Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/0/323830343a326465383a363130303a3a2f34302d3430203d3e20323635333131.roa
File:                     323830343a326465383a363130303a3a2f34302d3430203d3e20323635333131.roa (raw, json)
Hash identifier:          S6XUrzM0PFgySMnPNcL0YGB2gPthGr3E/Vy7XJP+cEM=
Subject key identifier:   33:7B:23:B8:58:7C:0E:81:11:97:5D:39:62:E7:24:0F:3D:4A:C9:4A
Certificate issuer:       /CN=14DAB675B77AC194533C86DBFBAF31C52FE203FB
Certificate serial:       4242BCFE8C605E3B83021CA70D78D92177DE9785
Authority key identifier: 14:DA:B6:75:B7:7A:C1:94:53:3C:86:DB:FB:AF:31:C5:2F:E2:03:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/14DAB675B77AC194533C86DBFBAF31C52FE203FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/0/323830343a326465383a363130303a3a2f34302d3430203d3e20323635333131.roa
Signing time:             Mon 25 Mar 2024 12:13:08 +0000
ROA not before:           Mon 25 Mar 2024 12:08:08 +0000
ROA not after:            Mon 24 Mar 2025 12:13:08 +0000
asID:                     265311
IP address blocks:        2804:2de8:6100::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:42:bc:fe:8c:60:5e:3b:83:02:1c:a7:0d:78:d9:21:77:de:97:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14DAB675B77AC194533C86DBFBAF31C52FE203FB
        Validity
            Not Before: Mar 25 12:08:08 2024 GMT
            Not After : Mar 24 12:13:08 2025 GMT
        Subject: CN=337B23B8587C0E8111975D3962E7240F3D4AC94A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f6:b6:63:47:6f:45:14:f7:37:34:8b:e8:a5:
                    52:f6:d4:a4:2c:07:c2:ba:22:ac:99:de:5d:c1:bd:
                    24:b5:54:3b:4f:d3:92:b6:1b:d1:d5:f5:8b:f2:d9:
                    7b:59:22:5d:e3:8e:fd:29:92:5e:da:af:8e:dc:fd:
                    0f:8c:b4:6e:ab:56:2b:2f:1b:77:52:80:50:3e:8c:
                    85:bf:88:db:ce:38:dc:14:a6:b4:50:b8:b7:eb:39:
                    3e:d5:67:53:55:0d:ac:84:3d:57:f8:20:a5:7c:c7:
                    a7:b0:ad:d8:f3:87:16:70:bb:f1:3a:91:90:b0:99:
                    b9:86:c1:87:38:d8:ea:60:9d:80:ce:32:25:10:b8:
                    d9:f6:6d:99:9d:af:70:49:ec:2b:a0:c0:b5:7c:94:
                    3d:d1:06:f3:01:64:78:bc:75:eb:9e:0b:10:15:3c:
                    c8:fd:28:21:6b:25:51:56:69:92:9f:14:b0:f0:f7:
                    48:ea:a3:16:4f:42:17:4c:18:65:0a:51:34:c1:12:
                    25:fd:0e:2a:9d:bf:3a:42:ad:64:cd:ab:2e:d3:80:
                    58:22:dc:1d:2a:2a:bd:7f:48:c3:89:db:29:68:20:
                    10:e3:b0:78:c3:0d:86:fe:a9:34:65:04:0d:05:5b:
                    45:f5:0e:dd:55:23:cf:99:ce:ae:36:5a:2f:74:8f:
                    b1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:7B:23:B8:58:7C:0E:81:11:97:5D:39:62:E7:24:0F:3D:4A:C9:4A
            X509v3 Authority Key Identifier:
                keyid:14:DA:B6:75:B7:7A:C1:94:53:3C:86:DB:FB:AF:31:C5:2F:E2:03:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/0/14DAB675B77AC194533C86DBFBAF31C52FE203FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/14DAB675B77AC194533C86DBFBAF31C52FE203FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/0/323830343a326465383a363130303a3a2f34302d3430203d3e20323635333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2de8:6100::/40

    Signature Algorithm: sha256WithRSAEncryption
         73:58:4a:24:a1:1e:9f:dd:c6:a7:e8:50:89:c2:66:21:57:b3:
         0f:78:09:3f:ab:3c:cf:9e:43:8c:09:89:22:20:34:88:3e:a0:
         31:1e:d0:d2:74:14:00:9c:b2:1d:bc:4d:ab:e6:a7:c8:0a:66:
         20:e9:7d:83:a4:1d:94:a9:3a:e4:ee:94:32:2b:ca:c6:39:b7:
         d6:8e:96:5d:a8:28:36:8a:be:ee:59:5f:05:ee:ba:27:fb:f3:
         42:3f:b2:84:3f:c0:46:45:75:d9:d8:d6:db:80:af:56:9d:69:
         11:14:1b:4a:38:89:1e:72:ca:08:cc:62:a4:33:63:19:89:05:
         4e:41:eb:77:6e:2c:43:02:33:9c:37:c0:d4:d8:41:2a:50:ab:
         31:31:4c:e6:8e:58:78:ba:78:24:8a:f5:a2:28:7f:71:69:09:
         76:f2:66:1e:d2:87:d2:54:b4:47:d2:cf:67:3b:cb:61:09:07:
         0c:d1:1e:fa:d4:f2:a0:72:0c:ed:ef:fd:7c:a3:e6:d2:14:a8:
         45:3c:0a:ad:a6:e9:f0:7d:61:d9:0d:cd:28:1f:f1:09:1f:39:
         dd:2c:ad:77:46:6c:bc:44:9b:d1:44:d0:11:c0:19:02:57:c9:
         ca:f9:ad:95:38:51:d3:72:3f:95:98:41:5a:7f:03:d2:da:37:
         be:4c:ac:cd
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUQkK8/oxgXjuDAhynDXjZIXfel4UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTREQUI2NzVCNzdBQzE5NDUzM0M4NkRCRkJBRjMxQzUy
RkUyMDNGQjAeFw0yNDAzMjUxMjA4MDhaFw0yNTAzMjQxMjEzMDhaMDMxMTAvBgNV
BAMTKDMzN0IyM0I4NTg3QzBFODExMTk3NUQzOTYyRTcyNDBGM0Q0QUM5NEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/9rZjR29FFPc3NIvopVL21KQs
B8K6IqyZ3l3BvSS1VDtP05K2G9HV9Yvy2XtZIl3jjv0pkl7ar47c/Q+MtG6rVisv
G3dSgFA+jIW/iNvOONwUprRQuLfrOT7VZ1NVDayEPVf4IKV8x6ewrdjzhxZwu/E6
kZCwmbmGwYc42OpgnYDOMiUQuNn2bZmdr3BJ7CugwLV8lD3RBvMBZHi8deueCxAV
PMj9KCFrJVFWaZKfFLDw90jqoxZPQhdMGGUKUTTBEiX9DiqdvzpCrWTNqy7TgFgi
3B0qKr1/SMOJ2yloIBDjsHjDDYb+qTRlBA0FW0X1Dt1VI8+Zzq42Wi90j7F7AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUM3sjuFh8DoERl105YuckDz1KyUowHwYDVR0j
BBgwFoAUFNq2dbd6wZRTPIbb+68xxS/iA/swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0h1bk5yVXFOd1RRZ2ZTdU14U0g2UDd0WmJUdlpDeWRBRmZGenRTQ2R1
aHUvMC8xNERBQjY3NUI3N0FDMTk0NTMzQzg2REJGQkFGMzFDNTJGRTIwM0ZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzE0REFCNjc1Qjc3QUMxOTQ1
MzNDODZEQkZCQUYzMUM1MkZFMjAzRkIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNIdW5OclVxTndUUWdmU3VNeFNINlA3dFpiVHZaQ3lkQUZmRnp0U0NkdWh1LzAv
MzIzODMwMzQzYTMyNjQ2NTM4M2EzNjMxMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzNTMzMzEzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgELehhMA0GCSqGSIb3DQEBCwUA
A4IBAQBzWEokoR6f3can6FCJwmYhV7MPeAk/qzzPnkOMCYkiIDSIPqAxHtDSdBQA
nLIdvE2r5qfICmYg6X2DpB2UqTrk7pQyK8rGObfWjpZdqCg2ir7uWV8F7ron+/NC
P7KEP8BGRXXZ2NbbgK9WnWkRFBtKOIkecsoIzGKkM2MZiQVOQet3bixDAjOcN8DU
2EEqUKsxMUzmjlh4ungkivWiKH9xaQl28mYe0ofSVLRH0s9nO8thCQcM0R761PKg
cgzt7/18o+bSFKhFPAqtpunwfWHZDc0oH/EJHzndLK13Rmy8RJvRRNARwBkCV8nK
+a2VOFHTcj+VmEFafwPS2je+TKzN
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:56:14 2025 by rpki-client