Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JZVbpYuY4fyvoz8BAcJtZn6bNmdm9tXeNaYhXJ8f2Vg/0/323830343a366535303a3a2f33322d313238203d3e20323730353838.roa
File:                     323830343a366535303a3a2f33322d313238203d3e20323730353838.roa (raw, json)
Hash identifier:          MpuSvOqNDhXR745LrdXB6+RR4cm2TAq9BvZaBztmMzs=
Subject key identifier:   41:12:C1:63:8E:B9:C8:FC:C4:B5:16:20:10:47:D2:7A:DD:2E:9D:7A
Certificate issuer:       /CN=A595141DF10B7142183A583F86A07B8027C96119
Certificate serial:       6A1361F19AB7C816018BD770689BA847443DB692
Authority key identifier: A5:95:14:1D:F1:0B:71:42:18:3A:58:3F:86:A0:7B:80:27:C9:61:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A595141DF10B7142183A583F86A07B8027C96119.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JZVbpYuY4fyvoz8BAcJtZn6bNmdm9tXeNaYhXJ8f2Vg/0/323830343a366535303a3a2f33322d313238203d3e20323730353838.roa
Signing time:             Fri 22 Nov 2024 17:49:18 +0000
ROA not before:           Fri 22 Nov 2024 17:44:18 +0000
ROA not after:            Fri 21 Nov 2025 17:49:18 +0000
asID:                     270588
IP address blocks:        2804:6e50::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:13:61:f1:9a:b7:c8:16:01:8b:d7:70:68:9b:a8:47:44:3d:b6:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A595141DF10B7142183A583F86A07B8027C96119
        Validity
            Not Before: Nov 22 17:44:18 2024 GMT
            Not After : Nov 21 17:49:18 2025 GMT
        Subject: CN=4112C1638EB9C8FCC4B516201047D27ADD2E9D7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:80:68:bc:00:ca:cf:61:38:2d:75:4a:87:91:
                    1e:5e:90:e5:ea:0e:5b:60:cf:f7:ca:49:75:64:51:
                    51:93:7f:72:70:67:dc:03:4b:07:ef:53:c7:c0:07:
                    0c:e0:f2:ef:df:ea:fb:79:93:1e:17:95:90:f8:3b:
                    0e:8b:5a:49:ea:35:23:79:79:e9:df:db:dd:d5:d8:
                    22:42:37:02:42:ca:f4:5b:fe:c8:8f:bb:02:39:fa:
                    ef:a8:13:a1:c2:12:7a:bf:6b:a9:d9:93:19:0b:44:
                    37:d9:b7:46:ae:6d:3e:97:b4:97:03:34:4e:24:cd:
                    84:6d:38:bd:75:b5:2d:d1:6e:5c:71:3e:1b:82:08:
                    9e:f6:75:89:41:02:fa:da:f9:a8:a6:16:62:b1:b4:
                    aa:32:9a:b6:66:0e:72:f6:bf:3f:7c:2c:f1:bb:7a:
                    86:68:1c:be:fa:79:34:b5:8a:42:24:f6:a1:c9:91:
                    a7:25:b4:b0:8a:c0:28:a8:96:92:87:2e:19:df:f3:
                    c6:de:67:35:8e:df:e7:73:da:c2:ac:0d:ab:f7:db:
                    85:a1:fb:fc:62:db:80:07:ab:e9:ce:55:bc:8c:0a:
                    ee:54:1c:4c:4b:e5:a6:71:8e:c7:f3:66:09:6f:4a:
                    3a:d5:bc:98:45:52:19:f4:23:80:0e:e5:67:fd:ed:
                    1b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:12:C1:63:8E:B9:C8:FC:C4:B5:16:20:10:47:D2:7A:DD:2E:9D:7A
            X509v3 Authority Key Identifier:
                keyid:A5:95:14:1D:F1:0B:71:42:18:3A:58:3F:86:A0:7B:80:27:C9:61:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JZVbpYuY4fyvoz8BAcJtZn6bNmdm9tXeNaYhXJ8f2Vg/0/A595141DF10B7142183A583F86A07B8027C96119.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A595141DF10B7142183A583F86A07B8027C96119.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JZVbpYuY4fyvoz8BAcJtZn6bNmdm9tXeNaYhXJ8f2Vg/0/323830343a366535303a3a2f33322d313238203d3e20323730353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6e50::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:68:65:84:a4:82:90:4f:04:cf:1a:a3:e4:41:77:95:a0:19:
         67:57:40:f9:1c:23:42:9e:f3:50:18:53:1f:32:e6:bc:7b:8c:
         df:52:04:a1:61:0e:8c:44:e7:96:7b:03:98:77:ee:0e:ca:09:
         09:95:aa:bf:3d:2b:14:c2:40:54:77:6d:9f:e0:d7:07:49:d7:
         f5:88:26:88:96:4a:ed:00:7c:a3:85:31:f3:0c:82:9b:4b:6c:
         69:3f:12:49:9d:b1:80:fc:94:bf:65:0d:6b:b6:91:15:b9:fb:
         e5:e1:46:3d:f1:87:88:14:64:dc:dc:e3:80:f3:1e:b1:0a:d1:
         e8:e1:af:42:86:4b:db:50:da:2e:ba:1d:12:0a:31:bb:29:5d:
         50:82:dc:c0:e3:60:99:39:4a:b2:a9:ca:d5:e5:5b:41:6e:45:
         d1:87:f9:bd:0a:e8:35:97:7a:d9:65:2b:33:f5:ee:bd:44:68:
         5e:44:4b:30:c5:fc:ca:fd:6c:49:e5:34:82:38:55:ae:d2:41:
         7a:22:fc:4a:0b:ab:73:e2:90:fb:cf:93:d9:a9:48:47:99:20:
         7e:56:72:0b:a1:94:0c:3f:dd:3c:9d:d0:5c:2b:06:cf:85:04:
         56:9e:a8:2b:c6:9b:20:f0:cb:a9:be:df:a0:07:ec:9a:64:55:
         b3:c1:34:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 00:30:41 2025 by rpki-client