Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/323830343a333336303a666630303a3a2f34302d3430203d3e20323632373235.roa
File:                     323830343a333336303a666630303a3a2f34302d3430203d3e20323632373235.roa (raw, json)
Hash identifier:          GuBCmOrYy36o1dXe9+cEYRVmu99Fx0BgXfkemi2G/k0=
Subject key identifier:   DB:60:D8:3C:DC:22:5F:5D:B0:DE:2F:31:D4:9B:71:05:69:94:B4:1E
Certificate issuer:       /CN=20DE0E6E3D621F83173025848A78216A75E502CC
Certificate serial:       6B6B1F55D36B81D7BF7BA52B74CB005067008443
Authority key identifier: 20:DE:0E:6E:3D:62:1F:83:17:30:25:84:8A:78:21:6A:75:E5:02:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DE0E6E3D621F83173025848A78216A75E502CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/323830343a333336303a666630303a3a2f34302d3430203d3e20323632373235.roa
Signing time:             Mon 11 Nov 2024 21:01:51 +0000
ROA not before:           Mon 11 Nov 2024 20:56:51 +0000
ROA not after:            Mon 10 Nov 2025 21:01:51 +0000
asID:                     262725
IP address blocks:        2804:3360:ff00::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:6b:1f:55:d3:6b:81:d7:bf:7b:a5:2b:74:cb:00:50:67:00:84:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20DE0E6E3D621F83173025848A78216A75E502CC
        Validity
            Not Before: Nov 11 20:56:51 2024 GMT
            Not After : Nov 10 21:01:51 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b1:be:86:fc:76:d4:9a:17:fc:56:8d:44:dd:
                    f4:b0:80:12:41:86:f2:50:a7:d5:95:d5:b7:bf:11:
                    a9:38:c2:0d:ee:01:17:ee:02:aa:dd:18:e7:31:a4:
                    a6:5b:06:04:6f:26:e8:f7:6b:fd:39:b3:52:8a:54:
                    42:ce:ce:f0:d6:fc:94:3a:26:67:2b:0d:54:1c:39:
                    21:dc:fe:79:20:24:51:d1:93:af:b6:f6:39:1d:91:
                    68:18:ba:8d:c9:37:0e:0a:24:09:de:1b:35:28:b9:
                    93:39:4f:17:e9:64:57:7c:c1:cb:7d:67:18:cd:e2:
                    99:ef:22:ae:eb:8c:e0:e3:c3:7b:a3:45:0e:3e:28:
                    6b:73:fd:42:42:ac:bb:74:64:c1:c7:00:0b:90:33:
                    4a:69:d0:43:00:a6:4a:64:46:0b:44:39:af:f3:dc:
                    5d:9c:c3:d8:23:dd:c7:bf:50:c0:97:e2:be:35:87:
                    70:d5:13:2b:51:b1:10:3a:05:75:9e:20:26:7a:8d:
                    db:fb:7c:d8:30:dc:6f:e3:3e:fd:0d:b0:1d:88:d8:
                    b0:07:89:95:a1:c6:cf:cb:89:cd:34:06:6f:60:0b:
                    8d:eb:a8:34:f7:86:8a:a0:4f:81:35:f4:50:0c:46:
                    9c:77:76:bc:ec:6e:e1:56:20:a6:22:61:ba:2b:6e:
                    bd:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:60:D8:3C:DC:22:5F:5D:B0:DE:2F:31:D4:9B:71:05:69:94:B4:1E
            X509v3 Authority Key Identifier:
                keyid:20:DE:0E:6E:3D:62:1F:83:17:30:25:84:8A:78:21:6A:75:E5:02:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/20DE0E6E3D621F83173025848A78216A75E502CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DE0E6E3D621F83173025848A78216A75E502CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/323830343a333336303a666630303a3a2f34302d3430203d3e20323632373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3360:ff00::/40

    Signature Algorithm: sha256WithRSAEncryption
         68:db:c3:d6:68:3c:0a:58:b2:9d:15:1f:80:44:07:6c:cc:50:
         cd:9f:0d:37:7b:81:8d:04:03:6f:7b:4d:0e:94:6e:41:f3:92:
         9b:d6:91:43:59:3e:c6:de:35:48:87:c6:b4:8d:ba:8f:7c:44:
         a8:55:1d:35:20:6c:b2:7b:1f:c8:94:c5:f6:47:c2:67:45:2c:
         66:ce:cb:a0:f3:47:5b:b5:dd:9f:92:9c:c1:90:ef:ff:81:dd:
         10:7d:f3:4a:12:96:0e:e8:a9:1b:4e:94:67:9e:5a:97:dc:0c:
         75:19:54:b6:10:7e:87:1b:39:4a:38:a2:94:71:8e:2a:e1:5a:
         30:08:78:14:7c:91:bb:ed:6b:e9:16:82:8e:c7:3e:98:85:39:
         53:7a:9a:81:cb:d6:88:c5:9d:8e:00:73:9c:86:74:13:27:10:
         52:0d:37:6d:ee:ae:62:4b:ff:85:a4:d8:3b:de:0d:a2:d0:10:
         bf:5d:da:c6:a4:ef:bb:ba:9b:99:08:e8:c9:38:31:83:f7:bd:
         90:88:35:16:0d:24:df:e3:e4:99:3e:6c:ef:5e:73:63:20:10:
         cd:07:ae:1b:51:c4:45:44:d6:36:3f:9b:e0:59:d8:63:cf:f6:
         c0:7a:65:fd:bb:2e:e7:24:ac:0f:a0:08:8b:22:50:e0:a5:05:
         e8:1c:d6:6b
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUa2sfVdNrgde/e6UrdMsAUGcAhEMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjBERTBFNkUzRDYyMUY4MzE3MzAyNTg0OEE3ODIxNkE3
NUU1MDJDQzAeFw0yNDExMTEyMDU2NTFaFw0yNTExMTAyMTAxNTFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjZCMUJFODZGQzc2RDQ5QTE3
RkM1NjhENDREREY0QjA4MDEyNDE4NkYyNTBBN0Q1OTVENUI3QkYxMUE5MzhDMjBE
RUUwMTE3RUUwMkFBREQxOEU3MzFBNEE2NUIwNjA0NkYyNkU4Rjc2QkZEMzlCMzUy
OEE1NDQyQ0VDRUYwRDZGQzk0M0EyNjY3MkIwRDU0MUMzOTIxRENGRTc5MjAyNDUx
RDE5M0FGQjZGNjM5MUQ5MTY4MThCQThEQzkzNzBFMEEyNDA5REUxQjM1MjhCOTkz
Mzk0RjE3RTk2NDU3N0NDMUNCN0Q2NzE4Q0RFMjk5RUYyMkFFRUI4Q0UwRTNDMzdC
QTM0NTBFM0UyODZCNzNGRDQyNDJBQ0JCNzQ2NEMxQzcwMDBCOTAzMzRBNjlEMDQz
MDBBNjRBNjQ0NjBCNDQzOUFGRjNEQzVEOUNDM0Q4MjNEREM3QkY1MEMwOTdFMkJF
MzU4NzcwRDUxMzJCNTFCMTEwM0EwNTc1OUUyMDI2N0E4RERCRkI3Q0Q4MzBEQzZG
RTMzRUZEMERCMDFEODhEOEIwMDc4OTk1QTFDNkNGQ0I4OUNEMzQwNjZGNjAwQjhE
RUJBODM0Rjc4NjhBQTA0RjgxMzVGNDUwMEM0NjlDNzc3NkJDRUM2RUUxNTYyMEE2
MjI2MUJBMkI2RUJERUIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAtrG+hvx21JoX/FaNRN30sIASQYbyUKfVldW3vxGpOMIN7gEX7gKq
3RjnMaSmWwYEbybo92v9ObNSilRCzs7w1vyUOiZnKw1UHDkh3P55ICRR0ZOvtvY5
HZFoGLqNyTcOCiQJ3hs1KLmTOU8X6WRXfMHLfWcYzeKZ7yKu64zg48N7o0UOPihr
c/1CQqy7dGTBxwALkDNKadBDAKZKZEYLRDmv89xdnMPYI93Hv1DAl+K+NYdw1RMr
UbEQOgV1niAmeo3b+3zYMNxv4z79DbAdiNiwB4mVocbPy4nNNAZvYAuN66g094aK
oE+BNfRQDEacd3a87G7hViCmImG6K2696wIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FNtg2DzcIl9dsN4vMdSbcQVplLQeMB8GA1UdIwQYMBaAFCDeDm49Yh+DFzAlhIp4
IWp15QLMMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNLWGthbjFQMXhjN0pO
Smp0UGVMVG1zR0dRdDhpZlJ0VlpQWVR1cmkzTlVSLzAvMjBERTBFNkUzRDYyMUY4
MzE3MzAyNTg0OEE3ODIxNkE3NUU1MDJDQy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8yMERFMEU2RTNENjIxRjgzMTczMDI1ODQ4QTc4MjE2QTc1RTUw
MkNDLmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zS1hrYW4xUDF4YzdKTkpqdFBl
TFRtc0dHUXQ4aWZSdFZaUFlUdXJpM05VUi8wLzMyMzgzMDM0M2EzMzMzMzYzMDNh
NjY2NjMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAzMjM2MzIzNzMyMzUucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgAoBDNg/zANBgkqhkiG9w0BAQsFAAOCAQEAaNvD1mg8CliynRUfgEQH
bMxQzZ8NN3uBjQQDb3tNDpRuQfOSm9aRQ1k+xt41SIfGtI26j3xEqFUdNSBssnsf
yJTF9kfCZ0UsZs7LoPNHW7Xdn5KcwZDv/4HdEH3zShKWDuipG06UZ55al9wMdRlU
thB+hxs5SjiilHGOKuFaMAh4FHyRu+1r6RaCjsc+mIU5U3qagcvWiMWdjgBznIZ0
EycQUg03be6uYkv/haTYO94NotAQv13axqTvu7qbmQjoyTgxg/e9kIg1Fg0k3+Pk
mT5s715zYyAQzQeuG1HERUTWNj+b4FnYY8/2wHpl/bsu5ySsD6AIiyJQ4KUF6BzW
aw==
-----END CERTIFICATE-----