Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/323830343a336262303a343030303a3a2f33342d3334203d3e20323636313635.roa
File:                     323830343a336262303a343030303a3a2f33342d3334203d3e20323636313635.roa (raw, json)
Hash identifier:          IYiZIrtjbwbGWgDafle2ZfHg5TprfWFt42hc9qNYgtY=
Subject key identifier:   A8:88:0E:BD:55:FE:3A:CD:BC:B7:2E:B6:6B:DF:C6:03:0C:82:93:25
Certificate issuer:       /CN=DFB165A55B30AAC4E32CEC8FE9B4386EF0EA8D3C
Certificate serial:       6269A2A2B426F81926C7550CEE0196AB3D347CCE
Authority key identifier: DF:B1:65:A5:5B:30:AA:C4:E3:2C:EC:8F:E9:B4:38:6E:F0:EA:8D:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFB165A55B30AAC4E32CEC8FE9B4386EF0EA8D3C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/323830343a336262303a343030303a3a2f33342d3334203d3e20323636313635.roa
Signing time:             Mon 03 Mar 2025 23:56:20 +0000
ROA not before:           Mon 03 Mar 2025 23:51:20 +0000
ROA not after:            Mon 02 Mar 2026 23:56:20 +0000
asID:                     266165
IP address blocks:        2804:3bb0:4000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:69:a2:a2:b4:26:f8:19:26:c7:55:0c:ee:01:96:ab:3d:34:7c:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFB165A55B30AAC4E32CEC8FE9B4386EF0EA8D3C
        Validity
            Not Before: Mar  3 23:51:20 2025 GMT
            Not After : Mar  2 23:56:20 2026 GMT
        Subject: CN=A8880EBD55FE3ACDBCB72EB66BDFC6030C829325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:36:20:ff:64:30:74:9f:3f:42:cf:5c:68:a6:
                    5d:ed:ac:ce:83:bc:28:0a:70:4e:12:03:09:90:10:
                    ef:90:4d:05:f0:9b:02:df:f5:0d:2b:dc:46:e7:fb:
                    89:38:71:e5:44:73:c9:b1:10:48:4b:59:b1:60:ab:
                    c6:43:b7:a3:d8:30:c2:2b:ab:5b:5a:74:df:72:61:
                    cb:47:e4:b1:10:6e:f4:64:3d:35:22:3d:59:5b:e4:
                    23:6f:fa:30:e0:ca:1c:04:cd:1d:3e:87:3c:50:64:
                    7c:1a:70:02:bb:7b:79:65:5f:a1:87:ef:48:cc:76:
                    3f:4f:86:e7:8b:fa:14:69:6f:a1:c5:e5:79:e9:77:
                    b8:87:e1:c1:da:1a:bf:a9:4d:8c:8a:70:4c:13:8a:
                    c8:c0:bf:07:4e:99:36:89:ba:3d:79:e7:31:a6:ea:
                    db:0f:88:60:41:b3:32:fa:0c:c3:99:b0:95:89:17:
                    9c:56:79:bd:3a:98:dd:02:21:52:3f:29:b5:27:22:
                    4b:c9:36:11:df:ef:15:b3:de:db:35:30:25:f5:4b:
                    9f:30:9e:13:37:6d:7a:a4:49:3d:78:e1:7f:c9:00:
                    5a:22:88:db:fc:59:26:5c:e4:c3:ab:db:00:43:b5:
                    81:c0:ca:a4:d1:69:25:a6:7e:be:cb:32:20:73:ae:
                    00:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:88:0E:BD:55:FE:3A:CD:BC:B7:2E:B6:6B:DF:C6:03:0C:82:93:25
            X509v3 Authority Key Identifier:
                keyid:DF:B1:65:A5:5B:30:AA:C4:E3:2C:EC:8F:E9:B4:38:6E:F0:EA:8D:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/DFB165A55B30AAC4E32CEC8FE9B4386EF0EA8D3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFB165A55B30AAC4E32CEC8FE9B4386EF0EA8D3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/323830343a336262303a343030303a3a2f33342d3334203d3e20323636313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3bb0:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         69:aa:5a:a4:44:ea:14:82:90:bc:d8:96:9f:c3:d0:d6:c7:30:
         e5:fe:15:46:14:87:ca:9f:a5:10:dd:67:ee:76:ca:21:ec:55:
         8c:94:98:94:48:65:5b:bf:2d:93:99:d8:01:d7:8f:6d:48:79:
         8c:81:56:d0:fd:3c:5b:d0:3e:8c:fb:d7:b7:ea:a2:a4:1c:88:
         d9:dc:7f:c3:20:b0:69:e9:9a:fd:53:3d:38:e2:87:7a:97:8b:
         66:8a:72:02:74:50:40:8a:0e:8c:55:f8:34:52:31:78:fb:f0:
         59:c7:fd:6d:c9:c2:a1:d7:8d:01:3b:01:75:75:4a:03:9d:ba:
         f5:b3:21:86:57:b9:01:28:53:08:7f:72:3e:10:02:61:10:87:
         73:9f:fd:23:17:dc:89:c7:1b:e3:46:43:89:57:a3:e6:bf:9b:
         ad:36:3f:e3:2a:1b:89:5b:c0:a0:58:3c:55:1f:42:c0:ac:29:
         ac:78:78:a6:56:53:0f:a2:9c:09:c0:38:37:39:9a:7f:92:f1:
         30:1f:19:e5:41:23:ad:5a:28:f6:c0:19:38:81:c7:1c:ea:bc:
         1e:33:0b:80:69:0d:82:2f:ef:fa:63:41:ed:46:a4:58:56:6a:
         89:45:9b:e9:07:b9:7a:75:19:29:ca:f1:16:6a:79:c3:72:dd:
         11:0e:2c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:56:20 2025 by rpki-client