Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8vYMFeQ6JuADYG1En39NgYmAPykR2R5zWJDGcNJcHJnD/1/323830343a386336343a3a2f33322d3332203d3e203631363135.roa
File:                     323830343a386336343a3a2f33322d3332203d3e203631363135.roa (raw, json)
Hash identifier:          dROxOUJ//XK7T20WNrzCQ7E0yEuu+XJ1fvyVYuo6jqY=
Subject key identifier:   06:7B:30:9F:7A:98:92:0D:4B:42:22:20:9C:B3:3C:1F:43:43:CF:4D
Certificate issuer:       /CN=252D6C06BE26C39AC59D0269A484BC7CDA2E17D0
Certificate serial:       6426D9EB69F5AD6DE21C7FA9C0F0B03EBBFCBD36
Authority key identifier: 25:2D:6C:06:BE:26:C3:9A:C5:9D:02:69:A4:84:BC:7C:DA:2E:17:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/252D6C06BE26C39AC59D0269A484BC7CDA2E17D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vYMFeQ6JuADYG1En39NgYmAPykR2R5zWJDGcNJcHJnD/1/323830343a386336343a3a2f33322d3332203d3e203631363135.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     61615
IP address blocks:        2804:8c64::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:26:d9:eb:69:f5:ad:6d:e2:1c:7f:a9:c0:f0:b0:3e:bb:fc:bd:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=252D6C06BE26C39AC59D0269A484BC7CDA2E17D0
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=3082010A0282010100AE1420C4EEF36E31D4B1E04747DE6A8AD257A7632AC62F4B4B19C03FB7A276CFEA76D3B5A7EC920913FBF6372726442963EBC1CB3CC40C2FBC4E5444B5D9E9A89438F72E2F4B83D79603EC23B0CEA9F6B9B86319EA89D1FEC6956F9180A1FB68ED2BE8B9294AE781840327B765CE5834B1D21FAA96AEBB5BC10EF4D3B9D51B0832986134DF465B9C3AE064E3E43F51E64B4601B1DBA52789BCC2D4F6FFF6C156FA49F3B2837FC40095855A3577DB40EAFDCF134DF529557E25CF501B63084C340D9445EC16EA1570F3C3A83C27F93F7361836974252706D5973794CFB69F7D4F04641BA144F2C726E669BDDCAEFB227BE7794DAA4CE1D84114B2F8C82D85154D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:14:20:c4:ee:f3:6e:31:d4:b1:e0:47:47:de:
                    6a:8a:d2:57:a7:63:2a:c6:2f:4b:4b:19:c0:3f:b7:
                    a2:76:cf:ea:76:d3:b5:a7:ec:92:09:13:fb:f6:37:
                    27:26:44:29:63:eb:c1:cb:3c:c4:0c:2f:bc:4e:54:
                    44:b5:d9:e9:a8:94:38:f7:2e:2f:4b:83:d7:96:03:
                    ec:23:b0:ce:a9:f6:b9:b8:63:19:ea:89:d1:fe:c6:
                    95:6f:91:80:a1:fb:68:ed:2b:e8:b9:29:4a:e7:81:
                    84:03:27:b7:65:ce:58:34:b1:d2:1f:aa:96:ae:bb:
                    5b:c1:0e:f4:d3:b9:d5:1b:08:32:98:61:34:df:46:
                    5b:9c:3a:e0:64:e3:e4:3f:51:e6:4b:46:01:b1:db:
                    a5:27:89:bc:c2:d4:f6:ff:f6:c1:56:fa:49:f3:b2:
                    83:7f:c4:00:95:85:5a:35:77:db:40:ea:fd:cf:13:
                    4d:f5:29:55:7e:25:cf:50:1b:63:08:4c:34:0d:94:
                    45:ec:16:ea:15:70:f3:c3:a8:3c:27:f9:3f:73:61:
                    83:69:74:25:27:06:d5:97:37:94:cf:b6:9f:7d:4f:
                    04:64:1b:a1:44:f2:c7:26:e6:69:bd:dc:ae:fb:22:
                    7b:e7:79:4d:aa:4c:e1:d8:41:14:b2:f8:c8:2d:85:
                    15:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:7B:30:9F:7A:98:92:0D:4B:42:22:20:9C:B3:3C:1F:43:43:CF:4D
            X509v3 Authority Key Identifier:
                keyid:25:2D:6C:06:BE:26:C3:9A:C5:9D:02:69:A4:84:BC:7C:DA:2E:17:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vYMFeQ6JuADYG1En39NgYmAPykR2R5zWJDGcNJcHJnD/1/252D6C06BE26C39AC59D0269A484BC7CDA2E17D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/252D6C06BE26C39AC59D0269A484BC7CDA2E17D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vYMFeQ6JuADYG1En39NgYmAPykR2R5zWJDGcNJcHJnD/1/323830343a386336343a3a2f33322d3332203d3e203631363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c64::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:2c:a0:2b:bf:00:78:30:01:64:c1:e4:aa:60:14:72:e1:0e:
         9f:19:43:a8:76:3a:1c:ef:20:56:10:2c:cc:30:c9:61:c1:01:
         c0:c3:1c:ec:8e:c2:6c:83:cf:48:a2:87:2f:d5:50:4d:68:69:
         ea:21:5e:a9:c3:a1:4e:e6:b3:1e:b8:95:f1:36:98:3b:91:cd:
         d2:1e:0b:01:4d:d0:79:ac:df:13:b8:ac:c0:18:11:b6:5c:0c:
         b8:d0:65:8e:9d:6f:90:05:f5:54:b8:2a:e0:93:ef:ac:82:0b:
         01:c3:65:42:5a:5d:3c:eb:cf:37:b4:4c:8e:8c:24:64:0f:96:
         59:a7:00:40:c2:eb:aa:eb:bb:43:00:b8:08:e7:6a:59:ca:dc:
         0e:c5:98:71:35:a4:33:4d:c7:e1:e0:dd:6a:84:03:41:1a:c7:
         92:d4:dc:7a:ad:68:79:8c:70:45:bd:9d:cb:34:d1:79:79:73:
         2e:f0:b9:d4:1f:13:d6:43:cd:03:9e:58:de:db:f9:64:4d:7b:
         7a:70:c0:0f:5c:a3:78:8b:fe:08:78:26:87:9f:5c:db:7d:3e:
         87:89:5b:ce:86:79:c2:e6:a7:7d:3a:f7:71:52:ce:a6:f0:7c:
         dc:65:07:25:12:60:c1:25:f6:03:c5:19:de:d2:b9:8a:f9:7e:
         14:11:57:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:36:06 2025 by rpki-client