Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/323830343a393138383a3a2f33322d3332203d3e20323734363437.roa
File:                     323830343a393138383a3a2f33322d3332203d3e20323734363437.roa (raw, json)
Hash identifier:          FZjzKZ3kaLFT90g3LCsCJfliJ44YrQwVmFJPt/FiA/g=
Subject key identifier:   E4:00:9B:8C:F4:72:F0:F9:C6:4E:F5:68:DF:91:B3:6D:95:9F:9A:29
Certificate issuer:       /CN=48A5CE43DDF5F691570117B79D047D25F3A4035E
Certificate serial:       1C474F69502A13E96755614B02DA1D15B27A7C39
Authority key identifier: 48:A5:CE:43:DD:F5:F6:91:57:01:17:B7:9D:04:7D:25:F3:A4:03:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48A5CE43DDF5F691570117B79D047D25F3A4035E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/323830343a393138383a3a2f33322d3332203d3e20323734363437.roa
Signing time:             Thu 30 Jan 2025 17:21:10 +0000
ROA not before:           Thu 30 Jan 2025 17:16:10 +0000
ROA not after:            Thu 29 Jan 2026 17:21:10 +0000
asID:                     274647
IP address blocks:        2804:9188::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:47:4f:69:50:2a:13:e9:67:55:61:4b:02:da:1d:15:b2:7a:7c:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48A5CE43DDF5F691570117B79D047D25F3A4035E
        Validity
            Not Before: Jan 30 17:16:10 2025 GMT
            Not After : Jan 29 17:21:10 2026 GMT
        Subject: CN=E4009B8CF472F0F9C64EF568DF91B36D959F9A29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:09:42:89:f0:b8:45:7d:7c:2b:09:b1:8b:3e:
                    c0:1f:07:71:e2:93:54:94:7a:c3:89:9f:72:5e:bb:
                    e8:73:dd:5b:bf:79:4d:b5:0c:73:0d:32:74:43:8c:
                    7e:64:2d:ad:52:82:13:ff:f6:e0:e9:51:de:f7:20:
                    ed:5f:e4:52:e8:6a:09:47:b5:21:19:4b:64:63:53:
                    05:19:f4:cc:40:e0:dd:07:21:b1:92:f8:5b:af:46:
                    4e:d5:3b:bd:ad:d5:be:59:12:87:d8:84:6f:bb:64:
                    d8:dc:64:26:f2:b2:2f:57:51:11:12:40:3a:0c:a1:
                    1c:8d:59:19:e9:09:fd:99:c9:1c:d3:5b:a5:13:b9:
                    65:77:60:ba:6b:f4:1b:2d:6a:b1:cf:fd:1e:2f:ee:
                    60:83:21:4c:00:0e:07:2b:07:94:a4:dc:ec:f5:e8:
                    7c:b4:36:0f:1d:9b:28:2f:b2:6a:e3:2c:ee:b2:b0:
                    b7:97:e3:21:81:d5:ef:59:49:ca:25:32:ae:bd:55:
                    40:d6:ad:5b:22:64:b2:ad:c6:fb:29:ec:7e:65:95:
                    2f:58:d1:e2:94:8d:65:58:01:84:ba:5e:5a:52:7a:
                    13:aa:09:4a:fc:10:1c:bc:1c:42:55:62:13:f4:95:
                    16:6f:1b:62:20:82:06:16:57:4b:6e:90:aa:bb:df:
                    52:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:00:9B:8C:F4:72:F0:F9:C6:4E:F5:68:DF:91:B3:6D:95:9F:9A:29
            X509v3 Authority Key Identifier:
                keyid:48:A5:CE:43:DD:F5:F6:91:57:01:17:B7:9D:04:7D:25:F3:A4:03:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/48A5CE43DDF5F691570117B79D047D25F3A4035E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48A5CE43DDF5F691570117B79D047D25F3A4035E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/323830343a393138383a3a2f33322d3332203d3e20323734363437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9188::/32

    Signature Algorithm: sha256WithRSAEncryption
         c0:15:7c:d4:2f:de:94:6b:89:d7:6d:f6:72:a8:0a:d6:a7:83:
         5a:49:09:a4:44:6a:58:df:c1:45:ed:f4:f8:84:ea:07:ca:82:
         88:bf:78:ad:8f:9b:11:28:f5:de:d7:62:70:3b:54:45:50:50:
         e8:ea:f7:63:79:a4:5a:3d:54:8b:75:3c:4c:d9:2c:2e:74:fd:
         72:77:57:51:4d:7a:13:97:e5:c5:93:a3:d9:25:af:f3:bf:7c:
         89:08:e2:48:c1:da:c7:d5:3d:67:89:e3:2e:27:af:45:66:e4:
         34:fb:10:14:9e:a7:d6:f9:fe:91:0a:5e:08:23:74:66:9e:f2:
         88:04:45:23:e8:de:52:49:d1:8f:5b:0c:0e:ca:19:82:6a:ce:
         c6:2e:7c:d2:48:94:e4:47:c3:36:3a:64:48:38:5a:e1:af:7b:
         5e:92:cf:3e:e1:a7:85:1c:f7:11:cf:0d:b9:f9:aa:81:2e:20:
         73:0e:8c:02:fb:6c:16:4e:b7:d5:ec:db:84:67:02:c5:ce:ef:
         26:5d:65:b3:65:c8:39:ef:8c:b2:80:0a:26:f3:ec:b5:0c:de:
         3b:51:a6:47:59:21:f6:1b:97:5a:15:00:8a:86:89:20:4b:85:
         19:14:bb:e9:68:43:51:7c:3c:37:78:2a:4d:f9:f8:47:d1:24:
         09:b0:26:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:58:31 2025 by rpki-client