Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ib9Vq4KPJ9e9FHdPVSjczzxrhMG25CftMNuF46XdA5m/1/323830343a363533303a3a2f33332d313238203d3e20323639343734.roa
File:                     323830343a363533303a3a2f33332d313238203d3e20323639343734.roa (raw, json)
Hash identifier:          qATP9wNPDDtS3pmPCsb7BAB899MoiCe8O9oHcorgvK4=
Subject key identifier:   BF:3D:17:E3:62:48:5C:98:A0:7E:47:8E:F0:F2:FC:E8:16:44:F9:20
Certificate issuer:       /CN=E072164F96709DE0BAF95CDD98A5A379CC96B3DA
Certificate serial:       426B384EC3B51E4553A3664BD3DE3D3829185C30
Authority key identifier: E0:72:16:4F:96:70:9D:E0:BA:F9:5C:DD:98:A5:A3:79:CC:96:B3:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E072164F96709DE0BAF95CDD98A5A379CC96B3DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ib9Vq4KPJ9e9FHdPVSjczzxrhMG25CftMNuF46XdA5m/1/323830343a363533303a3a2f33332d313238203d3e20323639343734.roa
Signing time:             Fri 05 Apr 2024 21:49:35 +0000
ROA not before:           Fri 05 Apr 2024 21:44:35 +0000
ROA not after:            Fri 04 Apr 2025 21:49:35 +0000
asID:                     269474
IP address blocks:        2804:6530::/33 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:6b:38:4e:c3:b5:1e:45:53:a3:66:4b:d3:de:3d:38:29:18:5c:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E072164F96709DE0BAF95CDD98A5A379CC96B3DA
        Validity
            Not Before: Apr  5 21:44:35 2024 GMT
            Not After : Apr  4 21:49:35 2025 GMT
        Subject: CN=BF3D17E362485C98A07E478EF0F2FCE81644F920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:33:78:f0:71:58:64:75:d8:d1:be:d7:f0:27:
                    6f:de:e8:3a:c7:3c:c9:a2:fe:d1:7e:83:ad:05:65:
                    97:b9:f1:f7:32:3b:b9:b4:08:58:d5:bf:d5:eb:43:
                    2d:84:25:b3:06:f7:89:05:4c:28:ae:c6:05:19:11:
                    6b:dd:c5:bf:f0:75:72:af:14:3e:6d:a0:20:0b:42:
                    12:b1:da:de:ad:84:9a:d8:06:d6:ab:b5:1b:96:e7:
                    78:3c:b5:0a:5f:2e:65:ee:c3:a0:f4:78:b1:0d:d7:
                    be:54:0b:fb:e9:cf:5c:ed:53:90:10:fc:3c:0d:bd:
                    61:59:40:99:78:b2:32:d6:fb:93:9f:dc:9e:7b:29:
                    4d:f1:9b:5e:03:de:1f:68:20:23:44:1b:27:16:a3:
                    cd:f3:ff:b5:cd:80:9c:bf:ac:79:6b:17:c2:26:4f:
                    ef:4f:32:f7:1c:aa:c7:02:cc:7b:9b:55:56:a1:5f:
                    2a:1b:f6:ff:87:7d:9a:ee:6b:20:4d:4a:aa:10:2b:
                    56:36:31:b0:15:3b:19:c9:66:b5:98:93:81:89:ec:
                    d4:3c:3f:4f:5a:5a:cb:02:b9:aa:85:f6:ec:11:a3:
                    4a:0e:98:d8:87:16:58:67:d1:c2:dc:ad:56:ab:02:
                    88:0c:c0:1f:33:dd:ab:f7:54:b6:c9:4c:9b:55:e4:
                    c2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:3D:17:E3:62:48:5C:98:A0:7E:47:8E:F0:F2:FC:E8:16:44:F9:20
            X509v3 Authority Key Identifier:
                keyid:E0:72:16:4F:96:70:9D:E0:BA:F9:5C:DD:98:A5:A3:79:CC:96:B3:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ib9Vq4KPJ9e9FHdPVSjczzxrhMG25CftMNuF46XdA5m/1/E072164F96709DE0BAF95CDD98A5A379CC96B3DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E072164F96709DE0BAF95CDD98A5A379CC96B3DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ib9Vq4KPJ9e9FHdPVSjczzxrhMG25CftMNuF46XdA5m/1/323830343a363533303a3a2f33332d313238203d3e20323639343734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6530::/33

    Signature Algorithm: sha256WithRSAEncryption
         64:90:b9:44:08:28:c3:b6:4e:92:5a:db:69:df:b4:b1:4c:c8:
         3b:4d:5d:fb:49:e8:4b:de:f4:10:fa:8d:6e:90:64:56:cc:0b:
         56:7f:1a:06:69:50:68:4e:dc:f9:cb:21:53:8e:58:58:5a:ee:
         54:33:c9:1a:3a:46:d4:bd:d5:39:d9:0f:d0:ef:e7:bb:d6:2d:
         18:43:93:85:15:f7:7f:6b:88:90:c3:c2:1b:49:5b:ae:b0:61:
         1d:cb:7d:8d:bc:f3:3a:7a:8f:a5:38:ea:c1:24:ff:06:98:21:
         29:91:b0:5d:30:5c:8a:64:a2:14:49:61:b4:73:ec:68:c1:28:
         6e:ff:fd:f5:d2:d8:8c:cf:f7:85:0a:40:60:a4:ff:21:33:c7:
         71:c5:e2:8a:3c:e6:e7:cd:d5:ea:ad:97:0d:12:69:0f:ec:5d:
         13:80:05:49:e1:5f:d8:37:8b:30:2f:58:8d:52:0f:7a:79:b7:
         12:bb:db:29:78:41:d2:9d:d0:95:88:4d:26:d5:e7:60:b2:40:
         ab:0d:b7:0e:2b:12:2e:f4:1a:24:f0:56:5e:d7:5a:aa:1e:6f:
         a3:94:20:21:2f:4a:c3:ef:4c:92:ce:c0:c2:73:0a:b4:b3:bd:
         c4:44:99:00:86:14:1f:5f:59:05:68:6c:65:ae:f4:36:34:f1:
         6d:7b:a6:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 03:32:21 2025 by rpki-client