Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/1/323830343a3863303a3a2f33322d3438203d3e20323632333931.roa
File:                     323830343a3863303a3a2f33322d3438203d3e20323632333931.roa (raw, json)
Hash identifier:          fberrWFCEEhHBoUDfe0eSKBNjs+MZLeZjHqfusECzn0=
Subject key identifier:   85:02:99:81:BF:37:C3:1F:A8:55:81:92:8A:46:B4:9A:2E:66:1D:21
Certificate issuer:       /CN=FD7279E1669A4C13E1BF1D2511A91E03406FA0E2
Certificate serial:       6EB274B10E7276395054873E0CDF2E440879CC9A
Authority key identifier: FD:72:79:E1:66:9A:4C:13:E1:BF:1D:25:11:A9:1E:03:40:6F:A0:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD7279E1669A4C13E1BF1D2511A91E03406FA0E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/1/323830343a3863303a3a2f33322d3438203d3e20323632333931.roa
Signing time:             Mon 10 Feb 2025 19:17:45 +0000
ROA not before:           Mon 10 Feb 2025 19:12:45 +0000
ROA not after:            Mon 09 Feb 2026 19:17:45 +0000
asID:                     262391
IP address blocks:        2804:8c0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:b2:74:b1:0e:72:76:39:50:54:87:3e:0c:df:2e:44:08:79:cc:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD7279E1669A4C13E1BF1D2511A91E03406FA0E2
        Validity
            Not Before: Feb 10 19:12:45 2025 GMT
            Not After : Feb  9 19:17:45 2026 GMT
        Subject: CN=85029981BF37C31FA85581928A46B49A2E661D21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ab:a7:d3:50:df:8f:02:8a:27:c0:80:aa:c7:
                    71:25:35:cb:5c:b1:84:48:78:20:dc:ac:ab:69:28:
                    bd:be:ae:e1:62:91:9a:e3:9c:81:e2:16:60:68:e6:
                    99:47:54:b9:66:84:85:17:c1:28:6d:3e:85:7f:bd:
                    e7:85:ef:94:f7:01:8e:e4:7e:92:0a:6d:7d:98:19:
                    cf:a2:d6:30:3e:ea:3b:60:fa:cf:ef:f9:32:0c:03:
                    13:6c:45:e6:2e:ba:49:c4:c8:6e:f0:b9:3a:20:87:
                    ca:22:96:d6:b9:e4:41:59:13:4c:fa:e9:d9:5b:85:
                    ee:ea:02:73:c7:81:24:23:23:d0:c6:1c:94:ff:76:
                    1f:39:5f:1e:3d:e6:70:d6:49:50:f7:f6:a9:a5:60:
                    fc:8c:4d:51:c5:18:26:2b:e2:3e:e5:01:a0:ec:18:
                    63:6c:ef:df:22:06:08:6c:8c:7d:8b:a3:4e:6c:58:
                    a3:7b:6e:70:57:3b:ed:f5:07:97:0b:3e:5f:d9:3d:
                    3c:65:72:95:70:7f:ed:98:dc:9b:89:69:97:14:80:
                    82:e8:56:d8:e0:6a:fc:8d:70:fb:c4:14:45:ef:ed:
                    ee:1c:18:42:eb:5a:7c:3a:a8:62:87:2f:ef:64:97:
                    41:d3:26:6f:28:34:52:d5:0c:82:3a:87:22:a3:6d:
                    41:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:02:99:81:BF:37:C3:1F:A8:55:81:92:8A:46:B4:9A:2E:66:1D:21
            X509v3 Authority Key Identifier:
                keyid:FD:72:79:E1:66:9A:4C:13:E1:BF:1D:25:11:A9:1E:03:40:6F:A0:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/1/FD7279E1669A4C13E1BF1D2511A91E03406FA0E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD7279E1669A4C13E1BF1D2511A91E03406FA0E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/1/323830343a3863303a3a2f33322d3438203d3e20323632333931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:34:a8:f3:8d:47:2e:81:a2:91:7b:34:5a:99:cb:06:e4:36:
         6e:e7:35:d1:b6:72:da:2a:e7:01:12:a5:98:3a:dc:d5:6d:98:
         73:44:ad:64:b8:93:17:48:a0:db:7b:ca:2b:cc:39:cd:f2:ef:
         2e:b3:23:fc:54:0d:44:39:77:be:ef:0d:45:e7:bf:67:61:3d:
         87:96:12:db:7a:1b:da:26:f3:2a:da:b7:60:25:86:d4:db:81:
         fd:5f:6e:87:a8:84:ca:c9:a8:e9:bd:c1:25:9f:a2:a3:3a:33:
         4f:1d:06:9f:9f:1f:0d:ac:cc:b9:39:1a:06:99:80:4a:81:93:
         dc:2e:0d:04:ba:56:ad:3e:d0:f6:87:7e:f9:b1:e8:6d:fa:83:
         f9:f6:6b:cf:98:e4:4a:36:d7:b9:a8:ce:17:d6:34:ae:6f:da:
         7d:d8:56:0b:92:94:b4:92:0d:44:84:87:25:82:dc:a9:72:cd:
         73:2d:8a:27:5c:35:1a:6a:71:a4:f7:1c:0c:e0:92:33:65:ee:
         99:53:50:07:4a:6e:f2:e3:5c:49:5b:31:98:f0:1b:78:f4:a2:
         d0:43:d4:e0:14:6f:9b:4d:7b:46:19:05:80:c1:dd:78:e4:57:
         10:0a:02:91:29:08:72:9c:1a:c2:f3:49:67:40:b8:f3:ae:7d:
         be:52:d9:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:10:58 2025 by rpki-client