Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/PZ85QNozjP9SvhLH9tok2SWQcmvjPRDstmzeY4MstZB/1/323830343a383961303a3a2f33322d3336203d3e20323733363136.roa
File:                     323830343a383961303a3a2f33322d3336203d3e20323733363136.roa (raw, json)
Hash identifier:          UpfB8pBvkI2mQPm5KU8bSQfX1WxMkbX7L04RTN5m9Nc=
Subject key identifier:   E3:74:21:4E:26:07:AF:D6:1C:75:98:F1:70:74:1A:2A:C2:E4:28:B0
Certificate issuer:       /CN=0D6388E38C347D3C53C94DB93B30EE0FA0C18A29
Certificate serial:       0F7BB6E11467D4D545AA43F73B1638C2FBD1CD98
Authority key identifier: 0D:63:88:E3:8C:34:7D:3C:53:C9:4D:B9:3B:30:EE:0F:A0:C1:8A:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0D6388E38C347D3C53C94DB93B30EE0FA0C18A29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/PZ85QNozjP9SvhLH9tok2SWQcmvjPRDstmzeY4MstZB/1/323830343a383961303a3a2f33322d3336203d3e20323733363136.roa
Signing time:             Mon 04 Dec 2023 20:25:42 +0000
ROA not before:           Mon 04 Dec 2023 20:20:42 +0000
ROA not after:            Mon 02 Dec 2024 20:25:42 +0000
asID:                     273616
IP address blocks:        2804:89a0::/32 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:7b:b6:e1:14:67:d4:d5:45:aa:43:f7:3b:16:38:c2:fb:d1:cd:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D6388E38C347D3C53C94DB93B30EE0FA0C18A29
        Validity
            Not Before: Dec  4 20:20:42 2023 GMT
            Not After : Dec  2 20:25:42 2024 GMT
        Subject: CN=E374214E2607AFD61C7598F170741A2AC2E428B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c6:84:34:da:f1:6e:68:d9:53:64:2c:65:ab:
                    16:14:8e:f5:dd:c5:5c:dc:f5:44:00:44:4e:64:ea:
                    0d:f7:55:c5:4a:3e:ab:c1:81:ca:ca:43:65:2d:c8:
                    90:47:e0:07:77:b1:ce:cb:57:b9:ac:b7:5d:3b:69:
                    cd:9b:9b:e8:28:1e:69:d1:44:1c:b6:c9:63:45:b2:
                    cd:62:1a:59:da:12:23:b0:56:b7:f0:fc:28:59:28:
                    7e:2b:41:d0:4a:98:2d:20:96:a2:c2:ab:74:09:d1:
                    6c:cf:e6:77:b0:04:05:3c:92:41:aa:a7:2b:09:b7:
                    82:29:b5:ad:27:d2:da:2c:e9:ce:1c:50:c6:31:8f:
                    65:51:14:8e:8d:8c:ad:3f:58:98:61:67:93:f7:a2:
                    d0:6d:05:23:87:97:d0:f3:c7:b3:8d:c3:a9:32:5c:
                    88:3f:14:f3:3e:b7:26:7f:52:23:cd:ee:5b:55:51:
                    88:18:e0:36:ee:f9:61:12:56:35:18:01:97:94:42:
                    8d:b7:63:d8:8d:93:1c:70:88:8e:b1:cc:87:e8:4e:
                    27:29:dd:84:02:ba:32:b0:dd:1e:8e:e9:d1:bc:95:
                    dd:45:61:2f:80:77:fa:cf:14:16:c8:37:10:44:7b:
                    74:ec:fc:d5:07:e9:ff:d0:5f:c9:94:cc:22:39:fd:
                    bd:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:74:21:4E:26:07:AF:D6:1C:75:98:F1:70:74:1A:2A:C2:E4:28:B0
            X509v3 Authority Key Identifier:
                keyid:0D:63:88:E3:8C:34:7D:3C:53:C9:4D:B9:3B:30:EE:0F:A0:C1:8A:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/PZ85QNozjP9SvhLH9tok2SWQcmvjPRDstmzeY4MstZB/1/0D6388E38C347D3C53C94DB93B30EE0FA0C18A29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0D6388E38C347D3C53C94DB93B30EE0FA0C18A29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/PZ85QNozjP9SvhLH9tok2SWQcmvjPRDstmzeY4MstZB/1/323830343a383961303a3a2f33322d3336203d3e20323733363136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:89a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:ed:ad:75:e5:4f:47:c3:81:4e:d0:b0:28:d9:eb:f4:5b:2f:
         f1:83:8c:14:31:a5:e2:b0:4f:99:f2:3d:1f:1e:bd:37:4b:b2:
         39:1d:19:23:aa:b0:54:04:47:85:98:d8:65:2e:76:1c:9e:95:
         04:06:c3:06:4b:5a:2c:78:5c:05:ee:54:1b:24:56:28:3d:76:
         7a:a7:2c:2b:b4:1b:5a:71:d4:b0:f7:61:5b:b3:5e:9b:60:2d:
         19:64:26:2f:48:8b:be:e2:63:93:dd:32:3c:b2:50:8f:6f:8a:
         10:14:be:71:aa:20:99:d6:81:a1:15:09:b0:0d:41:0a:17:93:
         b4:87:0e:74:4a:1f:b4:b3:b8:3c:4a:92:cb:fc:e6:19:8c:4e:
         eb:8c:4a:a9:da:18:b2:93:7e:31:4d:b9:2d:3f:ca:d6:86:ba:
         85:b0:b1:ea:13:3f:88:fc:57:fb:98:b5:39:e1:44:2e:3e:1c:
         45:f4:eb:91:3d:bd:1d:3a:3a:6f:0b:a2:78:5b:c9:4e:b4:58:
         35:70:a8:88:b0:e0:ad:fc:fb:8a:da:af:1a:e9:df:8d:81:0d:
         72:5d:a1:57:42:ba:16:7b:11:26:a4:98:a1:95:e5:98:44:17:
         08:46:7b:86:90:9f:86:2b:3b:5b:2f:23:00:0a:2f:b0:42:13:
         5d:34:42:18
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUD3u24RRn1NVFqkP3OxY4wvvRzZgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQ2Mzg4RTM4QzM0N0QzQzUzQzk0REI5M0IzMEVFMEZB
MEMxOEEyOTAeFw0yMzEyMDQyMDIwNDJaFw0yNDEyMDIyMDI1NDJaMDMxMTAvBgNV
BAMTKEUzNzQyMTRFMjYwN0FGRDYxQzc1OThGMTcwNzQxQTJBQzJFNDI4QjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrxoQ02vFuaNlTZCxlqxYUjvXd
xVzc9UQARE5k6g33VcVKPqvBgcrKQ2UtyJBH4Ad3sc7LV7mst107ac2bm+goHmnR
RBy2yWNFss1iGlnaEiOwVrfw/ChZKH4rQdBKmC0glqLCq3QJ0WzP5newBAU8kkGq
pysJt4Ipta0n0tos6c4cUMYxj2VRFI6NjK0/WJhhZ5P3otBtBSOHl9Dzx7ONw6ky
XIg/FPM+tyZ/UiPN7ltVUYgY4Dbu+WESVjUYAZeUQo23Y9iNkxxwiI6xzIfoTicp
3YQCujKw3R6O6dG8ld1FYS+Ad/rPFBbINxBEe3Ts/NUH6f/QX8mUzCI5/b27AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU43QhTiYHr9YcdZjxcHQaKsLkKLAwHwYDVR0j
BBgwFoAUDWOI44w0fTxTyU25OzDuD6DBiikwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9QWjg1UU5vempQOVN2aExIOXRvazJTV1FjbXZqUFJEc3RtemVZNE1zdFpC
LzEvMEQ2Mzg4RTM4QzM0N0QzQzUzQzk0REI5M0IzMEVFMEZBMEMxOEEyOS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC8wRDYzODhFMzhDMzQ3RDNDNTND
OTREQjkzQjMwRUUwRkEwQzE4QTI5LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Q
Wjg1UU5vempQOVN2aExIOXRvazJTV1FjbXZqUFJEc3RtemVZNE1zdFpCLzEvMzIz
ODMwMzQzYTM4Mzk2MTMwM2EzYTJmMzMzMjJkMzMzNjIwM2QzZTIwMzIzNzMzMzYz
MTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/
BBEwDzANBAIAAjAHAwUAKASJoDANBgkqhkiG9w0BAQsFAAOCAQEAQu2tdeVPR8OB
TtCwKNnr9Fsv8YOMFDGl4rBPmfI9Hx69N0uyOR0ZI6qwVARHhZjYZS52HJ6VBAbD
BktaLHhcBe5UGyRWKD12eqcsK7QbWnHUsPdhW7Nem2AtGWQmL0iLvuJjk90yPLJQ
j2+KEBS+caogmdaBoRUJsA1BCheTtIcOdEoftLO4PEqSy/zmGYxO64xKqdoYspN+
MU25LT/K1oa6hbCx6hM/iPxX+5i1OeFELj4cRfTrkT29HTo6bwuieFvJTrRYNXCo
iLDgrfz7itqvGunfjYENcl2hV0K6FnsRJqSYoZXlmEQXCEZ7hpCfhis7Wy8jAAov
sEITXTRCGA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 08:49:13 2025 by rpki-client