Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9xhNcmFFLwr2Y54Dcqgp2mMvB6QLcV4b3sdKbVtGB8xT/0/323830343a316337633a3a2f33322d3332203d3e203631363538.roa
File:                     323830343a316337633a3a2f33322d3332203d3e203631363538.roa (raw, json)
Hash identifier:          69eFwpCaUkDZPq7wLq2uiCcK4kJfF5g09lNywrcYIQ4=
Subject key identifier:   39:8D:3E:09:FE:E3:59:CF:D9:EE:0B:77:04:77:A1:08:A3:4F:93:ED
Certificate issuer:       /CN=6DF0863609094DB13EEED7D99E00A084A7C95256
Certificate serial:       43CE3FE7081FA8B866D76D9B00078E9A6E56CEBB
Authority key identifier: 6D:F0:86:36:09:09:4D:B1:3E:EE:D7:D9:9E:00:A0:84:A7:C9:52:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6DF0863609094DB13EEED7D99E00A084A7C95256.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9xhNcmFFLwr2Y54Dcqgp2mMvB6QLcV4b3sdKbVtGB8xT/0/323830343a316337633a3a2f33322d3332203d3e203631363538.roa
Signing time:             Mon 09 Dec 2024 17:22:50 +0000
ROA not before:           Mon 09 Dec 2024 17:17:50 +0000
ROA not after:            Mon 08 Dec 2025 17:22:50 +0000
asID:                     61658
IP address blocks:        2804:1c7c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:ce:3f:e7:08:1f:a8:b8:66:d7:6d:9b:00:07:8e:9a:6e:56:ce:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6DF0863609094DB13EEED7D99E00A084A7C95256
        Validity
            Not Before: Dec  9 17:17:50 2024 GMT
            Not After : Dec  8 17:22:50 2025 GMT
        Subject: CN=398D3E09FEE359CFD9EE0B770477A108A34F93ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ec:28:d1:64:cd:d8:3d:5d:99:fb:01:7e:2e:
                    aa:e4:78:cd:6e:0d:70:9b:33:c6:7d:13:13:00:d1:
                    ec:bf:59:0c:d0:ac:ba:ca:69:50:f6:6d:3d:8f:65:
                    b0:eb:94:60:e9:dd:b3:32:35:8d:9a:a5:24:f8:e4:
                    d5:12:90:2f:b0:5f:3d:40:f5:b4:61:62:07:ff:71:
                    ce:f4:52:dd:01:d3:34:b7:2f:15:4b:86:ba:2e:7a:
                    1b:a6:79:c3:e3:90:26:7e:7c:3a:2f:53:3a:c9:ed:
                    34:31:7e:b8:0a:9d:76:e9:fc:05:bd:3d:aa:cd:b5:
                    31:52:e7:04:63:7c:54:a5:c2:fb:9c:d6:b3:b9:58:
                    ef:d5:15:69:98:1d:95:5a:ab:50:2d:a4:9e:a5:0e:
                    98:46:95:86:1c:4e:1c:38:2f:bb:b8:e4:b0:de:f6:
                    07:c5:18:3f:11:99:3e:b6:69:1b:00:73:e7:0a:1f:
                    66:d6:57:1b:c9:dd:99:83:ee:2e:c4:2d:cd:33:c6:
                    9d:bd:14:a4:e0:c4:ed:23:9e:f7:99:53:65:8f:3f:
                    95:14:54:79:53:aa:dd:46:a1:6e:f5:c3:c6:49:a7:
                    f7:0c:41:95:39:0e:04:8d:76:ad:42:05:2c:bb:1d:
                    87:7a:3e:d7:5e:b1:dc:05:20:ad:51:df:03:85:5e:
                    0d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:8D:3E:09:FE:E3:59:CF:D9:EE:0B:77:04:77:A1:08:A3:4F:93:ED
            X509v3 Authority Key Identifier:
                keyid:6D:F0:86:36:09:09:4D:B1:3E:EE:D7:D9:9E:00:A0:84:A7:C9:52:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9xhNcmFFLwr2Y54Dcqgp2mMvB6QLcV4b3sdKbVtGB8xT/0/6DF0863609094DB13EEED7D99E00A084A7C95256.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6DF0863609094DB13EEED7D99E00A084A7C95256.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9xhNcmFFLwr2Y54Dcqgp2mMvB6QLcV4b3sdKbVtGB8xT/0/323830343a316337633a3a2f33322d3332203d3e203631363538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c7c::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:cb:08:ad:2e:a2:20:8e:d0:02:a7:0d:3e:e7:64:63:4a:a2:
         9a:54:00:db:9e:78:2f:d2:00:a7:ef:aa:27:94:c4:58:35:93:
         42:70:bf:a3:0b:e7:db:da:e6:f0:bb:23:a9:41:9c:62:9d:5c:
         c8:61:a2:aa:88:5e:a4:3d:5c:19:e9:56:d1:cd:a0:ea:d8:50:
         8c:e5:ae:97:d4:aa:ab:2a:44:e3:83:dd:80:42:b1:9e:99:a4:
         76:82:2f:46:be:80:16:df:48:9a:73:97:28:e3:10:3c:09:a7:
         5d:8d:d2:0c:bf:7a:06:93:8d:6d:46:7d:4b:01:77:0e:15:31:
         05:1f:c4:24:9c:c1:c0:14:cd:d5:3f:9b:2b:c7:9b:e6:47:bc:
         69:46:9c:74:1f:dd:a6:42:f3:17:dd:a7:4f:18:f3:32:a0:0f:
         8f:84:d2:54:f3:82:19:38:e7:14:85:73:fd:b0:c9:98:ab:d0:
         69:4c:3c:29:0b:93:84:71:dd:f8:98:c3:6f:7d:78:63:9a:94:
         b7:89:75:c9:f1:85:f2:a4:1f:bb:e1:a7:5a:1a:12:75:91:e0:
         6c:b2:d7:54:e9:07:72:65:d8:c8:83:89:72:47:fa:ba:24:52:
         1d:29:94:23:5c:d1:07:eb:03:81:8e:0d:e9:93:5e:69:04:dc:
         90:f1:96:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:56:17 2025 by rpki-client