Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/1/323830343a363462383a653030303a3a2f33352d3335203d3e20323639343434.roa
File:                     323830343a363462383a653030303a3a2f33352d3335203d3e20323639343434.roa (raw, json)
Hash identifier:          ktXuglevVl3WgnfHmf21JQMRqFonUeev7IGZQwQ2rvk=
Subject key identifier:   82:77:D7:E4:6C:A8:27:6A:54:4C:18:04:39:D5:F8:95:8E:2A:A3:18
Certificate issuer:       /CN=93E9F7EA4AE4449B26A75D2A43E883E46AA5AA8E
Certificate serial:       04D6CC5FC9A793F1E8EC1C50396FFE930BCB61F4
Authority key identifier: 93:E9:F7:EA:4A:E4:44:9B:26:A7:5D:2A:43:E8:83:E4:6A:A5:AA:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/93E9F7EA4AE4449B26A75D2A43E883E46AA5AA8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/1/323830343a363462383a653030303a3a2f33352d3335203d3e20323639343434.roa
Signing time:             Wed 20 Dec 2023 17:25:56 +0000
ROA not before:           Wed 20 Dec 2023 17:20:56 +0000
ROA not after:            Wed 18 Dec 2024 17:25:56 +0000
asID:                     269444
IP address blocks:        2804:64b8:e000::/35 maxlen: 35
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:d6:cc:5f:c9:a7:93:f1:e8:ec:1c:50:39:6f:fe:93:0b:cb:61:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93E9F7EA4AE4449B26A75D2A43E883E46AA5AA8E
        Validity
            Not Before: Dec 20 17:20:56 2023 GMT
            Not After : Dec 18 17:25:56 2024 GMT
        Subject: CN=8277D7E46CA8276A544C180439D5F8958E2AA318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4e:0d:52:d3:89:8e:53:95:57:13:79:47:3f:
                    55:bf:42:eb:5c:df:af:3b:21:2f:36:2c:4e:fe:b7:
                    9c:39:3c:d0:64:b5:95:87:68:1f:04:5a:ae:ce:82:
                    db:74:e5:01:12:7b:1f:97:46:fb:bd:a4:41:7c:61:
                    ed:03:51:45:7a:74:b8:db:fd:76:65:c9:87:03:a4:
                    bd:6e:69:6b:db:b1:3d:ab:9c:b9:e7:54:fd:e0:28:
                    68:ec:a9:d0:d7:2e:c8:e8:b4:9b:84:db:ec:3d:c6:
                    c0:43:b7:8a:2e:9a:0c:e3:98:8c:5f:72:0e:27:7e:
                    b0:2f:e5:21:25:c5:d4:32:2b:e8:c7:51:20:c1:e9:
                    07:48:cd:94:a7:54:49:78:ca:05:b6:39:01:f2:34:
                    3e:f7:a1:7d:c0:5a:4f:7a:89:ff:58:02:1f:ba:3b:
                    e0:2b:4e:4b:4c:14:84:61:5f:58:97:72:f1:0c:8b:
                    bb:e4:e2:f0:95:f8:e0:6d:d6:8a:86:f5:58:9a:d5:
                    a1:b5:63:c7:22:0a:56:7c:a4:a8:f7:1d:89:a9:e7:
                    b2:b7:db:f7:b2:a6:27:d3:8a:6d:a3:78:cf:c7:65:
                    9f:d8:7e:57:3d:41:8c:0e:44:53:99:33:93:29:cc:
                    60:03:b9:a1:d1:86:47:fd:e1:40:a6:28:67:04:d0:
                    ad:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:77:D7:E4:6C:A8:27:6A:54:4C:18:04:39:D5:F8:95:8E:2A:A3:18
            X509v3 Authority Key Identifier:
                keyid:93:E9:F7:EA:4A:E4:44:9B:26:A7:5D:2A:43:E8:83:E4:6A:A5:AA:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/1/93E9F7EA4AE4449B26A75D2A43E883E46AA5AA8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/93E9F7EA4AE4449B26A75D2A43E883E46AA5AA8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/1/323830343a363462383a653030303a3a2f33352d3335203d3e20323639343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:64b8:e000::/35

    Signature Algorithm: sha256WithRSAEncryption
         7a:bc:82:33:53:85:aa:47:fd:8b:02:11:ce:34:1b:ea:d4:b6:
         51:4b:e8:33:b6:a9:be:ff:92:cf:1c:3f:ab:42:99:41:52:d6:
         17:a1:4d:6f:6a:eb:8d:eb:21:63:a3:0d:39:3b:20:a7:ae:b2:
         eb:4e:60:4b:2e:5b:96:24:22:17:97:fd:b9:72:65:8e:e1:1d:
         76:3b:92:92:6b:aa:de:5f:d2:04:39:f5:0c:0e:82:ef:6f:70:
         44:a1:29:44:8b:29:60:81:2e:cf:38:2f:c2:e6:60:64:ea:a7:
         34:fd:b2:ab:a9:9c:39:e9:a3:12:17:f0:23:5f:94:a4:5f:15:
         f8:3e:56:13:77:15:27:ca:88:01:fc:d8:a7:e0:66:48:9d:e9:
         da:fd:33:9c:8c:95:c7:b1:26:32:6c:8d:67:14:81:c3:26:c6:
         49:b6:c1:ef:ed:2f:9f:9c:97:89:70:a5:aa:e2:6f:c1:7b:34:
         0e:07:ac:7b:39:49:5e:88:2b:cd:89:6f:99:24:2e:5e:73:a9:
         97:47:d4:97:1a:b0:b9:af:f1:65:6a:f3:52:39:96:5c:91:c8:
         84:6b:64:fb:11:34:4f:5f:de:59:5c:8d:f0:18:02:d6:e6:3b:
         e2:6d:aa:57:f9:2a:b3:75:f2:b6:1b:ef:20:5a:5c:2d:33:55:
         dd:8e:d5:b5
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUBNbMX8mnk/Ho7BxQOW/+kwvLYfQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTNFOUY3RUE0QUU0NDQ5QjI2QTc1RDJBNDNFODgzRTQ2
QUE1QUE4RTAeFw0yMzEyMjAxNzIwNTZaFw0yNDEyMTgxNzI1NTZaMDMxMTAvBgNV
BAMTKDgyNzdEN0U0NkNBODI3NkE1NDRDMTgwNDM5RDVGODk1OEUyQUEzMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGTg1S04mOU5VXE3lHP1W/Qutc
3687IS82LE7+t5w5PNBktZWHaB8EWq7Ogtt05QESex+XRvu9pEF8Ye0DUUV6dLjb
/XZlyYcDpL1uaWvbsT2rnLnnVP3gKGjsqdDXLsjotJuE2+w9xsBDt4oumgzjmIxf
cg4nfrAv5SElxdQyK+jHUSDB6QdIzZSnVEl4ygW2OQHyND73oX3AWk96if9YAh+6
O+ArTktMFIRhX1iXcvEMi7vk4vCV+OBt1oqG9Via1aG1Y8ciClZ8pKj3HYmp57K3
2/eypifTim2jeM/HZZ/Yflc9QYwORFOZM5MpzGADuaHRhkf94UCmKGcE0K2NAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUgnfX5GyoJ2pUTBgEOdX4lY4qoxgwHwYDVR0j
BBgwFoAUk+n36krkRJsmp10qQ+iD5Gqlqo4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3paM2VkTUFudzRnakpiVXBXaWVKbXhCMVJHY2lSOU03RXh4a2Jia05m
WmsvMS85M0U5RjdFQTRBRTQ0NDlCMjZBNzVEMkE0M0U4ODNFNDZBQTVBQThFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzkzRTlGN0VBNEFFNDQ0OUIy
NkE3NUQyQTQzRTg4M0U0NkFBNUFBOEUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0d6WjNlZE1Bbnc0Z2pKYlVwV2llSm14QjFSR2NpUjlNN0V4eGtiYmtOZlprLzEv
MzIzODMwMzQzYTM2MzQ2MjM4M2E2NTMwMzAzMDNhM2EyZjMzMzUyZDMzMzUyMDNk
M2UyMDMyMzYzOTM0MzQzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBSgEZLjgMA0GCSqGSIb3DQEBCwUA
A4IBAQB6vIIzU4WqR/2LAhHONBvq1LZRS+gztqm+/5LPHD+rQplBUtYXoU1vauuN
6yFjow05OyCnrrLrTmBLLluWJCIXl/25cmWO4R12O5KSa6reX9IEOfUMDoLvb3BE
oSlEiylggS7POC/C5mBk6qc0/bKrqZw56aMSF/AjX5SkXxX4PlYTdxUnyogB/Nin
4GZInena/TOcjJXHsSYybI1nFIHDJsZJtsHv7S+fnJeJcKWq4m/BezQOB6x7OUle
iCvNiW+ZJC5ec6mXR9SXGrC5r/FlavNSOZZckciEa2T7ETRPX95ZXI3wGALW5jvi
bapX+SqzdfK2G+8gWlwtM1XdjtW1
-----END CERTIFICATE-----
Generated at Sun Jun 15 08:10:28 2025 by rpki-client