Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/1/323830343a356562343a3a2f33322d3332203d3e20323639303531.roa
File:                     323830343a356562343a3a2f33322d3332203d3e20323639303531.roa (raw, json)
Hash identifier:          ccLMBbTMwYlMQR2pPUnlblzit3UgSPt03i3SPvU8EFo=
Subject key identifier:   6C:55:FC:26:EF:F2:17:A6:6E:03:68:E3:81:40:8A:EB:32:63:63:0D
Certificate issuer:       /CN=D97EFFA58186EAE6B6F701100E4FACC784AACB40
Certificate serial:       7CBB6E3DE8BA46EE010DC866D058900879035404
Authority key identifier: D9:7E:FF:A5:81:86:EA:E6:B6:F7:01:10:0E:4F:AC:C7:84:AA:CB:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D97EFFA58186EAE6B6F701100E4FACC784AACB40.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/1/323830343a356562343a3a2f33322d3332203d3e20323639303531.roa
Signing time:             Fri 29 Nov 2024 12:38:36 +0000
ROA not before:           Fri 29 Nov 2024 12:33:36 +0000
ROA not after:            Fri 28 Nov 2025 12:38:36 +0000
asID:                     269051
IP address blocks:        2804:5eb4::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:bb:6e:3d:e8:ba:46:ee:01:0d:c8:66:d0:58:90:08:79:03:54:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D97EFFA58186EAE6B6F701100E4FACC784AACB40
        Validity
            Not Before: Nov 29 12:33:36 2024 GMT
            Not After : Nov 28 12:38:36 2025 GMT
        Subject: CN=6C55FC26EFF217A66E0368E381408AEB3263630D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:8e:3a:25:0b:b7:92:60:64:a0:42:b2:9e:99:
                    1a:e5:b2:44:37:43:71:ed:76:b8:33:97:07:90:8e:
                    e3:94:09:e4:78:6b:22:1b:5a:49:d5:38:73:fb:ce:
                    5a:2e:e4:cd:c3:0d:d8:3c:bf:4b:50:bf:47:00:ee:
                    67:c5:0e:fa:45:54:0b:b5:84:71:71:e7:61:51:43:
                    e5:ce:0e:34:07:ab:e2:b4:6f:f8:e8:9f:67:af:cc:
                    da:f8:a8:53:7d:3f:5c:69:e3:a2:a7:09:20:e5:25:
                    23:11:72:8f:5e:4c:5d:7d:e9:37:c8:2c:32:f8:14:
                    6d:c9:c2:e8:4a:8f:b4:59:44:ad:5f:25:b7:ba:6f:
                    7c:d2:93:05:7a:7f:cb:50:1d:f6:17:5b:08:0c:d9:
                    04:96:e9:8f:d9:5c:37:8f:94:8b:94:e8:ce:b6:01:
                    6a:28:37:f6:0d:9a:53:0b:fb:75:16:9e:0f:c7:ac:
                    3f:96:fc:d3:43:4d:9e:d9:88:ed:e5:bd:ff:2f:62:
                    20:91:5d:58:38:41:23:9a:bc:12:75:73:7a:98:13:
                    d6:8e:26:e0:95:ff:08:95:01:4b:12:db:c6:67:57:
                    c4:57:21:d2:32:e4:28:ea:e8:82:da:f4:ee:df:33:
                    77:9b:81:37:64:94:a8:6b:75:38:bd:4f:03:7b:82:
                    c0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:55:FC:26:EF:F2:17:A6:6E:03:68:E3:81:40:8A:EB:32:63:63:0D
            X509v3 Authority Key Identifier:
                keyid:D9:7E:FF:A5:81:86:EA:E6:B6:F7:01:10:0E:4F:AC:C7:84:AA:CB:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/1/D97EFFA58186EAE6B6F701100E4FACC784AACB40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D97EFFA58186EAE6B6F701100E4FACC784AACB40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/1/323830343a356562343a3a2f33322d3332203d3e20323639303531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5eb4::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:a6:fa:24:a3:30:d1:45:b9:95:60:67:c1:67:f5:f9:43:a7:
         b0:07:4a:a2:08:d2:ab:91:b4:26:ee:6c:e6:12:72:d1:10:56:
         42:5f:40:6a:0b:5f:3b:a3:38:6e:2b:85:25:0a:ac:49:f6:f1:
         d3:27:4c:9f:74:98:c2:76:67:ba:4b:79:ff:23:87:79:0f:c2:
         74:0c:db:5f:fe:81:7d:ab:61:f9:5b:76:ed:22:d4:32:d7:eb:
         cf:c4:fe:d2:e3:bb:06:63:ac:f4:be:34:9e:d6:03:e7:90:60:
         42:35:d0:10:dd:4c:21:e0:73:3f:24:9c:f3:5d:4c:e4:99:5d:
         6a:ba:8d:4b:14:68:63:01:b5:c4:d2:48:20:4f:35:19:75:7a:
         fd:58:6a:15:f0:28:cf:7d:c8:bc:30:36:21:c1:65:25:d8:c0:
         06:0a:cf:f6:df:c7:49:22:3e:64:c8:86:72:e4:ea:0f:8b:33:
         6b:c4:5e:00:b9:cb:56:dd:13:37:16:19:93:23:fe:6a:91:90:
         a6:dc:e8:0c:de:5a:78:02:a4:4b:3e:1c:f7:70:81:d3:c0:d6:
         3e:81:27:e8:8c:12:08:7a:3f:4a:fb:e6:97:ed:cb:b7:65:e6:
         f2:bc:52:c7:44:f1:33:ca:f9:d2:13:d3:de:b3:e7:42:25:b5:
         a8:a2:24:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:40:57 2025 by rpki-client