Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/323830343a333563303a3a2f33322d313238203d3e20323636333034.roa
File:                     323830343a333563303a3a2f33322d313238203d3e20323636333034.roa (raw, json)
Hash identifier:          /2/9Yd3eXpWjyVvNt7pMpiiLBSQsoJQudEUU0FUchBQ=
Subject key identifier:   F6:05:66:45:09:FD:A7:91:B3:E7:6E:C6:FC:08:B6:9E:EC:0E:9F:5A
Certificate issuer:       /CN=8CE0D131E429E2C41648BC875D900D7A21A1F1C3
Certificate serial:       7A8715073E43EDF4A6B28C458011A3D5A55D3914
Authority key identifier: 8C:E0:D1:31:E4:29:E2:C4:16:48:BC:87:5D:90:0D:7A:21:A1:F1:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CE0D131E429E2C41648BC875D900D7A21A1F1C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/323830343a333563303a3a2f33322d313238203d3e20323636333034.roa
Signing time:             Wed 29 Jan 2025 12:31:02 +0000
ROA not before:           Wed 29 Jan 2025 12:26:02 +0000
ROA not after:            Wed 28 Jan 2026 12:31:02 +0000
asID:                     266304
IP address blocks:        2804:35c0::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:87:15:07:3e:43:ed:f4:a6:b2:8c:45:80:11:a3:d5:a5:5d:39:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CE0D131E429E2C41648BC875D900D7A21A1F1C3
        Validity
            Not Before: Jan 29 12:26:02 2025 GMT
            Not After : Jan 28 12:31:02 2026 GMT
        Subject: CN=F605664509FDA791B3E76EC6FC08B69EEC0E9F5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:48:25:2a:c1:ce:16:3f:c9:92:c9:ce:9b:83:
                    0a:7b:0e:3b:f1:de:c7:9f:12:63:94:49:e8:84:23:
                    4b:6c:87:2d:21:80:71:a2:fe:37:b1:a2:d2:c6:76:
                    2d:73:17:a9:40:ff:78:67:55:5e:3a:f8:e6:ed:ab:
                    98:07:8d:f3:dd:74:e5:83:cb:73:df:d6:17:7d:c0:
                    6e:98:87:a6:a1:89:a9:1e:cd:98:1a:3f:83:9b:86:
                    f4:57:60:7f:6f:44:f6:6a:ea:5c:be:33:55:c8:3d:
                    96:d4:77:b2:08:fe:90:42:84:a7:80:ec:4c:cd:07:
                    ee:db:a8:fa:10:8b:54:c9:db:ea:61:03:b4:29:da:
                    2c:ce:b9:a7:7a:6c:59:4a:0b:3e:20:ae:d2:3a:a6:
                    37:d8:3c:79:ba:d9:2f:98:31:42:f3:de:ef:a7:19:
                    f3:d8:9e:d9:67:e6:62:18:7c:78:b6:b3:0d:19:3f:
                    2c:30:5a:6c:73:52:a9:8a:d6:cb:a6:ca:48:07:a2:
                    68:bd:a5:49:41:45:09:19:ec:3c:bb:e5:5e:a1:a0:
                    7b:75:dc:97:53:13:49:6a:7f:77:ad:bc:12:93:51:
                    0a:d3:bc:ec:98:1b:bc:0a:e5:f0:ff:20:86:d3:93:
                    54:ed:5a:d0:81:70:20:fd:9f:44:b6:52:0a:26:df:
                    e1:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:05:66:45:09:FD:A7:91:B3:E7:6E:C6:FC:08:B6:9E:EC:0E:9F:5A
            X509v3 Authority Key Identifier:
                keyid:8C:E0:D1:31:E4:29:E2:C4:16:48:BC:87:5D:90:0D:7A:21:A1:F1:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/8CE0D131E429E2C41648BC875D900D7A21A1F1C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CE0D131E429E2C41648BC875D900D7A21A1F1C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/323830343a333563303a3a2f33322d313238203d3e20323636333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:35c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:1c:eb:ca:d0:03:25:be:02:89:a5:ad:02:d0:2d:74:f6:0f:
         f6:06:56:ab:56:b4:80:e0:c1:4f:84:72:ff:24:65:73:ba:53:
         e9:fa:15:85:80:40:9d:0d:42:b8:45:9d:bd:8d:a0:25:a1:f4:
         6f:03:bb:75:0e:03:ff:b5:13:5d:65:52:1a:d0:83:65:7a:15:
         ee:4d:41:2a:33:39:b9:ec:0b:92:6a:14:9c:cc:c4:d6:b9:ed:
         14:37:19:c2:4c:a9:37:a5:ff:c0:11:e4:ec:ad:43:5b:cd:08:
         cc:77:4e:89:49:71:05:8d:4a:fa:82:0f:66:34:6c:6c:12:9e:
         fc:6e:04:3e:74:18:05:a6:7e:8c:b2:aa:f2:4f:97:a8:42:a2:
         44:c2:d0:8b:33:d4:e2:9b:1a:df:fe:0f:7c:11:8e:7d:b9:d2:
         a0:8e:7d:aa:a7:0f:45:59:a3:7d:c7:75:0f:b2:cb:85:26:76:
         72:02:07:c5:0b:86:6f:e5:ca:46:1e:ce:16:57:35:a3:53:e6:
         41:df:7e:ec:dd:af:a3:95:66:ff:c8:e0:c3:33:e1:c8:1e:ed:
         fe:1e:b1:f0:8c:1d:79:4f:ad:a6:0e:29:de:d2:e5:d4:75:2f:
         b6:06:24:10:39:51:62:2f:a5:41:56:96:24:0c:b7:44:42:29:
         6e:94:b0:8d
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUeocVBz5D7fSmsoxFgBGj1aVdORQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOENFMEQxMzFFNDI5RTJDNDE2NDhCQzg3NUQ5MDBEN0Ey
MUExRjFDMzAeFw0yNTAxMjkxMjI2MDJaFw0yNjAxMjgxMjMxMDJaMDMxMTAvBgNV
BAMTKEY2MDU2NjQ1MDlGREE3OTFCM0U3NkVDNkZDMDhCNjlFRUMwRTlGNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuSCUqwc4WP8mSyc6bgwp7Djvx
3sefEmOUSeiEI0tshy0hgHGi/jexotLGdi1zF6lA/3hnVV46+Obtq5gHjfPddOWD
y3Pf1hd9wG6Yh6ahiakezZgaP4ObhvRXYH9vRPZq6ly+M1XIPZbUd7II/pBChKeA
7EzNB+7bqPoQi1TJ2+phA7Qp2izOuad6bFlKCz4grtI6pjfYPHm62S+YMULz3u+n
GfPYntln5mIYfHi2sw0ZPywwWmxzUqmK1sumykgHomi9pUlBRQkZ7Dy75V6hoHt1
3JdTE0lqf3etvBKTUQrTvOyYG7wK5fD/IIbTk1TtWtCBcCD9n0S2Ugom3+HnAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQU9gVmRQn9p5Gz527G/Ai2nuwOn1owHwYDVR0j
BBgwFoAUjODRMeQp4sQWSLyHXZANeiGh8cMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnRIaXV4cW82bmJ3WnRxQ0FxS3gyRGJVNzZ2ckhXVVgxQmJaUEY1RThq
ZkIvMC84Q0UwRDEzMUU0MjlFMkM0MTY0OEJDODc1RDkwMEQ3QTIxQTFGMUMzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhDRTBEMTMxRTQyOUUyQzQx
NjQ4QkM4NzVEOTAwRDdBMjFBMUYxQzMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJ0SGl1eHFvNm5id1p0cUNBcUt4MkRiVTc2dnJIV1VYMUJiWlBGNUU4amZCLzAv
MzIzODMwMzQzYTMzMzU2MzMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzYzMzMwMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBDXAMA0GCSqGSIb3DQEBCwUAA4IBAQAiHOvK
0AMlvgKJpa0C0C109g/2BlarVrSA4MFPhHL/JGVzulPp+hWFgECdDUK4RZ29jaAl
ofRvA7t1DgP/tRNdZVIa0INlehXuTUEqMzm57AuSahSczMTWue0UNxnCTKk3pf/A
EeTsrUNbzQjMd06JSXEFjUr6gg9mNGxsEp78bgQ+dBgFpn6MsqryT5eoQqJEwtCL
M9Timxrf/g98EY59udKgjn2qpw9FWaN9x3UPssuFJnZyAgfFC4Zv5cpGHs4WVzWj
U+ZB337s3a+jlWb/yODDM+HIHu3+HrHwjB15T62mDine0uXUdS+2BiQQOVFiL6VB
VpYkDLdEQilulLCN
-----END CERTIFICATE-----
Generated at Tue Apr 29 21:18:11 2025 by rpki-client