Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a3a2f33362d3336203d3e20323636323438.roa
File:                     323830343a336430343a3a2f33362d3336203d3e20323636323438.roa (raw, json)
Hash identifier:          AfCbLoODAdBZCAZdFIVWLP+lXC7w550egR9caiICixE=
Subject key identifier:   35:5B:E1:39:4F:88:82:B5:F2:4B:3A:6C:F4:4A:E8:55:DA:14:55:2A
Certificate issuer:       /CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
Certificate serial:       5F736BC46142BF04505AE70DF03D69551C38C2A9
Authority key identifier: 6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a3a2f33362d3336203d3e20323636323438.roa
Signing time:             Wed 05 Mar 2025 19:00:02 +0000
ROA not before:           Wed 05 Mar 2025 18:55:02 +0000
ROA not after:            Wed 04 Mar 2026 19:00:02 +0000
asID:                     266248
IP address blocks:        2804:3d04::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:73:6b:c4:61:42:bf:04:50:5a:e7:0d:f0:3d:69:55:1c:38:c2:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
        Validity
            Not Before: Mar  5 18:55:02 2025 GMT
            Not After : Mar  4 19:00:02 2026 GMT
        Subject: CN=3082010A0282010100A5E7724AF3D881B82FE673D469B1B7C569B118152AEDF4FBACED93C9F297EE11966CAEB6CF617C0FFC2DC435A411FC763E436477B9864FC8C059500ECA5E510DACC2FB108E3694993FD2ACAA9A873BCD754E4B10A0C76C3AA7C6C2F153FD4740C545250B3C0032868FF1CE03BB76B140FB5438537B0A9713B256DC787D6B04516557DE6C3380E3A89866AFBA89986CF33B24D9C3C32CD89698F035D946CC9D355C0693E1B1F753B5895ABF9F566B8B288145A8F035E5447F9556280969B34005B11F985B6EFFD9235A5CC4385E2B1F84A067EFF34C753507263F48C4296ED49184A47A37228F6A95A97CC40ACFFF17F54B906D8E67650B7BB34951C66C7B439B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e7:72:4a:f3:d8:81:b8:2f:e6:73:d4:69:b1:
                    b7:c5:69:b1:18:15:2a:ed:f4:fb:ac:ed:93:c9:f2:
                    97:ee:11:96:6c:ae:b6:cf:61:7c:0f:fc:2d:c4:35:
                    a4:11:fc:76:3e:43:64:77:b9:86:4f:c8:c0:59:50:
                    0e:ca:5e:51:0d:ac:c2:fb:10:8e:36:94:99:3f:d2:
                    ac:aa:9a:87:3b:cd:75:4e:4b:10:a0:c7:6c:3a:a7:
                    c6:c2:f1:53:fd:47:40:c5:45:25:0b:3c:00:32:86:
                    8f:f1:ce:03:bb:76:b1:40:fb:54:38:53:7b:0a:97:
                    13:b2:56:dc:78:7d:6b:04:51:65:57:de:6c:33:80:
                    e3:a8:98:66:af:ba:89:98:6c:f3:3b:24:d9:c3:c3:
                    2c:d8:96:98:f0:35:d9:46:cc:9d:35:5c:06:93:e1:
                    b1:f7:53:b5:89:5a:bf:9f:56:6b:8b:28:81:45:a8:
                    f0:35:e5:44:7f:95:56:28:09:69:b3:40:05:b1:1f:
                    98:5b:6e:ff:d9:23:5a:5c:c4:38:5e:2b:1f:84:a0:
                    67:ef:f3:4c:75:35:07:26:3f:48:c4:29:6e:d4:91:
                    84:a4:7a:37:22:8f:6a:95:a9:7c:c4:0a:cf:ff:17:
                    f5:4b:90:6d:8e:67:65:0b:7b:b3:49:51:c6:6c:7b:
                    43:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:5B:E1:39:4F:88:82:B5:F2:4B:3A:6C:F4:4A:E8:55:DA:14:55:2A
            X509v3 Authority Key Identifier:
                keyid:6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a3a2f33362d3336203d3e20323636323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d04::/36

    Signature Algorithm: sha256WithRSAEncryption
         95:4a:17:60:b2:98:25:8e:b3:d7:8e:a9:b4:a6:90:18:20:4e:
         31:c2:d1:da:33:81:3f:ec:76:10:d9:40:dd:32:2b:ce:8e:d4:
         ab:74:a2:45:a2:97:b6:22:e7:a9:57:b1:7f:22:82:ca:f7:aa:
         86:22:62:23:8d:d5:0e:7a:ad:44:eb:0f:bd:2a:97:f4:95:bc:
         93:4c:54:8f:07:91:01:8c:06:fd:af:8c:f3:e8:2b:3a:5e:63:
         64:ed:b5:bb:a1:91:92:f8:4c:6d:07:95:c4:10:a2:bb:fa:45:
         9f:ef:75:8c:f5:b0:0f:06:c4:1a:b1:6e:63:74:ab:16:da:69:
         40:e7:80:4b:a4:67:ef:92:07:99:38:62:65:e2:f5:59:36:f0:
         45:3c:c0:a8:8b:5b:91:2e:12:99:5c:ea:ce:59:94:ee:4c:2b:
         31:39:e9:90:3c:b4:10:74:f3:2f:48:fe:74:1f:24:8f:b4:10:
         26:db:1b:09:b5:47:54:f0:04:7f:5b:ec:44:ff:6b:d5:26:b3:
         86:a9:16:82:55:79:be:5b:e3:a0:3c:7c:4c:31:3c:39:d7:71:
         09:ee:e7:2f:f0:cb:e0:61:08:89:18:d3:7b:ec:e9:ac:04:ef:
         96:d6:0b:cc:ab:16:b0:54:8b:9f:0a:65:1e:96:cd:db:69:f8:
         68:10:0c:13
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUX3NrxGFCvwRQWucN8D1pVRw4wqkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkY3Qjc4MEJBQjNBRjMxOUE4RkExNjMyMkE1MDM2Q0I3
RjI3MDQ1ODAeFw0yNTAzMDUxODU1MDJaFw0yNjAzMDQxOTAwMDJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTVFNzcyNEFGM0Q4ODFCODJG
RTY3M0Q0NjlCMUI3QzU2OUIxMTgxNTJBRURGNEZCQUNFRDkzQzlGMjk3RUUxMTk2
NkNBRUI2Q0Y2MTdDMEZGQzJEQzQzNUE0MTFGQzc2M0U0MzY0NzdCOTg2NEZDOEMw
NTk1MDBFQ0E1RTUxMERBQ0MyRkIxMDhFMzY5NDk5M0ZEMkFDQUE5QTg3M0JDRDc1
NEU0QjEwQTBDNzZDM0FBN0M2QzJGMTUzRkQ0NzQwQzU0NTI1MEIzQzAwMzI4NjhG
RjFDRTAzQkI3NkIxNDBGQjU0Mzg1MzdCMEE5NzEzQjI1NkRDNzg3RDZCMDQ1MTY1
NTdERTZDMzM4MEUzQTg5ODY2QUZCQTg5OTg2Q0YzM0IyNEQ5QzNDMzJDRDg5Njk4
RjAzNUQ5NDZDQzlEMzU1QzA2OTNFMUIxRjc1M0I1ODk1QUJGOUY1NjZCOEIyODgx
NDVBOEYwMzVFNTQ0N0Y5NTU2MjgwOTY5QjM0MDA1QjExRjk4NUI2RUZGRDkyMzVB
NUNDNDM4NUUyQjFGODRBMDY3RUZGMzRDNzUzNTA3MjYzRjQ4QzQyOTZFRDQ5MTg0
QTQ3QTM3MjI4RjZBOTVBOTdDQzQwQUNGRkYxN0Y1NEI5MDZEOEU2NzY1MEI3QkIz
NDk1MUM2NkM3QjQzOUIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEApedySvPYgbgv5nPUabG3xWmxGBUq7fT7rO2TyfKX7hGWbK62z2F8
D/wtxDWkEfx2PkNkd7mGT8jAWVAOyl5RDazC+xCONpSZP9KsqpqHO811TksQoMds
OqfGwvFT/UdAxUUlCzwAMoaP8c4Du3axQPtUOFN7CpcTslbceH1rBFFlV95sM4Dj
qJhmr7qJmGzzOyTZw8Ms2JaY8DXZRsydNVwGk+Gx91O1iVq/n1ZriyiBRajwNeVE
f5VWKAlps0AFsR+YW27/2SNaXMQ4XisfhKBn7/NMdTUHJj9IxClu1JGEpHo3Io9q
lal8xArP/xf1S5BtjmdlC3uzSVHGbHtDmwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FDVb4TlPiIK18ks6bPRK6FXaFFUqMB8GA1UdIwQYMBaAFG97eAurOvMZqPoWMipQ
Nst/JwRYMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJrcEp1M0pNQWJHMUI0
Um1zdnQyQ2dWYVcyZFM2RUw5Z0d4RDJaZXdtcjVKLzEvNkY3Qjc4MEJBQjNBRjMx
OUE4RkExNjMyMkE1MDM2Q0I3RjI3MDQ1OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS82RjdCNzgwQkFCM0FGMzE5QThGQTE2MzIyQTUwMzZDQjdGMjcw
NDU4LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8ya3BKdTNKTUFiRzFCNFJtc3Z0
MkNnVmFXMmRTNkVMOWdHeEQyWmV3bXI1Si8xLzMyMzgzMDM0M2EzMzY0MzAzNDNh
M2EyZjMzMzYyZDMzMzYyMDNkM2UyMDMyMzYzNjMyMzQzOC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgE
PQQAMA0GCSqGSIb3DQEBCwUAA4IBAQCVShdgspgljrPXjqm0ppAYIE4xwtHaM4E/
7HYQ2UDdMivOjtSrdKJFope2IuepV7F/IoLK96qGImIjjdUOeq1E6w+9Kpf0lbyT
TFSPB5EBjAb9r4zz6Cs6XmNk7bW7oZGS+ExtB5XEEKK7+kWf73WM9bAPBsQasW5j
dKsW2mlA54BLpGfvkgeZOGJl4vVZNvBFPMCoi1uRLhKZXOrOWZTuTCsxOemQPLQQ
dPMvSP50HySPtBAm2xsJtUdU8AR/W+xE/2vVJrOGqRaCVXm+W+OgPHxMMTw513EJ
7ucv8MvgYQiJGNN77OmsBO+W1gvMqxawVIufCmUels3bafhoEAwT
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:09:44 2025 by rpki-client