733.roa
File:                     323830343a323565343a3730643a3a2f34382d3438203d3e203631353733.roa (raw, json)
Hash identifier:          bp4nEWvqNHmdgkWKe2npxNpwu8s/nRA/6s+OJvvrpuQ=
Subject key identifier:   2E:92:8A:16:75:1B:B4:15:B2:1F:7C:BB:BA:CE:2A:87:D5:6C:78:16
Certificate issuer:       /CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
Certificate serial:       312F45BBC572B1733B483BA43BF06AC33A6E6C15
Authority key identifier: DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3730643a3a2f34382d3438203d3e203631353733.roa
Signing time:             Sat 22 Mar 2025 11:35:55 +0000
ROA not before:           Sat 22 Mar 2025 11:30:55 +0000
ROA not after:            Sat 21 Mar 2026 11:35:55 +0000
asID:                     61573
IP address blocks:        2804:25e4:70d::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:2f:45:bb:c5:72:b1:73:3b:48:3b:a4:3b:f0:6a:c3:3a:6e:6c:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
        Validity
            Not Before: Mar 22 11:30:55 2025 GMT
            Not After : Mar 21 11:35:55 2026 GMT
        Subject: CN=2E928A16751BB415B21F7CBBBACE2A87D56C7816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9f:bc:e1:89:19:35:0f:90:3e:ea:1b:5d:73:
                    48:48:03:a1:92:54:e6:f2:51:fa:ec:74:67:d0:70:
                    56:9e:8e:bc:7c:7d:f0:aa:e5:b5:df:35:97:a4:92:
                    38:ae:a5:5c:83:c4:ff:28:61:a0:97:18:65:b7:ac:
                    76:34:5c:80:ad:09:42:48:e2:8d:7f:d0:11:f9:75:
                    1a:50:82:29:e7:8c:b5:ce:f1:c9:02:b2:f3:f8:6e:
                    e1:38:cd:61:22:6d:8e:33:a9:9f:a0:37:70:cc:79:
                    0f:42:de:17:97:9f:9b:bd:49:b3:20:56:64:ad:bf:
                    ef:ad:93:49:dd:f7:a8:2e:7e:34:72:ea:9a:79:16:
                    2c:13:fa:7b:52:9f:fe:72:10:01:37:a2:9f:23:28:
                    72:21:92:0d:5a:82:42:09:58:5e:e5:80:55:31:2c:
                    94:d9:9d:b7:01:98:b8:f9:0f:a8:29:3d:48:21:8e:
                    f2:62:cd:62:79:a5:1f:13:4a:33:8d:12:97:10:5d:
                    22:a9:c2:f0:05:71:cc:e4:77:dd:90:62:36:51:51:
                    c4:30:a8:48:46:af:12:fb:d2:63:06:47:19:d3:4f:
                    86:0f:00:dc:8c:55:58:fb:80:57:2e:bc:88:d5:8f:
                    c2:5d:73:10:2b:eb:0d:bc:3a:4c:d9:7a:0d:6c:aa:
                    8e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:92:8A:16:75:1B:B4:15:B2:1F:7C:BB:BA:CE:2A:87:D5:6C:78:16
            X509v3 Authority Key Identifier:
                keyid:DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3730643a3a2f34382d3438203d3e203631353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25e4:70d::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:2e:0f:07:db:7d:15:8f:90:b6:31:16:e0:c9:b6:03:bb:dc:
         da:98:cf:68:b8:27:03:e2:77:57:70:c7:26:80:41:37:12:f9:
         2c:29:e6:77:7e:dc:ac:31:45:e6:6b:c5:2f:35:d1:15:6d:28:
         94:3f:74:55:16:fb:5e:04:51:5a:9f:c5:9b:d3:fb:80:e4:81:
         ba:9e:84:80:24:f2:38:e3:d7:89:93:fa:31:23:2f:a1:e8:db:
         f0:a7:10:b5:5b:35:cf:65:ed:13:38:e0:af:52:77:05:a1:54:
         b6:9d:d7:53:aa:a8:94:a6:08:06:b1:4c:53:19:59:d4:32:c7:
         81:3d:6c:62:09:83:2b:95:b8:54:2e:85:15:fc:f4:98:79:1f:
         6d:23:ae:83:af:2b:6b:12:52:83:06:6b:ec:cf:6a:01:b0:a7:
         a7:8c:a5:88:d8:08:4f:a4:a9:c8:e4:d1:91:e8:f0:b3:cf:a7:
         61:30:fb:f8:73:5c:7b:47:7d:97:a2:68:ae:24:9f:16:f4:13:
         c2:79:f8:9e:4e:69:f1:98:7c:1c:ae:05:ac:83:40:9e:1b:a4:
         b6:08:b3:ef:24:5d:5d:0c:fa:5a:37:1c:77:3b:72:51:d0:6c:
         a4:09:17:f0:07:e1:9b:cf:0d:61:69:f5:92:75:36:f8:ad:10:
         f8:a2:18:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:30:21 2025 by rpki-client