Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/323830343a323331633a353130313a3a2f34382d3438203d3e203631353931.roa
File:                     323830343a323331633a353130313a3a2f34382d3438203d3e203631353931.roa (raw, json)
Hash identifier:          id1Olo/347+FQsBII2wFoNDv9NtUFck215D6WxKTFyo=
Subject key identifier:   9A:EB:94:F6:CE:F0:B9:99:F5:18:30:E6:E9:27:AA:FC:A5:BE:BE:90
Certificate issuer:       /CN=14490FD591932776F2F5F6CFB3C5431550A04F62
Certificate serial:       20071B01F15B3FCF525C0B179DC3FC1AB21E7097
Authority key identifier: 14:49:0F:D5:91:93:27:76:F2:F5:F6:CF:B3:C5:43:15:50:A0:4F:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/323830343a323331633a353130313a3a2f34382d3438203d3e203631353931.roa
Signing time:             Sat 01 Feb 2025 12:44:46 +0000
ROA not before:           Sat 01 Feb 2025 12:39:46 +0000
ROA not after:            Sat 31 Jan 2026 12:44:46 +0000
asID:                     61591
IP address blocks:        2804:231c:5101::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:07:1b:01:f1:5b:3f:cf:52:5c:0b:17:9d:c3:fc:1a:b2:1e:70:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14490FD591932776F2F5F6CFB3C5431550A04F62
        Validity
            Not Before: Feb  1 12:39:46 2025 GMT
            Not After : Jan 31 12:44:46 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c2:b5:78:f8:6e:a4:09:79:2e:c6:c7:35:66:
                    26:6b:9e:53:91:7a:7a:8e:9f:06:4a:bf:bc:95:a2:
                    c1:4e:46:11:95:9c:c4:e2:20:8d:2c:91:ec:37:42:
                    d0:ab:43:99:a5:c0:f3:2f:76:cb:87:bd:fd:79:10:
                    36:b2:b6:20:d9:34:0c:8b:13:4d:cf:10:2c:c2:03:
                    92:1a:95:11:5d:41:86:33:c2:57:c3:0f:5f:9a:7f:
                    fe:ec:e7:b5:1d:53:1e:3e:34:9b:be:13:54:e5:b8:
                    d7:8d:d6:3e:ee:b6:1f:c9:64:9d:3a:57:ce:9d:ef:
                    c0:df:fc:d7:51:e0:c3:a1:ab:b7:9d:9c:d2:23:36:
                    08:ed:02:a1:d0:04:99:fd:a8:9c:23:46:9f:16:c0:
                    6c:c3:f4:cb:bf:db:54:04:b0:6e:ac:06:82:b2:97:
                    b8:ca:ee:e2:a5:36:b1:8f:a1:af:2c:46:39:da:4e:
                    7d:23:ce:c0:e2:90:3d:96:7a:ed:76:dd:88:05:17:
                    3c:52:d9:e8:0f:67:e1:fa:28:c0:c2:77:fc:d0:ff:
                    b5:42:63:c4:1d:32:20:15:49:c1:89:2f:ee:df:d1:
                    65:82:74:66:d5:f3:9d:9c:6f:d9:b1:40:9e:3f:33:
                    3a:9f:aa:01:90:7b:d0:20:ca:e0:54:2c:bb:1d:1d:
                    f1:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:EB:94:F6:CE:F0:B9:99:F5:18:30:E6:E9:27:AA:FC:A5:BE:BE:90
            X509v3 Authority Key Identifier:
                keyid:14:49:0F:D5:91:93:27:76:F2:F5:F6:CF:B3:C5:43:15:50:A0:4F:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/323830343a323331633a353130313a3a2f34382d3438203d3e203631353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:231c:5101::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:b5:5f:f8:6e:19:32:5a:e1:f1:a2:71:76:34:50:54:d3:db:
         8c:d4:27:de:4e:7e:77:d1:40:4c:fc:c7:bb:74:a8:59:fe:15:
         6b:b3:d3:8d:7d:a7:fb:aa:d5:42:e3:a6:9c:65:66:f0:80:42:
         2a:3e:e2:92:f4:2e:46:73:a5:a9:65:8b:f2:8f:1b:75:25:57:
         cf:33:8e:66:50:07:af:b9:ab:11:02:71:6c:7f:48:bb:08:98:
         35:3f:11:1f:a3:b5:49:f3:30:f5:8d:0b:5b:15:de:a1:c8:ba:
         6e:3e:6f:fc:76:d3:7a:24:e1:0d:77:9d:c6:f0:05:14:0d:b8:
         69:be:47:34:ee:7e:be:c7:3f:6b:0d:22:34:15:f3:d0:21:63:
         37:69:d6:49:ed:89:6a:91:66:f3:f3:cb:8e:2c:2a:eb:ef:a0:
         87:f3:aa:e2:7c:47:75:ae:e2:ad:de:c4:6a:eb:4e:62:ac:98:
         66:f1:b2:34:41:c1:df:71:ff:20:d9:a1:3d:03:ef:83:c8:c2:
         db:91:37:54:5d:5b:22:b1:fe:fb:3e:96:21:e9:7d:33:ab:2e:
         52:1a:a8:fa:5f:d1:1c:f0:90:7b:0b:44:1d:b4:a4:ef:17:11:
         dc:12:49:6a:0c:63:91:05:63:fa:c5:44:16:6c:ce:05:95:f7:
         0f:d4:1b:00
-----BEGIN CERTIFICATE-----
MIIHTDCCBjSgAwIBAgIUIAcbAfFbP89SXAsXncP8GrIecJcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQ0OTBGRDU5MTkzMjc3NkYyRjVGNkNGQjNDNTQzMTU1
MEEwNEY2MjAeFw0yNTAyMDExMjM5NDZaFw0yNjAxMzExMjQ0NDZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTRDMkI1NzhGODZFQTQwOTc5
MkVDNkM3MzU2NjI2NkI5RTUzOTE3QTdBOEU5RjA2NEFCRkJDOTVBMkMxNEU0NjEx
OTU5Q0M0RTIyMDhEMkM5MUVDMzc0MkQwQUI0Mzk5QTVDMEYzMkY3NkNCODdCREZE
NzkxMDM2QjJCNjIwRDkzNDBDOEIxMzREQ0YxMDJDQzIwMzkyMUE5NTExNUQ0MTg2
MzNDMjU3QzMwRjVGOUE3RkZFRUNFN0I1MUQ1MzFFM0UzNDlCQkUxMzU0RTVCOEQ3
OERENjNFRUVCNjFGQzk2NDlEM0E1N0NFOURFRkMwREZGQ0Q3NTFFMEMzQTFBQkI3
OUQ5Q0QyMjMzNjA4RUQwMkExRDAwNDk5RkRBODlDMjM0NjlGMTZDMDZDQzNGNENC
QkZEQjU0MDRCMDZFQUMwNjgyQjI5N0I4Q0FFRUUyQTUzNkIxOEZBMUFGMkM0NjM5
REE0RTdEMjNDRUMwRTI5MDNEOTY3QUVENzZERDg4MDUxNzNDNTJEOUU4MEY2N0Ux
RkEyOEMwQzI3N0ZDRDBGRkI1NDI2M0M0MUQzMjIwMTU0OUMxODkyRkVFREZEMTY1
ODI3NDY2RDVGMzlEOUM2RkQ5QjE0MDlFM0YzMzNBOUZBQTAxOTA3QkQwMjBDQUUw
NTQyQ0JCMUQxREYxOTMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEApMK1ePhupAl5LsbHNWYma55TkXp6jp8GSr+8laLBTkYRlZzE4iCN
LJHsN0LQq0OZpcDzL3bLh739eRA2srYg2TQMixNNzxAswgOSGpURXUGGM8JXww9f
mn/+7Oe1HVMePjSbvhNU5bjXjdY+7rYfyWSdOlfOne/A3/zXUeDDoau3nZzSIzYI
7QKh0ASZ/aicI0afFsBsw/TLv9tUBLBurAaCspe4yu7ipTaxj6GvLEY52k59I87A
4pA9lnrtdt2IBRc8UtnoD2fh+ijAwnf80P+1QmPEHTIgFUnBiS/u39FlgnRm1fOd
nG/ZsUCePzM6n6oBkHvQIMrgVCy7HR3xkwIDAQABo4ICWjCCAlYwHQYDVR0OBBYE
FJrrlPbO8LmZ9Rgw5uknqvylvr6QMB8GA1UdIwQYMBaAFBRJD9WRkyd28vX2z7PF
QxVQoE9iMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNFTlBEMkhld1E3NjRx
dFpOV3ZaNnRXeTd1TkJTelJrTlRNSmRqMThSYVBkLzEvMTQ0OTBGRDU5MTkzMjc3
NkYyRjVGNkNGQjNDNTQzMTU1MEEwNEY2Mi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8xNDQ5MEZENTkxOTMyNzc2RjJGNUY2Q0ZCM0M1NDMxNTUwQTA0
RjYyLmNlcjCBtAYIKwYBBQUHAQsEgacwgaQwgaEGCCsGAQUFBzALhoGUcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zRU5QRDJIZXdRNzY0cXRaTld2
WjZ0V3k3dU5CU3pSa05UTUpkajE4UmFQZC8xLzMyMzgzMDM0M2EzMjMzMzE2MzNh
MzUzMTMwMzEzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNjMxMzUzOTMxLnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcAKAQjHFEBMA0GCSqGSIb3DQEBCwUAA4IBAQAltV/4bhkyWuHxonF2NFBU
09uM1CfeTn530UBM/Me7dKhZ/hVrs9ONfaf7qtVC46acZWbwgEIqPuKS9C5Gc6Wp
ZYvyjxt1JVfPM45mUAevuasRAnFsf0i7CJg1PxEfo7VJ8zD1jQtbFd6hyLpuPm/8
dtN6JOENd53G8AUUDbhpvkc07n6+xz9rDSI0FfPQIWM3adZJ7YlqkWbz88uOLCrr
76CH86rifEd1ruKt3sRq605irJhm8bI0QcHfcf8g2aE9A++DyMLbkTdUXVsisf77
PpYh6X0zqy5SGqj6X9Ec8JB7C0QdtKTvFxHcEklqDGORBWP6xUQWbM4FlfcP1BsA
-----END CERTIFICATE-----
Generated at Wed Apr 9 00:08:58 2025 by rpki-client