Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8wtiZocXLjczVn1159gW8RDXXMiNh5CKwzYu4eoKWBb4/1/323830343a323266303a383030303a3a2f33332d3333203d3e20323634313333.roa
File:                     323830343a323266303a383030303a3a2f33332d3333203d3e20323634313333.roa (raw, json)
Hash identifier:          ebZcO7D7A+6LDDC2G5TfQWz6m2tQ9w7aswAFtdowvs8=
Subject key identifier:   8C:10:FE:48:38:F3:55:91:84:4E:F7:EB:FF:E9:B4:6D:F7:34:3F:BD
Certificate issuer:       /CN=7AF39D52856181EDEBB441A696F7B87D2FF633BA
Certificate serial:       13346763B154CAA93B0401138B70E1248D6B6B13
Authority key identifier: 7A:F3:9D:52:85:61:81:ED:EB:B4:41:A6:96:F7:B8:7D:2F:F6:33:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AF39D52856181EDEBB441A696F7B87D2FF633BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8wtiZocXLjczVn1159gW8RDXXMiNh5CKwzYu4eoKWBb4/1/323830343a323266303a383030303a3a2f33332d3333203d3e20323634313333.roa
Signing time:             Thu 02 Jan 2025 19:03:24 +0000
ROA not before:           Thu 02 Jan 2025 18:58:24 +0000
ROA not after:            Thu 01 Jan 2026 19:03:24 +0000
asID:                     264133
IP address blocks:        2804:22f0:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:34:67:63:b1:54:ca:a9:3b:04:01:13:8b:70:e1:24:8d:6b:6b:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AF39D52856181EDEBB441A696F7B87D2FF633BA
        Validity
            Not Before: Jan  2 18:58:24 2025 GMT
            Not After : Jan  1 19:03:24 2026 GMT
        Subject: CN=8C10FE4838F35591844EF7EBFFE9B46DF7343FBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:59:dc:b5:32:bc:43:c2:92:0f:1d:e6:b5:b8:
                    a4:96:50:50:e3:15:f7:22:af:36:51:86:66:3c:bd:
                    aa:2a:38:63:7d:b7:fe:77:5b:ed:68:61:50:cb:65:
                    5e:9d:df:38:2c:39:78:ae:29:06:37:bb:bf:15:c2:
                    b7:68:b3:ee:db:3b:a7:76:33:7e:06:86:1a:7e:91:
                    84:a6:07:0f:33:d0:85:9b:f8:d5:6a:eb:24:7e:ef:
                    a2:e9:78:19:30:6d:a8:53:d8:64:7f:c4:cf:3b:f5:
                    a5:5b:a1:5d:d6:c5:c2:a4:0d:a7:dc:aa:b4:ee:7c:
                    4c:b9:7f:2a:23:24:17:cd:eb:50:62:1d:15:cf:a2:
                    59:eb:9b:ce:28:2d:50:3b:4a:76:8b:70:b5:e7:74:
                    41:c1:5e:99:a9:71:89:d0:b3:ed:61:2e:f8:b2:6f:
                    d0:94:d9:32:d7:8e:b6:bc:5e:38:2f:f2:50:32:2e:
                    62:53:e9:38:e6:3f:ab:ef:86:df:05:78:d1:2a:b4:
                    10:39:3d:52:3f:eb:2a:83:92:d5:b5:5a:79:01:2e:
                    c1:a9:21:37:7b:ff:63:6b:b4:4a:7e:95:f4:9e:61:
                    54:6d:32:25:88:72:b9:ab:75:b4:35:bc:32:56:f5:
                    14:e0:5e:ba:b0:7d:ae:56:66:63:9a:36:2e:f6:53:
                    c6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:10:FE:48:38:F3:55:91:84:4E:F7:EB:FF:E9:B4:6D:F7:34:3F:BD
            X509v3 Authority Key Identifier:
                keyid:7A:F3:9D:52:85:61:81:ED:EB:B4:41:A6:96:F7:B8:7D:2F:F6:33:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8wtiZocXLjczVn1159gW8RDXXMiNh5CKwzYu4eoKWBb4/1/7AF39D52856181EDEBB441A696F7B87D2FF633BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AF39D52856181EDEBB441A696F7B87D2FF633BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wtiZocXLjczVn1159gW8RDXXMiNh5CKwzYu4eoKWBb4/1/323830343a323266303a383030303a3a2f33332d3333203d3e20323634313333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:22f0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         a0:84:c6:4c:28:43:ac:95:4c:3e:4d:d1:eb:15:f5:24:cf:43:
         87:d9:da:8f:39:05:44:40:59:22:de:b3:50:73:18:a3:b7:5b:
         86:04:0c:1a:29:af:89:69:94:f7:cf:33:2a:49:b0:5b:9a:a1:
         f7:f9:89:15:31:83:c3:14:a7:44:68:e4:db:5d:a9:3c:68:8e:
         7d:90:9d:6b:d6:87:e9:13:c3:2b:fe:fd:1c:97:7e:1d:2a:db:
         47:28:b6:1b:8f:7c:01:e3:66:dd:f7:35:62:ae:82:75:2f:b3:
         43:e9:b7:2d:a5:31:1a:a9:5b:1f:63:c4:d6:4a:80:14:15:53:
         45:2f:ad:43:0f:90:d9:fe:84:93:6d:44:5f:ca:e4:9e:8f:72:
         5a:61:03:76:6f:c5:58:53:26:53:7b:38:17:d3:2d:33:50:4e:
         65:ef:d6:f3:84:d8:5f:30:93:14:d8:f0:71:f4:a8:d2:e4:46:
         a2:38:4c:77:92:a9:b0:cf:09:b4:b3:4a:41:a3:78:92:51:64:
         0b:f8:dc:2b:63:93:25:02:46:53:08:0f:dc:7b:f2:e5:18:d8:
         6c:5a:bf:2c:27:17:00:8f:3e:d0:19:f7:a9:d8:26:4d:6c:d4:
         f0:48:ae:b9:0e:d1:db:e6:96:de:a4:1b:c7:6a:7d:4e:f8:70:
         a7:a0:5d:b2
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUEzRnY7FUyqk7BAETi3DhJI1raxMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0FGMzlENTI4NTYxODFFREVCQjQ0MUE2OTZGN0I4N0Qy
RkY2MzNCQTAeFw0yNTAxMDIxODU4MjRaFw0yNjAxMDExOTAzMjRaMDMxMTAvBgNV
BAMTKDhDMTBGRTQ4MzhGMzU1OTE4NDRFRjdFQkZGRTlCNDZERjczNDNGQkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnWdy1MrxDwpIPHea1uKSWUFDj
FfcirzZRhmY8vaoqOGN9t/53W+1oYVDLZV6d3zgsOXiuKQY3u78Vwrdos+7bO6d2
M34Ghhp+kYSmBw8z0IWb+NVq6yR+76LpeBkwbahT2GR/xM879aVboV3WxcKkDafc
qrTufEy5fyojJBfN61BiHRXPolnrm84oLVA7SnaLcLXndEHBXpmpcYnQs+1hLviy
b9CU2TLXjra8Xjgv8lAyLmJT6TjmP6vvht8FeNEqtBA5PVI/6yqDktW1WnkBLsGp
ITd7/2NrtEp+lfSeYVRtMiWIcrmrdbQ1vDJW9RTgXrqwfa5WZmOaNi72U8bbAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUjBD+SDjzVZGETvfr/+m0bfc0P70wHwYDVR0j
BBgwFoAUevOdUoVhge3rtEGmlve4fS/2M7owDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHd0aVpvY1hMamN6Vm4xMTU5Z1c4UkRYWE1pTmg1Q0t3ell1NGVvS1dC
YjQvMS83QUYzOUQ1Mjg1NjE4MUVERUJCNDQxQTY5NkY3Qjg3RDJGRjYzM0JBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdBRjM5RDUyODU2MTgxRURF
QkI0NDFBNjk2RjdCODdEMkZGNjMzQkEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzh3dGlab2NYTGpjelZuMTE1OWdXOFJEWFhNaU5oNUNLd3pZdTRlb0tXQmI0LzEv
MzIzODMwMzQzYTMyMzI2NjMwM2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzYzNDMxMzMzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEIvCAMA0GCSqGSIb3DQEBCwUA
A4IBAQCghMZMKEOslUw+TdHrFfUkz0OH2dqPOQVEQFki3rNQcxijt1uGBAwaKa+J
aZT3zzMqSbBbmqH3+YkVMYPDFKdEaOTbXak8aI59kJ1r1ofpE8Mr/v0cl34dKttH
KLYbj3wB42bd9zViroJ1L7ND6bctpTEaqVsfY8TWSoAUFVNFL61DD5DZ/oSTbURf
yuSej3JaYQN2b8VYUyZTezgX0y0zUE5l79bzhNhfMJMU2PBx9KjS5EaiOEx3kqmw
zwm0s0pBo3iSUWQL+NwrY5MlAkZTCA/ce/LlGNhsWr8sJxcAjz7QGfep2CZNbNTw
SK65DtHb5pbepBvHan1O+HCnoF2y
-----END CERTIFICATE-----
Generated at Sat Apr 26 20:50:16 2025 by rpki-client