Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4AMiAtfKmdKpxMnhXNK4crr87Y1SdU8nrYLY2XLXXw2v/0/323830343a376135383a3a2f33322d313238203d3e20323731333631.roa
File:                     323830343a376135383a3a2f33322d313238203d3e20323731333631.roa (raw, json)
Hash identifier:          ixPTG48KIWVYJUQPbmClR0PL2HNxmzqr++VZzQt4dxc=
Subject key identifier:   A0:F9:9B:6D:E3:53:32:66:D0:99:FB:23:06:04:49:5F:BC:CD:A1:F2
Certificate issuer:       /CN=F22E53906E36BA15DBA0D8E157DB4DF9A8699AA8
Certificate serial:       59B738A3739A8AB5EB68D495E9C900B8ABF57228
Authority key identifier: F2:2E:53:90:6E:36:BA:15:DB:A0:D8:E1:57:DB:4D:F9:A8:69:9A:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F22E53906E36BA15DBA0D8E157DB4DF9A8699AA8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4AMiAtfKmdKpxMnhXNK4crr87Y1SdU8nrYLY2XLXXw2v/0/323830343a376135383a3a2f33322d313238203d3e20323731333631.roa
Signing time:             Thu 13 Feb 2025 18:38:48 +0000
ROA not before:           Thu 13 Feb 2025 18:33:48 +0000
ROA not after:            Thu 12 Feb 2026 18:38:48 +0000
asID:                     271361
IP address blocks:        2804:7a58::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:b7:38:a3:73:9a:8a:b5:eb:68:d4:95:e9:c9:00:b8:ab:f5:72:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F22E53906E36BA15DBA0D8E157DB4DF9A8699AA8
        Validity
            Not Before: Feb 13 18:33:48 2025 GMT
            Not After : Feb 12 18:38:48 2026 GMT
        Subject: CN=A0F99B6DE3533266D099FB230604495FBCCDA1F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:03:0e:55:b3:a3:43:c6:41:13:21:21:9a:8c:
                    6f:f5:a2:ce:23:89:23:98:dd:06:83:00:6a:01:d8:
                    d9:7a:d3:77:13:d7:3f:a0:80:62:c3:7b:6d:e9:07:
                    c5:4f:f4:61:01:8a:26:5a:d6:25:d1:4d:14:50:66:
                    01:70:6f:a5:80:4e:2a:4e:60:a6:ab:1a:82:a9:58:
                    3a:6d:e8:b8:00:7f:89:93:29:0f:19:21:b0:3a:07:
                    29:0e:99:3e:6d:79:30:17:63:f8:69:85:7e:56:ee:
                    66:74:62:51:13:34:dd:34:78:12:58:7b:f1:f7:75:
                    44:77:5f:87:0f:4a:2e:b8:d4:2f:87:e4:a3:10:49:
                    31:b6:d6:fe:3c:70:cd:78:a6:22:53:0c:ce:1b:f3:
                    d1:de:ce:b7:e7:97:55:95:d2:26:84:93:05:95:e1:
                    17:91:75:8a:8a:64:db:a5:9d:1f:28:94:af:33:da:
                    b0:87:fa:06:31:b1:dc:9a:eb:fe:15:5a:16:a3:f5:
                    03:95:24:3e:b0:b2:11:f6:91:a9:6f:59:1f:bb:c6:
                    fb:78:cf:dc:25:ac:93:60:4b:b8:16:f6:2c:16:dc:
                    79:1d:4d:31:77:bd:ff:00:86:a8:af:94:17:fc:54:
                    7e:61:66:f1:03:3f:ac:36:47:c6:50:e3:b9:03:4a:
                    7b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:F9:9B:6D:E3:53:32:66:D0:99:FB:23:06:04:49:5F:BC:CD:A1:F2
            X509v3 Authority Key Identifier:
                keyid:F2:2E:53:90:6E:36:BA:15:DB:A0:D8:E1:57:DB:4D:F9:A8:69:9A:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4AMiAtfKmdKpxMnhXNK4crr87Y1SdU8nrYLY2XLXXw2v/0/F22E53906E36BA15DBA0D8E157DB4DF9A8699AA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F22E53906E36BA15DBA0D8E157DB4DF9A8699AA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4AMiAtfKmdKpxMnhXNK4crr87Y1SdU8nrYLY2XLXXw2v/0/323830343a376135383a3a2f33322d313238203d3e20323731333631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a58::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:30:89:f1:13:3b:83:a1:2e:df:31:e6:0a:00:14:bb:4e:9a:
         16:62:39:f3:c6:fd:71:53:22:83:a2:0c:8a:52:89:3c:b2:cf:
         97:28:b3:1f:d5:e5:4d:6e:75:6e:42:47:a2:ac:3b:4f:d2:54:
         6f:19:15:c8:79:85:ac:c0:bd:80:b0:ef:4b:d1:3b:fe:9c:b8:
         16:73:23:77:93:bb:61:d0:1d:4a:60:08:f6:1f:33:96:55:0a:
         eb:f8:c5:3b:26:38:82:e9:d1:4e:8b:fa:14:db:bc:31:57:21:
         ca:ec:3f:84:c3:e4:ea:17:85:e8:29:d4:33:99:72:8b:43:4f:
         11:ce:61:98:1e:52:f4:d7:a5:5b:9d:7b:92:4a:ed:fb:57:99:
         99:66:75:32:4f:2e:68:58:a3:c2:02:f9:5a:6d:db:b4:3b:66:
         cd:1b:df:7d:e0:7d:3e:be:53:ad:e9:d2:e1:8a:45:09:13:1c:
         cd:79:e2:9a:c7:14:50:d9:51:61:a7:66:c9:72:d5:e9:15:3e:
         e3:61:03:71:95:7c:e8:d1:b4:9f:e0:47:63:72:5f:4c:ed:87:
         58:e5:60:15:6f:05:e6:cf:b9:94:a8:bf:83:14:f2:99:21:20:
         37:7b:e2:75:90:9e:b2:6b:08:09:51:45:27:f2:34:70:aa:9b:
         fd:7d:69:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 19:46:06 2025 by rpki-client