Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HxCt4Am8PGVjivGshjjPNnbaibVyncrahiUE67ZPAVaT/1/323830343a346137383a3a2f33322d3438203d3e20323637323432.roa
File:                     323830343a346137383a3a2f33322d3438203d3e20323637323432.roa (raw, json)
Hash identifier:          u1jRHd6XPl5NR1zXUvhgK9IHleRZ9pCCbSSFW8l2D+A=
Subject key identifier:   73:6E:75:83:39:3E:AB:C2:89:38:59:31:8A:1A:5C:01:41:58:A2:09
Certificate issuer:       /CN=7894119F99DAD39051E9516FAF4C2DAA5CD1BE70
Certificate serial:       30AA131A44C5BE21495BD025C0642FE49E039D00
Authority key identifier: 78:94:11:9F:99:DA:D3:90:51:E9:51:6F:AF:4C:2D:AA:5C:D1:BE:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7894119F99DAD39051E9516FAF4C2DAA5CD1BE70.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HxCt4Am8PGVjivGshjjPNnbaibVyncrahiUE67ZPAVaT/1/323830343a346137383a3a2f33322d3438203d3e20323637323432.roa
Signing time:             Thu 06 Mar 2025 19:46:01 +0000
ROA not before:           Thu 06 Mar 2025 19:41:01 +0000
ROA not after:            Thu 05 Mar 2026 19:46:01 +0000
asID:                     267242
IP address blocks:        2804:4a78::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:aa:13:1a:44:c5:be:21:49:5b:d0:25:c0:64:2f:e4:9e:03:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7894119F99DAD39051E9516FAF4C2DAA5CD1BE70
        Validity
            Not Before: Mar  6 19:41:01 2025 GMT
            Not After : Mar  5 19:46:01 2026 GMT
        Subject: CN=736E7583393EABC2893859318A1A5C014158A209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2d:a3:1b:a5:54:bc:60:21:35:04:39:d5:40:
                    63:63:61:4c:9b:63:d2:2d:76:72:f5:65:89:9b:2b:
                    4f:56:44:a5:d7:60:e3:2f:d2:6a:b9:5e:ce:93:7c:
                    66:fe:94:41:19:5e:c6:13:34:66:8a:aa:2a:d9:c6:
                    96:ff:80:4d:1b:ea:a1:6d:ef:3e:73:fd:6a:f8:a9:
                    77:55:05:88:89:99:db:4c:69:66:1f:13:9e:22:23:
                    0a:3b:25:a2:ee:43:db:94:4d:a3:98:f2:a7:8d:13:
                    49:da:e8:11:55:81:3e:35:f8:45:a6:3a:4d:0f:b7:
                    ef:40:48:dd:91:9e:a2:75:16:b9:9c:96:65:cc:2d:
                    3f:55:71:68:e9:0b:c7:1c:28:f1:e6:d4:cb:81:bb:
                    30:d0:cb:9a:00:43:76:75:81:0f:b3:27:68:3d:54:
                    8b:42:5b:e6:1b:b6:a5:4e:22:70:8b:d5:68:82:8a:
                    5c:a8:ff:ec:19:23:c6:85:53:1d:28:6f:03:1e:e1:
                    77:3e:1a:41:92:2d:b3:f6:03:a0:cc:aa:1a:73:43:
                    e8:a0:7a:08:a9:a3:d8:b6:06:68:4f:e3:46:34:98:
                    b6:70:24:ea:8b:bf:5c:c2:0f:30:97:82:23:af:02:
                    de:e0:12:5a:7a:b3:01:16:af:9a:eb:57:f2:22:68:
                    99:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:6E:75:83:39:3E:AB:C2:89:38:59:31:8A:1A:5C:01:41:58:A2:09
            X509v3 Authority Key Identifier:
                keyid:78:94:11:9F:99:DA:D3:90:51:E9:51:6F:AF:4C:2D:AA:5C:D1:BE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HxCt4Am8PGVjivGshjjPNnbaibVyncrahiUE67ZPAVaT/1/7894119F99DAD39051E9516FAF4C2DAA5CD1BE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7894119F99DAD39051E9516FAF4C2DAA5CD1BE70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HxCt4Am8PGVjivGshjjPNnbaibVyncrahiUE67ZPAVaT/1/323830343a346137383a3a2f33322d3438203d3e20323637323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4a78::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:90:d2:20:44:63:11:f2:c0:9e:8c:d0:9e:f2:44:9e:08:c0:
         b1:27:b8:fd:52:db:3a:9a:3d:a0:34:3f:80:39:1d:41:7f:8a:
         77:04:76:f0:60:e0:b6:ca:34:43:fe:e0:3b:76:e2:9e:ce:91:
         b6:7e:a8:40:47:4d:b0:09:c9:74:ce:30:8d:dd:0f:1d:9e:9c:
         6f:d2:e3:d6:d9:c2:50:3c:f0:d9:5c:ae:89:dd:87:32:81:ac:
         f7:ea:20:a0:fd:cf:0a:b0:fd:c6:08:65:10:5c:18:24:52:18:
         53:54:90:b1:54:32:b3:b7:52:72:32:e0:2c:ce:08:65:d1:47:
         10:3c:3f:fc:05:8d:7d:a4:17:90:b1:d5:16:9c:f4:f8:9b:6d:
         65:51:ec:9d:0e:fc:38:7e:94:78:71:3f:cd:04:79:18:d1:23:
         4d:c5:38:4f:e4:cf:ac:d5:1f:77:13:c5:92:15:0a:fa:7d:50:
         df:70:b6:3a:0c:22:f1:be:68:f2:87:6f:40:4c:d5:85:02:84:
         d2:62:88:92:7f:ce:99:f4:1f:d0:b3:dc:49:55:d3:95:d8:f6:
         6e:55:45:9d:ce:b0:22:16:95:1c:21:c2:cc:ce:4e:2f:63:f7:
         c7:91:3e:1f:e0:c9:64:bf:d3:3b:17:cf:d7:65:93:74:0c:95:
         bd:54:20:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:05:43 2025 by rpki-client