Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/1/323830343a383530633a653030303a3a2f34302d3430203d3e20323732353534.roa
File:                     323830343a383530633a653030303a3a2f34302d3430203d3e20323732353534.roa (raw, json)
Hash identifier:          fBUxNEsPr93iZwo273dchLn0qNTaYLVLKRPQT+/Wk2A=
Subject key identifier:   0E:71:12:C8:0A:CB:4A:A8:54:DF:52:22:E0:4B:87:CC:53:C2:82:48
Certificate issuer:       /CN=19C9E939FDE3ECCA217048709E87CDA9D76B36B8
Certificate serial:       5FDA129DF4CADC2BDEB82CE70FC5CC6A2958B97B
Authority key identifier: 19:C9:E9:39:FD:E3:EC:CA:21:70:48:70:9E:87:CD:A9:D7:6B:36:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19C9E939FDE3ECCA217048709E87CDA9D76B36B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/1/323830343a383530633a653030303a3a2f34302d3430203d3e20323732353534.roa
Signing time:             Thu 06 Mar 2025 05:29:29 +0000
ROA not before:           Thu 06 Mar 2025 05:24:29 +0000
ROA not after:            Thu 05 Mar 2026 05:29:29 +0000
asID:                     272554
IP address blocks:        2804:850c:e000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:da:12:9d:f4:ca:dc:2b:de:b8:2c:e7:0f:c5:cc:6a:29:58:b9:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19C9E939FDE3ECCA217048709E87CDA9D76B36B8
        Validity
            Not Before: Mar  6 05:24:29 2025 GMT
            Not After : Mar  5 05:29:29 2026 GMT
        Subject: CN=0E7112C80ACB4AA854DF5222E04B87CC53C28248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:91:1f:66:05:bb:67:4c:0f:6c:67:a7:71:b5:
                    fa:18:95:78:26:e4:e3:13:dd:dd:13:84:6b:e9:ad:
                    a8:08:f4:3b:70:30:fc:15:73:65:c9:ca:1a:e0:67:
                    a8:b3:fd:b3:5e:40:b0:54:d6:d3:48:c2:8a:3f:1f:
                    5c:f1:e3:f1:e3:ec:b2:ff:e6:f6:43:06:57:6e:2b:
                    69:a6:cc:5a:64:59:1f:9c:1e:ad:1c:f5:37:d4:e8:
                    6e:2e:04:65:2b:02:2b:13:93:c3:37:4c:b6:29:3e:
                    f4:ac:06:40:ab:27:ad:30:52:e7:c4:e9:8b:ce:af:
                    99:30:bd:50:b7:6f:4b:fa:5d:45:8e:30:c8:e1:00:
                    98:f0:86:55:ba:cd:97:41:89:87:25:15:26:dd:81:
                    7e:d0:58:99:7a:ce:46:7d:06:0f:89:0d:ac:2a:09:
                    45:12:f9:34:95:0a:9e:85:e3:8c:c3:ba:18:a0:6d:
                    9a:7f:9f:cc:b5:39:72:d6:86:e4:53:15:38:58:af:
                    31:01:bc:e5:fa:41:a3:eb:2b:aa:28:d2:8a:a3:c5:
                    5a:8a:23:90:8c:fb:cf:0c:c7:cb:60:a1:10:87:fe:
                    e8:11:e6:7d:d1:8a:48:6b:12:bd:15:c5:f9:05:ec:
                    e4:57:3f:9b:dd:16:10:6a:2e:de:83:df:a1:b9:ff:
                    ca:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:71:12:C8:0A:CB:4A:A8:54:DF:52:22:E0:4B:87:CC:53:C2:82:48
            X509v3 Authority Key Identifier:
                keyid:19:C9:E9:39:FD:E3:EC:CA:21:70:48:70:9E:87:CD:A9:D7:6B:36:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/1/19C9E939FDE3ECCA217048709E87CDA9D76B36B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19C9E939FDE3ECCA217048709E87CDA9D76B36B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/1/323830343a383530633a653030303a3a2f34302d3430203d3e20323732353534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:850c:e000::/40

    Signature Algorithm: sha256WithRSAEncryption
         ea:79:07:ad:7a:c8:4a:f9:9c:6c:65:dc:04:c7:da:17:9a:43:
         4a:30:b9:4a:2c:f0:6e:88:62:6e:17:e4:f8:37:c3:a5:da:ba:
         fe:63:b1:92:6f:ac:a1:0e:1e:23:5f:2c:24:89:65:91:6d:09:
         fd:51:63:cb:3a:5f:bb:84:5a:b9:ed:a4:58:dd:38:3f:17:69:
         fc:d9:e4:2f:a1:e8:3b:e1:c9:2b:09:67:79:a7:37:17:c4:bc:
         1a:8c:f9:b4:3b:b7:b4:31:72:73:4b:da:70:93:01:28:72:a7:
         59:1d:8f:f8:55:00:82:2b:7f:9c:a5:29:9e:02:da:d7:a9:d9:
         64:38:a8:9c:ee:39:c5:68:e3:37:0d:60:e3:75:90:91:f0:45:
         59:11:dc:5f:3e:0b:10:cc:36:49:3d:b1:dc:7c:5b:73:0c:30:
         7b:bf:6d:9c:54:9f:f7:ff:7a:f7:a3:dd:3f:63:1d:fc:97:39:
         b8:84:1a:a6:86:e3:81:c8:48:a5:db:93:fb:62:c5:36:21:8c:
         12:c9:ca:87:10:23:36:bf:67:47:91:38:6d:7e:57:79:24:b2:
         2c:db:97:00:76:1b:dc:f9:0d:a5:52:03:c3:35:02:d6:dc:2f:
         de:7b:19:57:04:9f:fd:63:32:79:43:3a:93:25:c1:9a:17:31:
         62:45:cd:87
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUX9oSnfTK3CveuCznD8XMailYuXswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTlDOUU5MzlGREUzRUNDQTIxNzA0ODcwOUU4N0NEQTlE
NzZCMzZCODAeFw0yNTAzMDYwNTI0MjlaFw0yNjAzMDUwNTI5MjlaMDMxMTAvBgNV
BAMTKDBFNzExMkM4MEFDQjRBQTg1NERGNTIyMkUwNEI4N0NDNTNDMjgyNDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOkR9mBbtnTA9sZ6dxtfoYlXgm
5OMT3d0ThGvpragI9DtwMPwVc2XJyhrgZ6iz/bNeQLBU1tNIwoo/H1zx4/Hj7LL/
5vZDBlduK2mmzFpkWR+cHq0c9TfU6G4uBGUrAisTk8M3TLYpPvSsBkCrJ60wUufE
6YvOr5kwvVC3b0v6XUWOMMjhAJjwhlW6zZdBiYclFSbdgX7QWJl6zkZ9Bg+JDawq
CUUS+TSVCp6F44zDuhigbZp/n8y1OXLWhuRTFThYrzEBvOX6QaPrK6oo0oqjxVqK
I5CM+88Mx8tgoRCH/ugR5n3RikhrEr0VxfkF7ORXP5vdFhBqLt6D36G5/8ofAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUDnESyArLSqhU31Ii4EuHzFPCgkgwHwYDVR0j
BBgwFoAUGcnpOf3j7MohcEhwnofNqddrNrgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMm9WdmVTQ3FCWUoyRzM3TjNjbnQyUlcyYTdjckNrRldvSEhGSGZVWFly
ZWYvMS8xOUM5RTkzOUZERTNFQ0NBMjE3MDQ4NzA5RTg3Q0RBOUQ3NkIzNkI4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE5QzlFOTM5RkRFM0VDQ0Ey
MTcwNDg3MDlFODdDREE5RDc2QjM2QjguY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJvVnZlU0NxQllKMkczN04zY250MlJXMmE3Y3JDa0ZXb0hIRkhmVVhZcmVmLzEv
MzIzODMwMzQzYTM4MzUzMDYzM2E2NTMwMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzczMjM1MzUzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEhQzgMA0GCSqGSIb3DQEBCwUA
A4IBAQDqeQeteshK+ZxsZdwEx9oXmkNKMLlKLPBuiGJuF+T4N8Ol2rr+Y7GSb6yh
Dh4jXywkiWWRbQn9UWPLOl+7hFq57aRY3Tg/F2n82eQvoeg74ckrCWd5pzcXxLwa
jPm0O7e0MXJzS9pwkwEocqdZHY/4VQCCK3+cpSmeAtrXqdlkOKic7jnFaOM3DWDj
dZCR8EVZEdxfPgsQzDZJPbHcfFtzDDB7v22cVJ/3/3r3o90/Yx38lzm4hBqmhuOB
yEil25P7YsU2IYwSycqHECM2v2dHkThtfld5JLIs25cAdhvc+Q2lUgPDNQLW3C/e
exlXBJ/9YzJ5QzqTJcGaFzFiRc2H
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:22:29 2025 by rpki-client