Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/323830343a343131343a3a2f33322d3336203d3e20323636303032.roa
File:                     323830343a343131343a3a2f33322d3336203d3e20323636303032.roa (raw, json)
Hash identifier:          Q7cvrPUAxEGPK+zP+2a8Sw379e7Kitszf1hY1lwjap4=
Subject key identifier:   33:79:68:48:C9:A6:EE:AF:E5:59:E9:40:E0:D3:C2:07:14:A9:BF:5E
Certificate issuer:       /CN=25089DCD3744CF5779120D2EC9DF3677EBC48A03
Certificate serial:       7F70850D9B7CD26C0DCE85D2AF93333E0C039E33
Authority key identifier: 25:08:9D:CD:37:44:CF:57:79:12:0D:2E:C9:DF:36:77:EB:C4:8A:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25089DCD3744CF5779120D2EC9DF3677EBC48A03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/323830343a343131343a3a2f33322d3336203d3e20323636303032.roa
Signing time:             Mon 30 Dec 2024 11:47:57 +0000
ROA not before:           Mon 30 Dec 2024 11:42:57 +0000
ROA not after:            Mon 29 Dec 2025 11:47:57 +0000
asID:                     266002
IP address blocks:        2804:4114::/32 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:70:85:0d:9b:7c:d2:6c:0d:ce:85:d2:af:93:33:3e:0c:03:9e:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25089DCD3744CF5779120D2EC9DF3677EBC48A03
        Validity
            Not Before: Dec 30 11:42:57 2024 GMT
            Not After : Dec 29 11:47:57 2025 GMT
        Subject: CN=33796848C9A6EEAFE559E940E0D3C20714A9BF5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cc:71:b3:5e:4c:f7:61:0c:4d:99:48:6d:b7:
                    c7:56:81:98:88:96:f5:a0:eb:0c:1c:ed:70:54:0b:
                    7f:56:d3:05:03:50:36:58:be:6f:e1:34:e4:2c:c3:
                    b7:2e:3b:b9:bf:81:9c:08:af:67:ae:eb:0c:96:ad:
                    70:33:45:27:3d:28:7c:e0:0e:ec:5b:07:91:f2:ed:
                    95:b8:0a:52:b6:00:b9:24:7f:63:bf:a6:be:5a:45:
                    d8:6e:5a:1c:23:31:bd:13:67:2d:4f:f9:1b:b9:d8:
                    99:b3:06:32:b5:0b:00:26:91:d0:b1:f5:d7:f6:bf:
                    fc:41:70:a5:66:2f:c4:7f:cc:ae:37:82:39:25:81:
                    2c:68:a9:f0:5b:dc:65:c1:31:12:63:97:47:2b:47:
                    bf:b2:4b:4a:23:a4:17:e7:0d:9b:90:77:94:37:9c:
                    15:c5:4d:32:ba:a9:99:57:87:6a:af:1d:42:b6:ab:
                    1f:9f:6e:a9:4a:f1:dc:cb:e4:19:c0:7a:c1:0d:7b:
                    22:2a:3d:80:8b:82:68:f5:c6:b4:63:a2:58:01:21:
                    1e:66:34:dd:e3:7e:27:bb:c6:8b:7c:db:e8:a5:33:
                    8d:03:93:28:f5:24:de:d0:3f:d6:4a:36:12:28:36:
                    0e:ec:b3:10:ed:5d:5b:81:be:fe:d5:68:bf:0f:c8:
                    15:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:79:68:48:C9:A6:EE:AF:E5:59:E9:40:E0:D3:C2:07:14:A9:BF:5E
            X509v3 Authority Key Identifier:
                keyid:25:08:9D:CD:37:44:CF:57:79:12:0D:2E:C9:DF:36:77:EB:C4:8A:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/25089DCD3744CF5779120D2EC9DF3677EBC48A03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25089DCD3744CF5779120D2EC9DF3677EBC48A03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/323830343a343131343a3a2f33322d3336203d3e20323636303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4114::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:5c:f7:19:9d:a5:04:ad:7b:a0:b7:e6:e9:1b:78:05:45:af:
         be:ee:bf:3b:da:3a:33:bb:ac:a2:34:6a:fe:99:b7:74:cf:bf:
         1e:b8:2b:8a:9a:43:38:f9:37:14:4d:c4:2a:df:f8:34:d5:09:
         75:8c:d2:c3:59:61:6d:38:59:32:1b:ec:1e:ea:18:72:77:3d:
         81:d3:43:1c:91:6e:b9:c6:d0:93:73:6c:21:55:6c:7e:f9:1d:
         29:5a:14:33:7e:c9:e4:db:9f:71:c4:05:d9:ba:52:ed:63:b6:
         55:35:e5:90:65:d8:04:c5:8a:49:72:88:00:9a:03:91:06:55:
         0f:82:48:f2:ca:21:12:99:61:0f:c1:38:6e:d8:8d:1e:0c:61:
         fd:5c:48:93:d8:10:9e:07:eb:5f:70:08:4f:4a:b5:36:01:d2:
         d1:10:4d:e2:f7:b9:5b:68:6a:10:80:86:87:d7:cc:dc:6c:e2:
         09:cb:03:7d:df:56:d5:0c:e2:68:8c:b6:18:be:3c:07:08:40:
         c2:62:8c:d1:e1:4f:6f:e2:e0:9b:8f:eb:6a:26:b3:4f:98:4d:
         63:e1:5c:cb:8b:96:e3:ab:19:f4:d0:0b:0d:06:41:57:2a:3a:
         82:a0:de:64:c8:42:ca:42:00:37:82:15:8f:1a:8e:4f:c6:71:
         2a:56:0f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:26:08 2025 by rpki-client