Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/323830343a323331633a373430313a3a2f34382d3438203d3e203631353931.roa
File:                     323830343a323331633a373430313a3a2f34382d3438203d3e203631353931.roa (raw, json)
Hash identifier:          PcMPfXXlx4/uW3TqcBOhkAZY1vhfhdGSH2ALND2ChDk=
Subject key identifier:   14:03:BB:5A:0E:18:3A:22:61:B5:30:E8:43:EE:CF:D8:33:CE:C2:D9
Certificate issuer:       /CN=14490FD591932776F2F5F6CFB3C5431550A04F62
Certificate serial:       06E5BE4AA15FB6F3324F9BC93CC12660A188ECC2
Authority key identifier: 14:49:0F:D5:91:93:27:76:F2:F5:F6:CF:B3:C5:43:15:50:A0:4F:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/323830343a323331633a373430313a3a2f34382d3438203d3e203631353931.roa
Signing time:             Sat 01 Feb 2025 12:46:04 +0000
ROA not before:           Sat 01 Feb 2025 12:41:04 +0000
ROA not after:            Sat 31 Jan 2026 12:46:04 +0000
asID:                     61591
IP address blocks:        2804:231c:7401::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:e5:be:4a:a1:5f:b6:f3:32:4f:9b:c9:3c:c1:26:60:a1:88:ec:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14490FD591932776F2F5F6CFB3C5431550A04F62
        Validity
            Not Before: Feb  1 12:41:04 2025 GMT
            Not After : Jan 31 12:46:04 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2a:8b:20:06:39:c2:a6:2e:61:c1:be:b2:08:
                    de:5c:34:f7:d9:54:84:11:06:a9:5c:46:15:28:64:
                    69:2c:26:09:a4:d4:63:2a:97:39:44:0c:65:02:9f:
                    82:eb:c3:e0:df:ce:4e:26:14:a9:ab:4e:84:ac:0a:
                    e9:cd:da:b6:68:40:67:2e:2b:2d:52:bd:47:67:ca:
                    85:12:c8:b9:9b:f0:86:56:21:ed:04:ad:17:2e:59:
                    9a:ad:7c:46:f8:39:25:78:b2:f5:6d:29:52:5c:9d:
                    2a:7b:25:65:21:34:c5:98:e8:f8:77:18:49:ea:96:
                    d2:40:2a:7d:ae:36:e1:ca:62:e5:7b:64:99:2f:47:
                    ce:fd:35:4d:25:e0:53:a7:34:4d:04:6f:c9:12:3c:
                    f2:c2:0e:34:03:82:53:b9:21:ba:3f:c9:57:27:f9:
                    68:1a:92:94:aa:85:d4:ee:67:cf:18:3c:15:0c:4d:
                    e2:7c:bb:19:7c:7d:6a:6f:aa:c8:90:67:35:14:1c:
                    5e:18:f3:e2:cc:a2:e8:e9:ff:07:fd:49:91:08:c0:
                    d5:ad:d7:e7:b5:24:53:c2:95:25:46:c1:a2:2b:be:
                    37:89:9b:56:d7:47:d4:7e:b3:5d:4b:50:ea:f4:56:
                    96:2c:08:54:56:f2:41:d7:ac:80:4a:1e:84:7e:34:
                    db:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:03:BB:5A:0E:18:3A:22:61:B5:30:E8:43:EE:CF:D8:33:CE:C2:D9
            X509v3 Authority Key Identifier:
                keyid:14:49:0F:D5:91:93:27:76:F2:F5:F6:CF:B3:C5:43:15:50:A0:4F:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/323830343a323331633a373430313a3a2f34382d3438203d3e203631353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:231c:7401::/48

    Signature Algorithm: sha256WithRSAEncryption
         49:d6:17:2c:05:79:c1:36:83:ed:68:ae:cc:fc:2a:2e:e0:67:
         f3:38:6c:4e:27:b9:ee:6a:ed:a3:ea:85:fa:35:90:36:3f:6e:
         f2:e4:80:e1:1a:dd:30:c4:60:d4:2c:64:d1:d2:b6:e4:28:55:
         b9:ad:a8:33:16:38:6d:e2:96:fa:ef:30:11:45:00:fd:41:27:
         b4:42:fc:72:a2:f1:cb:12:9b:bb:04:05:80:ae:bb:36:65:50:
         fb:bc:fe:fb:56:c6:e2:6b:87:b6:bb:80:ad:c6:fb:b7:a8:f0:
         dc:86:18:92:80:5b:6e:af:55:eb:f4:39:63:84:c1:0c:8f:30:
         ab:6f:6e:ee:95:3e:23:bf:68:1b:8e:c7:2c:ff:42:29:cf:7c:
         ee:cc:79:7c:88:9d:cc:5c:76:2f:aa:f3:98:f2:a9:18:e2:b8:
         2f:57:5a:83:e9:43:cb:37:7f:e2:48:e5:9c:e9:13:e1:f8:9e:
         37:8d:c8:3c:9f:8e:6b:06:99:1e:8a:90:a0:c8:a8:a5:5c:03:
         4e:df:6b:d9:e9:8e:96:2a:3e:99:79:6d:73:fd:0e:d6:51:0d:
         e1:8a:84:2a:bc:f9:0c:dc:e3:0a:dc:90:64:f2:67:80:7e:c6:
         46:17:96:4c:a9:b4:57:53:b1:46:3b:14:51:1f:0e:10:77:12:
         50:85:47:de
-----BEGIN CERTIFICATE-----
MIIHTDCCBjSgAwIBAgIUBuW+SqFftvMyT5vJPMEmYKGI7MIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQ0OTBGRDU5MTkzMjc3NkYyRjVGNkNGQjNDNTQzMTU1
MEEwNEY2MjAeFw0yNTAyMDExMjQxMDRaFw0yNjAxMzExMjQ2MDRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkIyQThCMjAwNjM5QzJBNjJF
NjFDMUJFQjIwOERFNUMzNEY3RDk1NDg0MTEwNkE5NUM0NjE1Mjg2NDY5MkMyNjA5
QTRENDYzMkE5NzM5NDQwQzY1MDI5RjgyRUJDM0UwREZDRTRFMjYxNEE5QUI0RTg0
QUMwQUU5Q0REQUI2Njg0MDY3MkUyQjJENTJCRDQ3NjdDQTg1MTJDOEI5OUJGMDg2
NTYyMUVEMDRBRDE3MkU1OTlBQUQ3QzQ2RjgzOTI1NzhCMkY1NkQyOTUyNUM5RDJB
N0IyNTY1MjEzNEM1OThFOEY4NzcxODQ5RUE5NkQyNDAyQTdEQUUzNkUxQ0E2MkU1
N0I2NDk5MkY0N0NFRkQzNTREMjVFMDUzQTczNDREMDQ2RkM5MTIzQ0YyQzIwRTM0
MDM4MjUzQjkyMUJBM0ZDOTU3MjdGOTY4MUE5Mjk0QUE4NUQ0RUU2N0NGMTgzQzE1
MEM0REUyN0NCQjE5N0M3RDZBNkZBQUM4OTA2NzM1MTQxQzVFMThGM0UyQ0NBMkU4
RTlGRjA3RkQ0OTkxMDhDMEQ1QUREN0U3QjUyNDUzQzI5NTI1NDZDMUEyMkJCRTM3
ODk5QjU2RDc0N0Q0N0VCMzVENEI1MEVBRjQ1Njk2MkMwODU0NTZGMjQxRDdBQzgw
NEExRTg0N0UzNERCN0QwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAuyqLIAY5wqYuYcG+sgjeXDT32VSEEQapXEYVKGRpLCYJpNRjKpc5
RAxlAp+C68Pg385OJhSpq06ErArpzdq2aEBnListUr1HZ8qFEsi5m/CGViHtBK0X
LlmarXxG+DkleLL1bSlSXJ0qeyVlITTFmOj4dxhJ6pbSQCp9rjbhymLle2SZL0fO
/TVNJeBTpzRNBG/JEjzywg40A4JTuSG6P8lXJ/loGpKUqoXU7mfPGDwVDE3ifLsZ
fH1qb6rIkGc1FBxeGPPizKLo6f8H/UmRCMDVrdfntSRTwpUlRsGiK743iZtW10fU
frNdS1Dq9FaWLAhUVvJB16yASh6EfjTbfQIDAQABo4ICWjCCAlYwHQYDVR0OBBYE
FBQDu1oOGDoiYbUw6EPuz9gzzsLZMB8GA1UdIwQYMBaAFBRJD9WRkyd28vX2z7PF
QxVQoE9iMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNFTlBEMkhld1E3NjRx
dFpOV3ZaNnRXeTd1TkJTelJrTlRNSmRqMThSYVBkLzEvMTQ0OTBGRDU5MTkzMjc3
NkYyRjVGNkNGQjNDNTQzMTU1MEEwNEY2Mi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8xNDQ5MEZENTkxOTMyNzc2RjJGNUY2Q0ZCM0M1NDMxNTUwQTA0
RjYyLmNlcjCBtAYIKwYBBQUHAQsEgacwgaQwgaEGCCsGAQUFBzALhoGUcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zRU5QRDJIZXdRNzY0cXRaTld2
WjZ0V3k3dU5CU3pSa05UTUpkajE4UmFQZC8xLzMyMzgzMDM0M2EzMjMzMzE2MzNh
MzczNDMwMzEzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNjMxMzUzOTMxLnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcAKAQjHHQBMA0GCSqGSIb3DQEBCwUAA4IBAQBJ1hcsBXnBNoPtaK7M/Cou
4GfzOGxOJ7nuau2j6oX6NZA2P27y5IDhGt0wxGDULGTR0rbkKFW5ragzFjht4pb6
7zARRQD9QSe0QvxyovHLEpu7BAWArrs2ZVD7vP77Vsbia4e2u4Ctxvu3qPDchhiS
gFtur1Xr9DljhMEMjzCrb27ulT4jv2gbjscs/0Ipz3zuzHl8iJ3MXHYvqvOY8qkY
4rgvV1qD6UPLN3/iSOWc6RPh+J43jcg8n45rBpkeipCgyKilXANO32vZ6Y6WKj6Z
eW1z/Q7WUQ3hioQqvPkM3OMK3JBk8meAfsZGF5ZMqbRXU7FGOxRRHw4QdxJQhUfe
-----END CERTIFICATE-----
Generated at Wed Apr 9 00:12:53 2025 by rpki-client