Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/323830313a38303a313431343a3a2f34382d3438203d3e203131303937.roa
File:                     323830313a38303a313431343a3a2f34382d3438203d3e203131303937.roa (raw, json)
Hash identifier:          Brhdau9FAiEkX57h7KrXN5cqyrDgavWkNJSRQKO/gRo=
Subject key identifier:   38:84:3C:EE:3B:48:03:BD:B9:C9:38:6D:6C:6E:C3:6F:28:C6:4B:39
Certificate issuer:       /CN=202FA7CA4FB68A7F044DBC88811484C065334A74
Certificate serial:       332F00776F781EAF533CBC2EB742C017B7D269F9
Authority key identifier: 20:2F:A7:CA:4F:B6:8A:7F:04:4D:BC:88:81:14:84:C0:65:33:4A:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/202FA7CA4FB68A7F044DBC88811484C065334A74.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/323830313a38303a313431343a3a2f34382d3438203d3e203131303937.roa
Signing time:             Sat 21 Dec 2024 00:23:03 +0000
ROA not before:           Sat 21 Dec 2024 00:18:03 +0000
ROA not after:            Sat 20 Dec 2025 00:23:03 +0000
asID:                     11097
IP address blocks:        2801:80:1414::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:2f:00:77:6f:78:1e:af:53:3c:bc:2e:b7:42:c0:17:b7:d2:69:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=202FA7CA4FB68A7F044DBC88811484C065334A74
        Validity
            Not Before: Dec 21 00:18:03 2024 GMT
            Not After : Dec 20 00:23:03 2025 GMT
        Subject: CN=38843CEE3B4803BDB9C9386D6C6EC36F28C64B39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9c:93:52:04:15:39:ad:63:8e:d3:13:ab:6f:
                    70:63:b8:b8:dd:6b:1b:b7:cf:34:b2:2d:c9:b2:88:
                    47:8f:55:6f:07:7e:44:2f:6e:3a:47:e6:6e:14:8b:
                    d6:90:3f:df:e4:a7:d8:0a:e8:d0:23:8f:31:c6:d0:
                    38:4a:34:79:61:67:1a:ba:85:f3:5d:c9:5f:83:de:
                    52:13:30:9f:6a:ff:52:bb:d8:1b:ea:0f:43:3b:3f:
                    7b:93:3d:b1:51:0d:7e:f7:63:3a:63:fc:dd:1f:e6:
                    48:b8:b7:2d:99:b2:d9:d4:cf:6e:cb:f0:f4:48:ee:
                    86:7c:9d:6f:52:51:43:6c:b9:58:9e:a6:fb:c0:99:
                    14:52:2c:3c:92:98:4c:8e:e7:b1:cd:e7:5e:43:5f:
                    5d:7e:74:9d:ed:77:da:69:dd:0a:c6:21:ab:94:a5:
                    e7:bf:86:c8:3f:b8:2c:8e:ba:36:4c:dc:69:79:ed:
                    f8:88:24:cb:ec:af:ea:6f:f4:7b:be:eb:a3:7a:9d:
                    fa:d9:06:26:59:f0:4f:8f:c7:71:fe:9b:4d:2c:13:
                    68:28:67:11:9e:40:b5:90:fe:69:a4:0d:ab:4b:37:
                    c2:17:c9:a6:4a:3b:91:08:c3:39:30:dc:b9:b8:27:
                    2e:81:19:36:da:ea:91:00:c0:89:dd:cf:a0:51:d9:
                    b2:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:84:3C:EE:3B:48:03:BD:B9:C9:38:6D:6C:6E:C3:6F:28:C6:4B:39
            X509v3 Authority Key Identifier:
                keyid:20:2F:A7:CA:4F:B6:8A:7F:04:4D:BC:88:81:14:84:C0:65:33:4A:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/202FA7CA4FB68A7F044DBC88811484C065334A74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/202FA7CA4FB68A7F044DBC88811484C065334A74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/323830313a38303a313431343a3a2f34382d3438203d3e203131303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:1414::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:dd:fd:7e:41:c5:b7:d3:51:9d:59:d5:79:f4:94:54:c2:4c:
         4a:a5:8b:86:f9:ad:e0:a5:47:cf:f5:d9:fe:fd:7c:28:03:bb:
         58:75:57:52:2b:79:38:61:8b:19:49:9d:8f:39:a2:67:24:45:
         a9:c5:ff:cc:42:fe:cb:cd:18:bd:1b:af:b8:96:bf:a8:b2:14:
         5e:ed:04:89:34:1f:18:8f:17:d9:4e:31:3b:2b:36:71:66:5d:
         0d:05:e1:2b:02:5d:da:47:35:60:a6:3b:e1:7b:68:13:15:c2:
         c8:51:f5:57:e3:53:7d:a6:ce:b8:ba:33:03:d5:ea:e5:c8:70:
         76:78:4a:a6:bb:06:e6:19:df:aa:3c:8f:5d:e3:f5:fa:ad:74:
         a5:fc:24:00:25:03:f0:f8:39:2c:f6:a1:ee:44:13:b1:b5:3f:
         c5:f6:c0:ef:70:b8:a9:7b:b0:4d:f3:41:20:00:b4:4c:3a:c1:
         70:ef:ec:f4:03:31:3b:84:ac:2d:72:e1:7f:74:94:88:3c:6c:
         6b:77:90:0d:c4:da:52:b0:44:c3:1c:74:97:d3:68:be:08:a9:
         0e:1e:0d:a3:c9:34:b7:01:ef:1d:dc:c9:f4:b3:f1:2a:9e:56:
         de:ca:ec:89:b0:8c:9f:05:90:8a:99:6b:48:1e:28:c5:f2:a2:
         b6:f6:16:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 10:07:15 2025 by rpki-client