Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4XgLV7T9jeZTdcaW2ASsT9BUYBe5ygvwrNs9hYGw7dAo/0/323830343a313263343a3a2f33322d313238203d3e20323633343937.roa
File:                     323830343a313263343a3a2f33322d313238203d3e20323633343937.roa (raw, json)
Hash identifier:          4yFRhoRdY3nd9ExGdTrhTMTTlk3qAEd7wct8X1aVDBM=
Subject key identifier:   AE:37:50:E3:1E:8B:24:36:50:11:9B:48:9B:60:81:9F:EF:73:6F:DD
Certificate issuer:       /CN=F5E38B0274440BC86616FA3AAA7BE0FA8A4DEA2D
Certificate serial:       4A61501EBB49A188549F6C4E4CB7CDF2224657DC
Authority key identifier: F5:E3:8B:02:74:44:0B:C8:66:16:FA:3A:AA:7B:E0:FA:8A:4D:EA:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5E38B0274440BC86616FA3AAA7BE0FA8A4DEA2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4XgLV7T9jeZTdcaW2ASsT9BUYBe5ygvwrNs9hYGw7dAo/0/323830343a313263343a3a2f33322d313238203d3e20323633343937.roa
Signing time:             Thu 19 Dec 2024 23:21:01 +0000
ROA not before:           Thu 19 Dec 2024 23:16:01 +0000
ROA not after:            Thu 18 Dec 2025 23:21:01 +0000
asID:                     263497
IP address blocks:        2804:12c4::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:61:50:1e:bb:49:a1:88:54:9f:6c:4e:4c:b7:cd:f2:22:46:57:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5E38B0274440BC86616FA3AAA7BE0FA8A4DEA2D
        Validity
            Not Before: Dec 19 23:16:01 2024 GMT
            Not After : Dec 18 23:21:01 2025 GMT
        Subject: CN=AE3750E31E8B243650119B489B60819FEF736FDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d2:9f:3c:44:1d:88:43:81:9e:21:54:51:77:
                    55:cf:ee:8f:ea:d3:01:fd:96:86:a0:bb:c0:15:b1:
                    95:57:f0:ac:a9:6c:52:c0:31:d5:6e:48:fa:78:20:
                    71:55:ad:b9:cd:31:89:9c:10:1f:72:00:97:8a:65:
                    b0:2a:0d:de:4c:70:86:9d:f7:43:14:1f:22:b2:b0:
                    df:af:5b:19:dc:5e:74:d0:3a:97:80:a8:75:fd:50:
                    fd:5e:11:92:8b:5b:5d:4e:d4:15:b3:30:8d:8d:15:
                    72:42:2a:9b:5c:6b:d7:20:cf:4e:5d:c5:b1:db:34:
                    f8:f3:f5:11:ca:8f:64:2e:2c:2d:23:53:81:00:5e:
                    63:e2:6f:16:43:c7:c9:77:a3:96:66:b9:af:31:e0:
                    c3:bd:0b:b6:7e:e9:73:38:49:49:1b:ef:28:38:a1:
                    ec:11:52:ba:cd:a3:dd:23:04:c7:5e:ad:b5:8e:db:
                    2e:b5:1a:68:4f:b2:6f:12:f0:12:81:d8:31:73:0f:
                    76:98:d0:81:21:b2:af:ee:c1:4e:40:d7:04:d8:1a:
                    ba:05:b3:dd:8c:1a:06:94:f7:7e:c1:4c:15:e0:87:
                    d1:b5:f6:17:e9:18:2d:aa:39:7a:1f:cd:98:97:41:
                    c7:ed:e6:24:0a:21:d4:8a:48:42:27:61:64:74:55:
                    20:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:37:50:E3:1E:8B:24:36:50:11:9B:48:9B:60:81:9F:EF:73:6F:DD
            X509v3 Authority Key Identifier:
                keyid:F5:E3:8B:02:74:44:0B:C8:66:16:FA:3A:AA:7B:E0:FA:8A:4D:EA:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4XgLV7T9jeZTdcaW2ASsT9BUYBe5ygvwrNs9hYGw7dAo/0/F5E38B0274440BC86616FA3AAA7BE0FA8A4DEA2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5E38B0274440BC86616FA3AAA7BE0FA8A4DEA2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4XgLV7T9jeZTdcaW2ASsT9BUYBe5ygvwrNs9hYGw7dAo/0/323830343a313263343a3a2f33322d313238203d3e20323633343937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:12c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:81:09:4e:f9:ae:23:9e:80:41:f0:e8:62:02:1c:92:32:5b:
         ef:5b:3c:8a:bd:8e:fe:0c:cd:19:97:a3:b0:1d:08:2f:2a:6e:
         4d:f7:3b:1c:0c:62:21:a5:52:bb:fc:b1:c1:ab:a1:5f:9b:73:
         27:8b:2f:9e:ff:a1:11:56:7b:99:36:c3:cf:b7:ff:49:84:ad:
         35:7b:ac:76:48:f9:cf:16:a2:89:6b:2b:2e:a1:d2:fc:96:9a:
         ba:bd:cf:26:db:e8:4e:a1:b3:49:7d:03:b7:fd:99:f5:4d:ac:
         40:32:40:06:16:5d:6e:d8:9b:0f:1d:37:30:fa:50:18:3d:70:
         91:24:a1:fc:82:5b:5b:be:d7:c1:fa:c7:54:0b:9f:e2:ce:a1:
         e3:c0:d6:57:62:e9:9e:e2:76:8a:08:36:c6:16:67:33:d1:e7:
         65:17:83:d4:94:63:3f:4a:21:21:1d:3d:e4:fc:85:10:d6:83:
         01:8b:23:79:b3:93:65:1f:63:d3:e7:62:21:d3:92:df:00:9c:
         54:43:cc:0a:a0:11:0e:7d:01:99:c1:4c:b9:13:29:76:bc:af:
         7f:86:fd:93:86:bd:96:91:57:4d:31:1b:27:b9:f2:4d:22:e8:
         a5:c6:d7:29:c4:f5:ec:f9:72:97:fd:5c:20:70:62:8f:61:7d:
         08:40:45:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:44:25 2025 by rpki-client