Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GCfjw2QpBi6qT6nAvntviGD4rhyeRfUyy2ZwooQocPTW/0/323830343a373032303a383130303a3a2f34302d3430203d3e20323730373037.roa
File:                     323830343a373032303a383130303a3a2f34302d3430203d3e20323730373037.roa (raw, json)
Hash identifier:          aFQleCnW2xBHRM0oMjO5srVTw4jvy2Nq7Ioy056Su3Y=
Subject key identifier:   52:94:3B:88:63:CA:34:90:83:76:68:9A:9B:0F:48:75:4C:D8:9D:27
Certificate issuer:       /CN=70D42EF292639D20E817DA32AA3DE2306DCD4C45
Certificate serial:       03C6FC583DBC8936FA527AD8D163E962A8D879BA
Authority key identifier: 70:D4:2E:F2:92:63:9D:20:E8:17:DA:32:AA:3D:E2:30:6D:CD:4C:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70D42EF292639D20E817DA32AA3DE2306DCD4C45.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GCfjw2QpBi6qT6nAvntviGD4rhyeRfUyy2ZwooQocPTW/0/323830343a373032303a383130303a3a2f34302d3430203d3e20323730373037.roa
Signing time:             Mon 12 Jun 2023 13:01:40 +0000
ROA not before:           Mon 12 Jun 2023 12:56:40 +0000
ROA not after:            Mon 10 Jun 2024 13:01:40 +0000
asID:                     270707
IP address blocks:        2804:7020:8100::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:c6:fc:58:3d:bc:89:36:fa:52:7a:d8:d1:63:e9:62:a8:d8:79:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70D42EF292639D20E817DA32AA3DE2306DCD4C45
        Validity
            Not Before: Jun 12 12:56:40 2023 GMT
            Not After : Jun 10 13:01:40 2024 GMT
        Subject: CN=52943B8863CA34908376689A9B0F48754CD89D27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:47:24:92:8e:c9:d1:9b:b9:2d:3e:d7:f1:88:
                    a8:09:d1:fb:86:df:22:be:dd:f0:21:6c:a4:2b:55:
                    d2:ed:cc:7f:a4:80:e7:5f:4b:e1:be:f8:d9:c0:7f:
                    e1:6d:53:8f:ae:08:1e:40:c0:84:5d:e1:3b:db:11:
                    8c:e6:09:5a:24:08:9f:5b:ab:d3:ca:32:a6:f1:bf:
                    d2:19:a5:f2:e7:4f:69:9a:4a:1d:0f:89:84:4f:97:
                    1b:cd:e6:c6:14:da:1d:c9:64:ff:29:60:d0:02:b8:
                    42:f7:a7:3a:57:05:e0:ac:1e:af:9b:1d:cb:f9:62:
                    05:46:e6:39:a3:ab:69:45:6c:13:18:5f:72:6b:d6:
                    8f:ac:48:e5:b6:bd:67:09:aa:52:59:2d:ec:e3:c8:
                    cf:f9:70:18:84:9f:34:21:97:ce:d1:75:c4:c4:20:
                    87:c1:b6:77:2f:2d:12:05:58:01:2b:61:b0:b5:4e:
                    da:92:39:ea:19:8d:50:07:b9:0f:ba:84:92:e1:30:
                    50:65:d2:63:34:ce:a2:9d:43:f5:c7:e5:c4:6b:23:
                    1b:b7:20:d1:a9:68:a9:c4:98:b1:0f:a5:59:79:ee:
                    09:fa:6d:03:06:ba:b0:e3:7a:26:ad:a9:1e:49:63:
                    02:80:15:83:d5:09:3f:f7:5f:18:ca:a1:93:67:a0:
                    3f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:94:3B:88:63:CA:34:90:83:76:68:9A:9B:0F:48:75:4C:D8:9D:27
            X509v3 Authority Key Identifier:
                keyid:70:D4:2E:F2:92:63:9D:20:E8:17:DA:32:AA:3D:E2:30:6D:CD:4C:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GCfjw2QpBi6qT6nAvntviGD4rhyeRfUyy2ZwooQocPTW/0/70D42EF292639D20E817DA32AA3DE2306DCD4C45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70D42EF292639D20E817DA32AA3DE2306DCD4C45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GCfjw2QpBi6qT6nAvntviGD4rhyeRfUyy2ZwooQocPTW/0/323830343a373032303a383130303a3a2f34302d3430203d3e20323730373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7020:8100::/40

    Signature Algorithm: sha256WithRSAEncryption
         80:08:63:10:69:e4:19:0b:f5:2e:29:9c:a1:91:29:58:02:5d:
         ea:2a:d9:76:14:73:7a:ee:a5:0c:22:d2:bc:fb:35:34:7f:4d:
         23:2f:05:1c:40:30:ea:dc:9a:b0:b2:dc:d5:c4:6b:f4:df:e7:
         bc:1a:0c:26:88:b1:88:de:29:ee:f3:97:ac:58:62:80:72:29:
         fa:94:e3:f1:3c:e7:ed:f8:d4:23:c7:55:69:ac:49:0b:02:2c:
         87:1d:5f:83:25:db:52:fd:1f:d4:05:2c:da:40:1e:c7:37:48:
         ea:d8:4a:e9:2c:d3:58:9f:98:0c:63:ca:c1:a1:e0:e8:fc:3f:
         46:72:dd:49:c4:d6:c6:1a:91:77:18:54:26:05:fa:07:dd:a4:
         6e:d0:34:6c:97:a3:df:40:04:cc:1e:5f:27:ef:43:e0:ed:8c:
         19:1d:61:a9:79:74:92:cc:0a:f5:e1:80:d6:b4:f1:c0:0f:f1:
         46:0c:40:93:3b:32:70:a7:a9:cc:0d:8a:77:cc:c6:2b:77:64:
         65:5d:cd:ba:13:b6:a8:8e:52:4a:20:01:e5:97:33:b7:0b:e1:
         03:fd:f9:12:64:12:e0:eb:c6:87:b8:33:c8:eb:b5:9d:e0:9c:
         26:94:1c:8a:11:27:f7:b7:32:bb:29:22:7b:8c:8d:6c:4e:6f:
         92:cd:4e:38
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUA8b8WD28iTb6UnrY0WPpYqjYebowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzBENDJFRjI5MjYzOUQyMEU4MTdEQTMyQUEzREUyMzA2
RENENEM0NTAeFw0yMzA2MTIxMjU2NDBaFw0yNDA2MTAxMzAxNDBaMDMxMTAvBgNV
BAMTKDUyOTQzQjg4NjNDQTM0OTA4Mzc2Njg5QTlCMEY0ODc1NENEODlEMjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnRySSjsnRm7ktPtfxiKgJ0fuG
3yK+3fAhbKQrVdLtzH+kgOdfS+G++NnAf+FtU4+uCB5AwIRd4TvbEYzmCVokCJ9b
q9PKMqbxv9IZpfLnT2maSh0PiYRPlxvN5sYU2h3JZP8pYNACuEL3pzpXBeCsHq+b
Hcv5YgVG5jmjq2lFbBMYX3Jr1o+sSOW2vWcJqlJZLezjyM/5cBiEnzQhl87RdcTE
IIfBtncvLRIFWAErYbC1TtqSOeoZjVAHuQ+6hJLhMFBl0mM0zqKdQ/XH5cRrIxu3
INGpaKnEmLEPpVl57gn6bQMGurDjeiatqR5JYwKAFYPVCT/3XxjKoZNnoD/hAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUUpQ7iGPKNJCDdmiamw9IdUzYnScwHwYDVR0j
BBgwFoAUcNQu8pJjnSDoF9oyqj3iMG3NTEUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0NmancyUXBCaTZxVDZuQXZudHZpR0Q0cmh5ZVJmVXl5Mlp3b29Rb2NQ
VFcvMC83MEQ0MkVGMjkyNjM5RDIwRTgxN0RBMzJBQTNERTIzMDZEQ0Q0QzQ1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzcwRDQyRUYyOTI2MzlEMjBF
ODE3REEzMkFBM0RFMjMwNkRDRDRDNDUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dDZmp3MlFwQmk2cVQ2bkF2bnR2aUdENHJoeWVSZlV5eTJad29vUW9jUFRXLzAv
MzIzODMwMzQzYTM3MzAzMjMwM2EzODMxMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzczMDM3MzAzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEcCCBMA0GCSqGSIb3DQEBCwUA
A4IBAQCACGMQaeQZC/UuKZyhkSlYAl3qKtl2FHN67qUMItK8+zU0f00jLwUcQDDq
3JqwstzVxGv03+e8GgwmiLGI3inu85esWGKAcin6lOPxPOft+NQjx1VprEkLAiyH
HV+DJdtS/R/UBSzaQB7HN0jq2ErpLNNYn5gMY8rBoeDo/D9Gct1JxNbGGpF3GFQm
BfoH3aRu0DRsl6PfQATMHl8n70Pg7YwZHWGpeXSSzAr14YDWtPHAD/FGDECTOzJw
p6nMDYp3zMYrd2RlXc26E7aojlJKIAHllzO3C+ED/fkSZBLg68aHuDPI67Wd4Jwm
lByKESf3tzK7KSJ7jI1sTm+SzU44
-----END CERTIFICATE-----
Generated at Sun Jun 8 19:54:22 2025 by rpki-client