Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8fLau9xGa3xMEMNwJPBtcVdfx7yC16LewRmZ6NSYHRGZ/0/323830343a353530343a633030303a3a2f33342d3334203d3e20323638363834.roa
File:                     323830343a353530343a633030303a3a2f33342d3334203d3e20323638363834.roa (raw, json)
Hash identifier:          iRtNi2cNY/xC/z+zZ1lGg86QI0Br27+XJhLxwDb8MSU=
Subject key identifier:   CE:67:75:4D:30:2F:78:F8:A7:A9:EF:64:62:CE:BF:9B:DA:4B:6E:97
Certificate issuer:       /CN=E2518D35F2E906725804C9906EB7F7CA9E723225
Certificate serial:       756F4B8CA8E43374D03409148E604404F799D0C1
Authority key identifier: E2:51:8D:35:F2:E9:06:72:58:04:C9:90:6E:B7:F7:CA:9E:72:32:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E2518D35F2E906725804C9906EB7F7CA9E723225.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8fLau9xGa3xMEMNwJPBtcVdfx7yC16LewRmZ6NSYHRGZ/0/323830343a353530343a633030303a3a2f33342d3334203d3e20323638363834.roa
Signing time:             Wed 22 Jan 2025 20:39:13 +0000
ROA not before:           Wed 22 Jan 2025 20:34:13 +0000
ROA not after:            Wed 21 Jan 2026 20:39:13 +0000
asID:                     268684
IP address blocks:        2804:5504:c000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:6f:4b:8c:a8:e4:33:74:d0:34:09:14:8e:60:44:04:f7:99:d0:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2518D35F2E906725804C9906EB7F7CA9E723225
        Validity
            Not Before: Jan 22 20:34:13 2025 GMT
            Not After : Jan 21 20:39:13 2026 GMT
        Subject: CN=CE67754D302F78F8A7A9EF6462CEBF9BDA4B6E97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:43:45:40:46:51:5e:70:38:a6:fc:0d:2b:96:
                    24:32:0f:a5:04:c8:52:ec:e4:13:3b:df:4e:12:7c:
                    75:91:b3:65:47:ca:62:cf:e9:ca:79:e1:38:5d:45:
                    d1:98:d0:cc:1e:ef:8a:04:78:10:3a:8a:1f:8f:37:
                    cc:6b:14:6a:1d:47:ce:f8:da:ea:ba:c2:8a:cb:48:
                    51:3a:56:1c:26:5e:84:d0:c2:fa:84:b4:b0:1d:37:
                    b8:87:52:73:af:ad:f3:fa:fe:d1:27:a4:16:9e:fe:
                    79:02:be:68:d9:77:eb:20:27:a4:1c:dc:6c:b7:d4:
                    03:01:54:36:85:18:bf:e6:8c:be:aa:22:57:c2:e4:
                    c5:55:98:d1:43:df:38:cf:e7:a2:0f:3d:c8:b5:b9:
                    d6:16:b0:04:e9:24:32:bf:05:87:ac:0b:81:12:53:
                    5e:8a:80:29:98:7e:8a:75:04:d8:1f:f2:1f:24:d7:
                    e4:7a:d2:4e:a6:4b:4d:a8:e8:8b:d0:20:60:c8:9f:
                    22:aa:c5:2d:18:5e:3f:00:59:5b:90:ae:4b:0c:31:
                    71:e1:82:1d:b9:8a:e7:b1:dc:ca:12:7f:8b:99:d5:
                    a6:05:8c:e9:d0:e4:9f:5c:d9:14:e0:04:9a:49:9b:
                    b2:79:8d:9d:73:f8:73:67:c3:1a:c5:65:49:0e:04:
                    d0:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:67:75:4D:30:2F:78:F8:A7:A9:EF:64:62:CE:BF:9B:DA:4B:6E:97
            X509v3 Authority Key Identifier:
                keyid:E2:51:8D:35:F2:E9:06:72:58:04:C9:90:6E:B7:F7:CA:9E:72:32:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8fLau9xGa3xMEMNwJPBtcVdfx7yC16LewRmZ6NSYHRGZ/0/E2518D35F2E906725804C9906EB7F7CA9E723225.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E2518D35F2E906725804C9906EB7F7CA9E723225.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8fLau9xGa3xMEMNwJPBtcVdfx7yC16LewRmZ6NSYHRGZ/0/323830343a353530343a633030303a3a2f33342d3334203d3e20323638363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5504:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         75:be:15:48:5f:d9:25:be:99:1f:70:1b:38:d4:2e:d1:32:6c:
         43:08:fe:27:56:dc:5e:8e:5e:5b:f0:82:60:62:33:4f:5d:c8:
         08:23:c4:dd:34:c3:2c:0d:6e:82:c1:bf:86:78:79:66:6b:8d:
         8e:6f:e0:0c:92:93:1c:6c:91:47:17:1e:4b:6b:1e:5f:cd:ae:
         df:0a:01:d0:ac:04:05:7c:0b:b0:1a:b7:09:ab:c9:5e:10:c8:
         56:85:af:47:61:c4:0f:66:f8:cd:0a:60:dc:67:47:ab:86:dd:
         9b:27:2f:35:4b:ac:6c:a7:da:fb:cc:25:a2:bd:1b:dd:f0:22:
         51:1a:67:72:8b:f2:92:28:51:9f:45:d5:6d:e5:e8:6c:da:54:
         4d:00:0a:fc:7d:a8:8c:c2:23:4a:6c:2b:4e:b9:cb:52:11:a9:
         10:72:ad:07:c4:3c:cd:ca:5a:1f:f8:93:a6:cc:36:f4:95:36:
         f0:cb:99:17:c6:07:b7:0f:7e:5b:fe:37:20:21:99:4c:a1:19:
         af:81:07:62:6c:51:e0:14:cc:11:e4:37:e3:ec:ca:05:bc:c9:
         10:25:1e:7e:52:b5:87:6e:d8:18:07:c2:c0:b2:a5:36:45:87:
         d5:d1:62:f2:ae:9e:95:cd:0f:80:82:58:ab:75:b3:86:a5:3a:
         9c:3d:98:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:21:50 2025 by rpki-client