Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/323830343a393138383a343030303a3a2f33342d3334203d3e20323734363437.roa
File:                     323830343a393138383a343030303a3a2f33342d3334203d3e20323734363437.roa (raw, json)
Hash identifier:          mLO6kKfaWm8CkWYnZcbmRIxAxd63cQSe4qXcH4q/ggA=
Subject key identifier:   BB:20:4C:5A:A3:A8:A3:3E:D1:8B:C4:DE:00:12:71:B6:62:F4:87:B6
Certificate issuer:       /CN=48A5CE43DDF5F691570117B79D047D25F3A4035E
Certificate serial:       2EA0979BD1BE8FA34FD69E054DC8D8D6B7FDF1EF
Authority key identifier: 48:A5:CE:43:DD:F5:F6:91:57:01:17:B7:9D:04:7D:25:F3:A4:03:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48A5CE43DDF5F691570117B79D047D25F3A4035E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/323830343a393138383a343030303a3a2f33342d3334203d3e20323734363437.roa
Signing time:             Thu 30 Jan 2025 17:21:12 +0000
ROA not before:           Thu 30 Jan 2025 17:16:12 +0000
ROA not after:            Thu 29 Jan 2026 17:21:12 +0000
asID:                     274647
IP address blocks:        2804:9188:4000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:a0:97:9b:d1:be:8f:a3:4f:d6:9e:05:4d:c8:d8:d6:b7:fd:f1:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48A5CE43DDF5F691570117B79D047D25F3A4035E
        Validity
            Not Before: Jan 30 17:16:12 2025 GMT
            Not After : Jan 29 17:21:12 2026 GMT
        Subject: CN=BB204C5AA3A8A33ED18BC4DE001271B662F487B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e7:a3:29:a7:67:e3:42:a1:99:aa:7b:b5:13:
                    b4:2a:3a:2e:10:c3:a9:02:9e:88:2e:26:a3:25:7c:
                    d3:16:91:d4:76:e0:d5:61:6e:0b:c7:12:8d:ec:9f:
                    78:59:bb:b5:4d:cd:52:8e:3e:cd:77:ac:9a:4b:74:
                    a5:a0:19:4f:3a:c0:c3:84:f0:bf:08:d2:f1:e0:ff:
                    6d:0c:60:75:38:f4:fe:fa:43:68:62:0d:a7:b2:e7:
                    28:bc:d6:5a:a8:d6:09:ab:95:a5:40:c4:af:d8:65:
                    36:77:c3:3f:b3:b2:4f:06:35:a8:4b:7c:b7:87:4e:
                    4f:b8:13:c9:2c:3f:3f:cb:8c:5a:5e:23:cd:3c:ef:
                    a3:5f:af:da:de:6e:a2:6a:3a:34:53:d1:94:c9:c4:
                    5e:6d:d5:16:45:b6:08:13:a6:76:76:d6:ea:f0:46:
                    81:04:ff:46:2b:5a:64:6a:fc:7e:ba:45:80:ba:b0:
                    da:40:70:3d:c8:8a:c6:85:c5:b4:77:e9:53:c8:1c:
                    e6:e7:b6:7a:fd:d0:d2:a3:10:98:09:45:44:7c:d1:
                    16:c8:7d:1a:20:5b:9f:91:46:96:2a:af:59:96:21:
                    bd:15:2c:a4:d1:cf:f7:b2:c9:58:21:26:b4:40:20:
                    43:14:ff:d7:ca:b7:db:18:15:7b:69:28:38:f3:d9:
                    29:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:20:4C:5A:A3:A8:A3:3E:D1:8B:C4:DE:00:12:71:B6:62:F4:87:B6
            X509v3 Authority Key Identifier:
                keyid:48:A5:CE:43:DD:F5:F6:91:57:01:17:B7:9D:04:7D:25:F3:A4:03:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/48A5CE43DDF5F691570117B79D047D25F3A4035E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48A5CE43DDF5F691570117B79D047D25F3A4035E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/323830343a393138383a343030303a3a2f33342d3334203d3e20323734363437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9188:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         74:9a:29:c5:06:7f:e5:eb:1a:e5:48:a7:68:14:a8:e7:03:e2:
         fc:7e:bf:9f:e3:69:e3:37:6d:0f:75:fb:06:f8:06:16:f8:20:
         e3:38:3f:83:bd:15:de:4b:94:51:23:15:81:9e:0f:2b:7d:41:
         de:4e:29:0a:81:d7:58:ec:6f:04:98:89:6a:02:95:93:bd:f1:
         7e:9d:d8:ae:a5:37:0d:c2:8f:f0:dd:8e:48:62:64:b0:eb:6b:
         4c:fd:bf:7e:e5:c8:28:88:35:78:e6:e4:fd:70:3d:4d:0d:32:
         5b:3e:cc:a2:f2:c7:73:3e:77:4d:84:df:04:06:30:a8:85:dd:
         c0:13:41:f3:15:0a:2c:a4:55:c7:7c:fb:c3:fb:37:ce:3c:a8:
         63:83:d1:69:ba:8a:b8:c2:7e:25:8e:19:db:90:ee:7b:d2:5b:
         0f:90:ec:fb:eb:59:d7:89:be:98:a7:d2:c6:59:9f:1a:29:ad:
         76:89:f6:42:3b:f2:02:8f:bd:8a:ae:c2:08:06:60:82:95:ab:
         6c:e4:5f:e2:d9:51:e7:6c:76:da:b1:c6:d2:fb:5e:0f:24:a9:
         90:a1:5f:0c:44:7f:53:b6:c1:87:ad:a5:5e:1c:6e:32:41:b4:
         bb:a5:98:62:44:e0:c8:d8:83:93:16:f9:e1:58:30:b7:d3:b1:
         62:36:e9:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:58:17 2025 by rpki-client