Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kgtiefyaB7o3dEFUmRSv3Li7XLHhjkqR4bWRfMUrxAE/0/323830343a356662383a633030303a3a2f33342d3334203d3e20323639313139.roa
File:                     323830343a356662383a633030303a3a2f33342d3334203d3e20323639313139.roa (raw, json)
Hash identifier:          dsbdnigT57isKK/DWghmokpalCmHG7LWEqVfLsd+XsA=
Subject key identifier:   EB:EC:06:1D:17:5A:D8:E5:EC:64:1D:5D:DA:BC:BF:62:44:DD:21:DD
Certificate issuer:       /CN=93EB58C11DA4DA24D1CE358FCF7DC9E5FF891CE8
Certificate serial:       3AFCD3C603E5C363495E5AFA377A9F56214169BB
Authority key identifier: 93:EB:58:C1:1D:A4:DA:24:D1:CE:35:8F:CF:7D:C9:E5:FF:89:1C:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/93EB58C11DA4DA24D1CE358FCF7DC9E5FF891CE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kgtiefyaB7o3dEFUmRSv3Li7XLHhjkqR4bWRfMUrxAE/0/323830343a356662383a633030303a3a2f33342d3334203d3e20323639313139.roa
Signing time:             Sun 21 May 2023 20:59:33 +0000
ROA not before:           Sun 21 May 2023 20:54:33 +0000
ROA not after:            Tue 21 May 2024 20:59:33 +0000
asID:                     269119
IP address blocks:        2804:5fb8:c000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:fc:d3:c6:03:e5:c3:63:49:5e:5a:fa:37:7a:9f:56:21:41:69:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93EB58C11DA4DA24D1CE358FCF7DC9E5FF891CE8
        Validity
            Not Before: May 21 20:54:33 2023 GMT
            Not After : May 21 20:59:33 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:31:68:eb:5c:f1:7d:30:0b:59:4a:50:cc:6f:
                    55:ce:ca:b4:e3:7a:0b:d1:e2:c2:e9:db:7d:b7:6a:
                    81:67:38:40:25:6a:ff:7b:5b:71:e3:bc:48:42:ad:
                    9c:69:47:9b:04:08:c2:64:13:ae:14:c6:e3:c1:1e:
                    02:30:58:cd:0e:bd:bb:ce:e4:bf:6a:db:89:e2:d0:
                    4b:87:9c:86:73:81:d2:02:27:32:97:08:42:25:e8:
                    bd:8f:be:f0:68:67:3b:48:f1:a6:fb:05:7d:33:32:
                    61:b7:7a:90:8d:ec:95:f1:96:4b:02:39:82:1d:f5:
                    a7:ee:cd:70:c3:db:fe:58:fc:b1:75:d0:68:4c:fe:
                    fc:09:43:98:e9:67:21:f5:26:07:50:93:25:58:ca:
                    e5:bd:39:7e:69:37:5a:3e:26:3c:44:35:8b:e3:18:
                    cd:48:94:02:19:40:be:81:fe:7f:f3:e0:e4:e7:39:
                    10:5a:6b:ce:67:e8:9c:75:29:fc:18:28:09:70:11:
                    27:d0:de:e7:cf:97:22:ec:ff:84:ab:ac:bb:9f:bc:
                    3d:30:54:f4:9d:db:64:cb:18:2a:f2:2b:28:0f:cf:
                    b0:f1:42:bd:7d:68:94:b8:82:25:10:76:92:bc:2a:
                    c7:dd:b2:6c:c8:59:20:ef:95:15:98:6d:56:2b:fc:
                    51:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:EC:06:1D:17:5A:D8:E5:EC:64:1D:5D:DA:BC:BF:62:44:DD:21:DD
            X509v3 Authority Key Identifier:
                keyid:93:EB:58:C1:1D:A4:DA:24:D1:CE:35:8F:CF:7D:C9:E5:FF:89:1C:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kgtiefyaB7o3dEFUmRSv3Li7XLHhjkqR4bWRfMUrxAE/0/93EB58C11DA4DA24D1CE358FCF7DC9E5FF891CE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/93EB58C11DA4DA24D1CE358FCF7DC9E5FF891CE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kgtiefyaB7o3dEFUmRSv3Li7XLHhjkqR4bWRfMUrxAE/0/323830343a356662383a633030303a3a2f33342d3334203d3e20323639313139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5fb8:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         66:49:16:62:62:8f:ef:ad:bd:b4:01:e6:d3:73:c8:d9:48:54:
         c7:9d:58:16:93:a5:5a:d1:d5:16:36:b0:b8:80:e5:b8:45:fe:
         f8:4d:de:21:b4:07:81:92:22:8c:a5:c2:e2:2a:78:05:46:ee:
         1e:53:0e:65:dd:3a:0d:6f:2f:55:2f:67:12:06:79:a9:7b:0c:
         ac:6a:b0:3f:87:32:9f:64:46:0e:32:0f:98:06:c6:bf:5f:ee:
         c0:a8:f3:c6:a6:13:b7:d0:b4:a9:ac:63:4c:1b:35:1a:37:e3:
         5b:16:63:45:11:b4:51:82:38:e1:63:2a:1c:a5:ee:3b:5a:e2:
         8b:8b:5b:c4:58:8d:90:a4:ae:fd:da:cf:b3:45:e7:c2:21:46:
         98:13:fa:4d:59:f0:8c:a5:02:5c:0d:ac:36:62:c7:7e:d8:23:
         a3:41:32:71:67:f6:65:ea:04:31:c5:3d:47:7b:39:87:53:bc:
         d5:85:cb:b8:8f:14:02:4f:59:5e:fe:97:c6:3b:81:60:2e:c9:
         4e:a1:15:ea:94:ce:aa:2f:c1:0a:8b:71:55:b1:bf:96:9b:ad:
         b3:47:b3:ae:36:29:31:68:ae:67:3f:19:5d:4b:fb:36:d8:48:
         6f:bc:bd:2a:38:d8:29:76:65:1e:76:a7:15:fd:a7:54:05:a6:
         88:8e:d9:c0
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUOvzTxgPlw2NJXlr6N3qfViFBabswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTNFQjU4QzExREE0REEyNEQxQ0UzNThGQ0Y3REM5RTVG
Rjg5MUNFODAeFw0yMzA1MjEyMDU0MzNaFw0yNDA1MjEyMDU5MzNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTAzMTY4RUI1Q0YxN0QzMDBC
NTk0QTUwQ0M2RjU1Q0VDQUI0RTM3QTBCRDFFMkMyRTlEQjdEQjc2QTgxNjczODQw
MjU2QUZGN0I1QjcxRTNCQzQ4NDJBRDlDNjk0NzlCMDQwOEMyNjQxM0FFMTRDNkUz
QzExRTAyMzA1OENEMEVCREJCQ0VFNEJGNkFEQjg5RTJEMDRCODc5Qzg2NzM4MUQy
MDIyNzMyOTcwODQyMjVFOEJEOEZCRUYwNjg2NzNCNDhGMUE2RkIwNTdEMzMzMjYx
Qjc3QTkwOERFQzk1RjE5NjRCMDIzOTgyMURGNUE3RUVDRDcwQzNEQkZFNThGQ0Ix
NzVEMDY4NENGRUZDMDk0Mzk4RTk2NzIxRjUyNjA3NTA5MzI1NThDQUU1QkQzOTdF
NjkzNzVBM0UyNjNDNDQzNThCRTMxOENENDg5NDAyMTk0MEJFODFGRTdGRjNFMEU0
RTczOTEwNUE2QkNFNjdFODlDNzUyOUZDMTgyODA5NzAxMTI3RDBERUU3Q0Y5NzIy
RUNGRjg0QUJBQ0JCOUZCQzNEMzA1NEY0OUREQjY0Q0IxODJBRjIyQjI4MEZDRkIw
RjE0MkJEN0Q2ODk0Qjg4MjI1MTA3NjkyQkMyQUM3RERCMjZDQzg1OTIwRUY5NTE1
OTg2RDU2MkJGQzUxQkIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA4DFo61zxfTALWUpQzG9Vzsq043oL0eLC6dt9t2qBZzhAJWr/e1tx
47xIQq2caUebBAjCZBOuFMbjwR4CMFjNDr27zuS/atuJ4tBLh5yGc4HSAicylwhC
Jei9j77waGc7SPGm+wV9MzJht3qQjeyV8ZZLAjmCHfWn7s1ww9v+WPyxddBoTP78
CUOY6Wch9SYHUJMlWMrlvTl+aTdaPiY8RDWL4xjNSJQCGUC+gf5/8+Dk5zkQWmvO
Z+icdSn8GCgJcBEn0N7nz5ci7P+Eq6y7n7w9MFT0ndtkyxgq8isoD8+w8UK9fWiU
uIIlEHaSvCrH3bJsyFkg75UVmG1WK/xRuwIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FOvsBh0XWtjl7GQdXdq8v2JE3SHdMB8GA1UdIwQYMBaAFJPrWMEdpNok0c41j899
yeX/iRzoMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhrZ3RpZWZ5YUI3bzNk
RUZVbVJTdjNMaTdYTEhoamtxUjRiV1JmTVVyeEFFLzAvOTNFQjU4QzExREE0REEy
NEQxQ0UzNThGQ0Y3REM5RTVGRjg5MUNFOC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC85M0VCNThDMTFEQTREQTI0RDFDRTM1OEZDRjdEQzlFNUZGODkx
Q0U4LmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby84a2d0aWVmeWFCN28zZEVGVW1S
U3YzTGk3WExIaGprcVI0YldSZk1VcnhBRS8wLzMyMzgzMDM0M2EzNTY2NjIzODNh
NjMzMDMwMzAzYTNhMmYzMzM0MmQzMzM0MjAzZDNlMjAzMjM2MzkzMTMxMzkucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgYoBF+4wDANBgkqhkiG9w0BAQsFAAOCAQEAZkkWYmKP7629tAHm03PI
2UhUx51YFpOlWtHVFjawuIDluEX++E3eIbQHgZIijKXC4ip4BUbuHlMOZd06DW8v
VS9nEgZ5qXsMrGqwP4cyn2RGDjIPmAbGv1/uwKjzxqYTt9C0qaxjTBs1GjfjWxZj
RRG0UYI44WMqHKXuO1rii4tbxFiNkKSu/drPs0XnwiFGmBP6TVnwjKUCXA2sNmLH
ftgjo0EycWf2ZeoEMcU9R3s5h1O81YXLuI8UAk9ZXv6XxjuBYC7JTqEV6pTOqi/B
CotxVbG/lputs0ezrjYpMWiuZz8ZXUv7NthIb7y9KjjYKXZlHnanFf2nVAWmiI7Z
wA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 21:33:19 2025 by rpki-client