Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/zmifjf37mnPqsJzfc7ZebzZCPA7GXAK7YLS6XGj7aCE/0/323830343a373330633a3a2f33322d3332203d3e20323730383932.roa
File:                     323830343a373330633a3a2f33322d3332203d3e20323730383932.roa (raw, json)
Hash identifier:          SEDWYSxoEjG5LyIWphtGCBwbxzJ+rIAB+gpVEx+rBro=
Subject key identifier:   0A:CD:B7:40:AB:AC:0E:82:1C:58:9F:A3:85:5E:E3:16:EE:60:37:6F
Certificate issuer:       /CN=23C0ACADA70321EB3942F0FF030B70AD9904DCAD
Certificate serial:       0B1C1245976ECB35976A55417C9E83848606E34B
Authority key identifier: 23:C0:AC:AD:A7:03:21:EB:39:42:F0:FF:03:0B:70:AD:99:04:DC:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23C0ACADA70321EB3942F0FF030B70AD9904DCAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zmifjf37mnPqsJzfc7ZebzZCPA7GXAK7YLS6XGj7aCE/0/323830343a373330633a3a2f33322d3332203d3e20323730383932.roa
Signing time:             Tue 11 Mar 2025 16:03:30 +0000
ROA not before:           Tue 11 Mar 2025 15:58:30 +0000
ROA not after:            Tue 10 Mar 2026 16:03:30 +0000
asID:                     270892
IP address blocks:        2804:730c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:1c:12:45:97:6e:cb:35:97:6a:55:41:7c:9e:83:84:86:06:e3:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23C0ACADA70321EB3942F0FF030B70AD9904DCAD
        Validity
            Not Before: Mar 11 15:58:30 2025 GMT
            Not After : Mar 10 16:03:30 2026 GMT
        Subject: CN=0ACDB740ABAC0E821C589FA3855EE316EE60376F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:99:4d:65:36:7c:83:fe:f4:b8:b0:48:f4:e9:
                    8c:3e:71:9c:35:cc:28:39:af:14:f3:58:d4:6c:28:
                    ed:ee:94:75:54:40:fc:45:53:cf:64:cc:0a:a5:2b:
                    a0:bd:d8:bd:1d:fe:3f:6a:e1:56:88:35:b2:8c:97:
                    ec:56:79:6d:20:9b:61:60:a8:52:ca:db:f6:1e:c3:
                    fa:12:f5:7b:7b:04:2c:19:e8:62:39:51:e4:57:30:
                    36:c0:d7:c7:55:c7:22:6e:2d:9a:93:34:38:20:55:
                    63:92:60:f0:9b:5d:de:de:ee:fb:49:f0:2d:71:91:
                    81:38:5f:0d:eb:bb:5b:0a:4f:e0:8d:82:95:4f:7d:
                    06:3c:eb:38:a2:be:c5:7c:cb:3d:1b:1c:fa:ae:30:
                    32:af:e4:db:db:cc:ae:e0:ad:e0:2c:be:42:9f:52:
                    19:16:05:81:c6:9b:69:6b:da:9f:b0:33:7b:49:68:
                    0f:2c:44:b3:a6:d6:a4:ad:b9:1d:f4:91:09:17:5a:
                    60:cf:eb:a7:c0:3a:7e:de:e9:ce:bc:e0:fc:ca:46:
                    42:b3:8b:ff:bd:73:ce:ce:3a:b3:29:57:9e:db:cd:
                    b9:54:06:32:a6:72:94:5d:ad:7d:cd:71:c3:bb:6b:
                    3b:17:36:9b:e1:94:69:cb:91:b6:b8:d5:7c:ad:b4:
                    a1:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:CD:B7:40:AB:AC:0E:82:1C:58:9F:A3:85:5E:E3:16:EE:60:37:6F
            X509v3 Authority Key Identifier:
                keyid:23:C0:AC:AD:A7:03:21:EB:39:42:F0:FF:03:0B:70:AD:99:04:DC:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zmifjf37mnPqsJzfc7ZebzZCPA7GXAK7YLS6XGj7aCE/0/23C0ACADA70321EB3942F0FF030B70AD9904DCAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23C0ACADA70321EB3942F0FF030B70AD9904DCAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zmifjf37mnPqsJzfc7ZebzZCPA7GXAK7YLS6XGj7aCE/0/323830343a373330633a3a2f33322d3332203d3e20323730383932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:730c::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:79:3b:c5:c1:17:38:4f:6f:94:7e:d3:62:7a:06:9a:a3:13:
         5e:11:72:a3:d9:8d:30:13:b6:c6:65:31:79:9f:27:b7:a7:2c:
         43:e8:f7:c9:e6:8e:01:33:78:e0:bb:d0:16:04:e9:2f:68:59:
         bc:38:0e:9d:b7:d3:41:a2:9e:6b:25:75:6a:c5:31:e5:80:7a:
         36:23:94:b9:b7:ce:fd:80:b9:ed:f9:08:98:15:5b:25:e2:ba:
         3b:d7:2a:ae:6d:e3:4d:90:cd:ac:b5:50:f1:2b:65:7d:d5:8f:
         de:f7:e8:61:5d:65:70:ad:ad:11:5f:6b:4a:bc:f4:52:0c:35:
         ce:a5:64:d4:6b:df:e2:b1:64:64:eb:d2:10:1c:79:e6:2f:60:
         e7:88:43:45:d1:41:1a:3e:79:af:cb:ab:9d:7f:c8:a4:07:74:
         2f:61:91:7c:76:e9:cf:b0:f9:3a:b8:07:37:b8:a9:bf:95:b5:
         19:62:5d:b8:5e:3b:89:53:15:94:83:6d:70:6d:57:ae:bc:48:
         a0:f5:55:49:f1:67:83:f0:70:04:9b:41:08:3f:16:bc:b4:5e:
         86:3f:18:c4:96:6b:41:7f:58:09:7a:b5:ba:42:65:b3:88:29:
         6d:54:06:ed:ca:8e:a8:cd:56:c7:6e:58:a8:5a:d0:0a:42:c6:
         32:5f:71:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:00:30 2025 by rpki-client