Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a633030303a3a2f33362d3336203d3e20323637393432.roa
File:                     323830343a353539303a633030303a3a2f33362d3336203d3e20323637393432.roa (raw, json)
Hash identifier:          hJ1hcGrEohtBLm9XZO6fTWw3TC6HZAYuKUDEHCwYaQU=
Subject key identifier:   01:82:F5:3D:7B:F2:65:DD:B3:43:DF:42:2D:EB:F6:BC:E3:CB:4E:66
Certificate issuer:       /CN=0FD65004E7C4085F2D33DF17345261EDD9B3A811
Certificate serial:       3A1B30970E33C58C8251A9CBE0442B624EF7E516
Authority key identifier: 0F:D6:50:04:E7:C4:08:5F:2D:33:DF:17:34:52:61:ED:D9:B3:A8:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FD65004E7C4085F2D33DF17345261EDD9B3A811.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a633030303a3a2f33362d3336203d3e20323637393432.roa
Signing time:             Wed 26 Mar 2025 16:51:07 +0000
ROA not before:           Wed 26 Mar 2025 16:46:07 +0000
ROA not after:            Wed 25 Mar 2026 16:51:07 +0000
asID:                     267942
IP address blocks:        2804:5590:c000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:1b:30:97:0e:33:c5:8c:82:51:a9:cb:e0:44:2b:62:4e:f7:e5:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FD65004E7C4085F2D33DF17345261EDD9B3A811
        Validity
            Not Before: Mar 26 16:46:07 2025 GMT
            Not After : Mar 25 16:51:07 2026 GMT
        Subject: CN=0182F53D7BF265DDB343DF422DEBF6BCE3CB4E66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:cf:37:db:53:6f:52:99:e1:c2:cb:c5:02:ae:
                    d0:86:2d:98:79:50:8c:cd:11:b9:9c:9b:0d:16:02:
                    54:a5:5f:72:f9:18:54:62:13:0d:30:8f:ee:9d:ee:
                    01:66:e8:9d:3f:62:1d:2b:c6:a4:03:12:dc:2a:20:
                    4b:30:a7:07:39:fa:19:9c:9c:5d:fb:3c:47:d8:84:
                    d4:b4:46:d8:a0:86:ec:54:76:04:ba:da:94:9a:77:
                    f8:1c:24:db:ae:95:70:f8:41:52:c1:43:1d:27:5c:
                    62:7f:0a:f8:06:ba:04:75:de:38:2e:47:af:84:72:
                    a3:fa:50:e0:ec:b8:54:27:4b:4d:5d:48:0b:2b:80:
                    6e:f0:a8:fd:d6:bc:c1:07:67:24:23:d3:3a:f0:b3:
                    d9:9d:85:99:18:cd:4b:2f:17:ee:1c:22:6d:8e:f3:
                    ab:45:9d:72:6f:09:39:b0:09:e8:33:7b:d0:f5:e9:
                    de:e8:81:f7:e7:0f:87:61:07:d9:62:f6:cd:30:34:
                    b4:9b:8a:84:07:ca:0a:e6:59:50:57:db:19:c8:0b:
                    35:f9:aa:bd:8b:3f:32:48:5f:8b:71:b9:af:cc:94:
                    33:f5:96:21:8c:ee:99:f4:f3:79:e5:83:24:8c:bc:
                    c8:f7:3f:1c:32:20:c3:6c:b9:2a:10:d7:75:0c:8d:
                    34:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:82:F5:3D:7B:F2:65:DD:B3:43:DF:42:2D:EB:F6:BC:E3:CB:4E:66
            X509v3 Authority Key Identifier:
                keyid:0F:D6:50:04:E7:C4:08:5F:2D:33:DF:17:34:52:61:ED:D9:B3:A8:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/0FD65004E7C4085F2D33DF17345261EDD9B3A811.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FD65004E7C4085F2D33DF17345261EDD9B3A811.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a633030303a3a2f33362d3336203d3e20323637393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5590:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         3a:db:7e:a6:b9:87:df:fa:61:7e:35:af:b1:fd:ec:f9:40:e1:
         a8:c2:d0:f8:2c:9b:4e:56:42:fa:55:fe:34:a7:d9:83:bd:86:
         6b:be:3e:91:b6:57:c8:d8:a3:9e:5c:0e:6f:30:ca:a5:63:00:
         1d:fa:0a:87:1f:be:03:20:05:90:15:e1:a9:e0:5a:f3:00:7b:
         d9:cb:05:8f:68:86:39:a1:06:c4:68:01:d8:14:4b:79:42:db:
         db:c6:15:71:bd:0c:97:6b:53:1f:6d:74:2e:ac:a2:f7:b3:b2:
         a6:98:6d:77:2b:c6:8b:d8:fd:5b:48:06:00:f3:33:cd:26:28:
         5b:a0:8b:9b:0c:a8:58:f8:37:f1:a6:50:b8:bc:49:c4:cb:72:
         78:16:52:6f:ff:02:0f:bf:7b:bf:20:8d:02:65:6f:d2:f3:1e:
         c5:f7:dc:87:33:6e:8a:3b:e1:8f:98:2d:a7:e3:2d:fa:6e:e4:
         7e:31:18:d0:f8:4a:f0:77:9f:1e:82:9d:ac:f6:a3:f0:60:18:
         19:13:bc:a1:cc:77:43:33:be:6b:dd:7a:33:dd:2a:85:d4:f0:
         98:b2:f9:51:c0:07:89:ab:2c:5f:9f:47:00:f0:13:b5:2f:68:
         c2:26:76:80:1a:1b:31:31:6b:83:a9:be:4b:c9:d1:32:b1:92:
         ac:2a:d2:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:00:07 2025 by rpki-client