Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/323830343a323831383a633030303a3a2f33342d3334203d3e20323633393430.roa
File:                     323830343a323831383a633030303a3a2f33342d3334203d3e20323633393430.roa (raw, json)
Hash identifier:          /z3ih3/q3y4zb4QMmC3xinG5fFW83XaYFLKBMZR3cC8=
Subject key identifier:   5E:B0:80:62:4B:25:AE:E8:11:94:56:22:A4:48:D5:50:A9:DB:EC:78
Certificate issuer:       /CN=A00894A4159E2748ED3F950641ECEA8A9D01128D
Certificate serial:       3F431541F27DA5C5BCB11B9A83F60D10DF34EB48
Authority key identifier: A0:08:94:A4:15:9E:27:48:ED:3F:95:06:41:EC:EA:8A:9D:01:12:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A00894A4159E2748ED3F950641ECEA8A9D01128D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/323830343a323831383a633030303a3a2f33342d3334203d3e20323633393430.roa
Signing time:             Mon 10 Feb 2025 19:20:55 +0000
ROA not before:           Mon 10 Feb 2025 19:15:55 +0000
ROA not after:            Mon 09 Feb 2026 19:20:55 +0000
asID:                     263940
IP address blocks:        2804:2818:c000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:43:15:41:f2:7d:a5:c5:bc:b1:1b:9a:83:f6:0d:10:df:34:eb:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A00894A4159E2748ED3F950641ECEA8A9D01128D
        Validity
            Not Before: Feb 10 19:15:55 2025 GMT
            Not After : Feb  9 19:20:55 2026 GMT
        Subject: CN=5EB080624B25AEE811945622A448D550A9DBEC78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:e3:d2:b1:6d:a7:16:c1:82:da:3f:8d:a1:89:
                    9f:00:d5:d3:e0:51:13:d0:bf:49:21:bf:25:3d:6d:
                    48:53:ec:2f:74:83:e1:9f:68:bd:89:4d:31:c2:38:
                    fe:a8:86:a9:c8:9a:04:a7:b0:51:9e:64:4f:de:90:
                    ae:da:6e:63:9d:c9:da:d7:4c:bb:86:e5:4b:bd:c0:
                    1e:28:94:54:cb:5d:39:c4:eb:a5:dd:25:5c:78:84:
                    1c:98:12:51:c4:53:5f:f0:07:61:96:0c:a3:61:50:
                    f6:f3:be:a7:c0:14:fb:11:5d:99:1d:1b:ff:e9:00:
                    65:5c:12:1f:18:fb:e0:93:ab:66:25:52:35:6d:74:
                    c2:b4:c8:45:ab:ae:30:df:64:12:a5:79:96:b2:63:
                    11:67:d8:c9:4a:89:83:88:ca:9f:1e:6a:bf:ec:14:
                    5e:98:1d:94:e6:23:f2:c3:6c:13:fb:67:d8:be:bf:
                    e1:46:f0:ba:0f:7f:2f:a8:a6:4f:41:82:d8:d0:b7:
                    81:04:10:a7:f9:b8:f2:f3:78:29:66:88:38:05:0d:
                    95:a8:24:59:f9:69:a3:17:30:aa:8a:6e:d1:58:67:
                    1b:d9:8d:dd:5d:30:4f:f6:d3:bc:a9:61:16:ac:3d:
                    89:03:82:75:6c:c5:90:5f:19:20:cd:f5:82:61:18:
                    d8:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:B0:80:62:4B:25:AE:E8:11:94:56:22:A4:48:D5:50:A9:DB:EC:78
            X509v3 Authority Key Identifier:
                keyid:A0:08:94:A4:15:9E:27:48:ED:3F:95:06:41:EC:EA:8A:9D:01:12:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/A00894A4159E2748ED3F950641ECEA8A9D01128D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A00894A4159E2748ED3F950641ECEA8A9D01128D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/323830343a323831383a633030303a3a2f33342d3334203d3e20323633393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2818:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         11:74:89:93:b6:f7:6a:fb:77:c9:da:67:2d:e9:e8:53:61:53:
         47:da:12:c9:dc:fa:72:12:e7:ea:2b:25:45:3f:7e:b4:a2:4f:
         fb:89:2e:2a:ce:48:5d:f4:3e:19:be:b1:34:95:70:fb:77:99:
         35:0b:56:dd:77:ca:73:38:80:dd:5b:07:6d:31:7a:9e:d9:3f:
         c2:bf:1e:82:1d:f1:f1:50:9f:1c:29:99:2d:d5:93:42:2f:d1:
         a8:df:1f:c4:d3:6d:64:01:47:59:b3:54:3e:ce:c2:63:e7:ee:
         51:46:88:ab:5a:1a:00:bc:2d:05:37:d6:13:32:08:e6:1e:af:
         b4:2c:cb:aa:ce:83:c5:f9:2f:2c:73:7e:d2:6b:1c:8e:7c:fe:
         a9:0d:d1:ed:39:d7:55:8b:ff:0a:07:7e:ab:cc:66:e3:0b:a2:
         ac:1b:0a:aa:ba:a7:09:99:6e:58:b5:c9:6a:80:b1:56:8b:d8:
         b5:37:90:fc:9f:d9:2d:68:9b:6e:f7:f3:a0:5c:a8:b9:2d:08:
         b4:55:16:f8:fc:d9:ed:7b:cd:6b:8b:dd:f6:01:22:56:87:33:
         ea:75:63:fc:6b:e3:0b:46:a2:0f:de:20:d1:1b:a8:18:48:2b:
         74:da:d5:fb:e3:54:02:fd:0c:24:c8:cb:5f:df:a3:81:12:78:
         4c:c2:8b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:23:02 2025 by rpki-client