Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/0/323830343a316539343a3a2f33322d3334203d3e20323634343337.roa
File:                     323830343a316539343a3a2f33322d3334203d3e20323634343337.roa (raw, json)
Hash identifier:          JvwThHZkLONLOvmjoit+n8f+EyO15AL8FrLD1wRM668=
Subject key identifier:   1A:48:BC:9C:2A:0B:FC:58:06:02:E7:E0:A5:EA:4F:86:B2:C1:A4:C6
Certificate issuer:       /CN=4AA55836E6525963A361EEE07C0C7F8FA6B8CB14
Certificate serial:       4AFA20DC7B393B9B80DE73AC8336C686A378D62A
Authority key identifier: 4A:A5:58:36:E6:52:59:63:A3:61:EE:E0:7C:0C:7F:8F:A6:B8:CB:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AA55836E6525963A361EEE07C0C7F8FA6B8CB14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/0/323830343a316539343a3a2f33322d3334203d3e20323634343337.roa
Signing time:             Thu 05 Jan 2023 17:20:18 +0000
ROA not before:           Thu 05 Jan 2023 17:15:18 +0000
ROA not after:            Thu 04 Jan 2024 17:20:18 +0000
asID:                     264437
IP address blocks:        2804:1e94::/32 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:fa:20:dc:7b:39:3b:9b:80:de:73:ac:83:36:c6:86:a3:78:d6:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AA55836E6525963A361EEE07C0C7F8FA6B8CB14
        Validity
            Not Before: Jan  5 17:15:18 2023 GMT
            Not After : Jan  4 17:20:18 2024 GMT
        Subject: CN=1A48BC9C2A0BFC580602E7E0A5EA4F86B2C1A4C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:6b:e2:66:8b:52:71:dd:05:06:4c:ee:f2:d7:
                    39:89:ec:f7:64:08:2b:12:1e:b2:ed:be:03:be:df:
                    a2:25:e4:58:65:e5:1f:83:d4:46:e4:00:8d:e8:27:
                    95:ce:b2:d5:8b:52:9c:5d:58:29:e9:b5:ac:d5:06:
                    7a:19:d0:11:e0:65:af:52:61:3b:87:71:24:bd:6e:
                    b9:a1:99:0d:94:d0:0b:0c:f8:b1:82:e0:4d:f5:ff:
                    d0:7f:96:91:23:50:8c:91:72:a6:78:37:39:ef:a1:
                    49:86:f1:87:52:09:cc:c7:10:50:78:53:f0:4e:fc:
                    d6:f6:e2:eb:7d:39:1f:47:c0:b9:e0:1c:48:5d:c5:
                    0a:79:08:e7:4b:ce:a9:41:be:1f:4a:f3:7a:a3:0d:
                    0a:98:0a:1f:1d:13:c5:0e:4a:3b:38:99:3e:7e:e5:
                    61:7a:0b:5a:da:26:af:35:ce:8d:6e:c1:13:77:26:
                    b3:75:eb:fb:6e:c4:5f:5c:a8:25:87:cf:95:78:fc:
                    1b:02:3e:b0:bd:06:6d:88:96:46:6f:02:75:0a:ee:
                    b4:1a:56:17:a0:3f:da:b7:2c:0c:42:09:33:42:66:
                    84:22:19:a3:86:eb:86:04:a0:09:83:21:9b:05:3b:
                    40:81:ff:1c:f6:f4:62:ff:ac:39:bc:79:8f:8c:4e:
                    e9:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:48:BC:9C:2A:0B:FC:58:06:02:E7:E0:A5:EA:4F:86:B2:C1:A4:C6
            X509v3 Authority Key Identifier:
                keyid:4A:A5:58:36:E6:52:59:63:A3:61:EE:E0:7C:0C:7F:8F:A6:B8:CB:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/0/4AA55836E6525963A361EEE07C0C7F8FA6B8CB14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AA55836E6525963A361EEE07C0C7F8FA6B8CB14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/0/323830343a316539343a3a2f33322d3334203d3e20323634343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e94::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:cf:ca:a5:09:36:9d:31:6a:01:d2:9d:5d:61:a9:91:c3:5f:
         30:dd:af:f5:24:17:91:6e:d0:31:4f:e1:9a:fc:2d:42:59:8e:
         e6:0b:0c:f1:01:1a:70:5b:8d:e7:be:c8:9e:45:23:66:54:87:
         71:7a:3c:a3:9f:7d:a6:bd:10:ad:6d:e7:6e:71:8b:d8:ef:c4:
         fb:4d:5e:af:39:84:02:26:ac:3d:6f:f2:40:49:8b:4a:6a:71:
         ef:f5:42:46:03:4f:d7:ad:93:70:bc:11:e9:7e:6f:3d:bb:b2:
         8c:d4:b7:7c:5a:cf:78:ce:fb:cb:ad:72:01:19:23:82:a9:be:
         b1:95:03:7f:53:23:b5:aa:61:53:32:d3:31:57:46:5e:8e:70:
         9e:4d:2c:d1:7a:dc:81:48:30:1f:f7:c7:a6:b5:7c:50:54:e8:
         f4:74:dd:23:b2:5d:a5:a2:ec:99:d8:36:8a:87:39:6e:df:cc:
         6a:38:91:14:bf:1c:0e:26:01:c0:5d:78:2f:08:ad:9d:2f:83:
         2e:b5:3e:2e:bf:26:d1:7c:ed:88:2c:ba:f0:be:5e:e9:c3:83:
         62:33:6e:35:6a:4a:16:49:cd:d0:e3:51:5e:bb:8b:37:67:e6:
         f2:3c:ab:92:1e:92:c4:35:43:f0:71:72:ed:f1:e9:87:93:41:
         d7:ae:58:0b
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUSvog3Hs5O5uA3nOsgzbGhqN41iowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEFBNTU4MzZFNjUyNTk2M0EzNjFFRUUwN0MwQzdGOEZB
NkI4Q0IxNDAeFw0yMzAxMDUxNzE1MThaFw0yNDAxMDQxNzIwMThaMDMxMTAvBgNV
BAMTKDFBNDhCQzlDMkEwQkZDNTgwNjAyRTdFMEE1RUE0Rjg2QjJDMUE0QzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDea+Jmi1Jx3QUGTO7y1zmJ7Pdk
CCsSHrLtvgO+36Il5Fhl5R+D1EbkAI3oJ5XOstWLUpxdWCnptazVBnoZ0BHgZa9S
YTuHcSS9brmhmQ2U0AsM+LGC4E31/9B/lpEjUIyRcqZ4NznvoUmG8YdSCczHEFB4
U/BO/Nb24ut9OR9HwLngHEhdxQp5COdLzqlBvh9K83qjDQqYCh8dE8UOSjs4mT5+
5WF6C1raJq81zo1uwRN3JrN16/tuxF9cqCWHz5V4/BsCPrC9Bm2IlkZvAnUK7rQa
VhegP9q3LAxCCTNCZoQiGaOG64YEoAmDIZsFO0CB/xz29GL/rDm8eY+MTulZAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUGki8nCoL/FgGAufgpepPhrLBpMYwHwYDVR0j
BBgwFoAUSqVYNuZSWWOjYe7gfAx/j6a4yxQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1VLZ3FXYXNZV2NXY2tFM2QxWkFObUw3RVRVTm1LOGZ5czRLTnVSVUJt
TDcvMC80QUE1NTgzNkU2NTI1OTYzQTM2MUVFRTA3QzBDN0Y4RkE2QjhDQjE0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzRBQTU1ODM2RTY1MjU5NjNB
MzYxRUVFMDdDMEM3RjhGQTZCOENCMTQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNVS2dxV2FzWVdjV2NrRTNkMVpBTm1MN0VUVU5tSzhmeXM0S051UlVCbUw3LzAv
MzIzODMwMzQzYTMxNjUzOTM0M2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNjM0
MzQzMzM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQelDANBgkqhkiG9w0BAQsFAAOCAQEAZ8/KpQk2
nTFqAdKdXWGpkcNfMN2v9SQXkW7QMU/hmvwtQlmO5gsM8QEacFuN577InkUjZlSH
cXo8o599pr0QrW3nbnGL2O/E+01erzmEAiasPW/yQEmLSmpx7/VCRgNP162TcLwR
6X5vPbuyjNS3fFrPeM77y61yARkjgqm+sZUDf1MjtaphUzLTMVdGXo5wnk0s0Xrc
gUgwH/fHprV8UFTo9HTdI7JdpaLsmdg2ioc5bt/MajiRFL8cDiYBwF14LwitnS+D
LrU+Lr8m0XztiCy68L5e6cODYjNuNWpKFknN0ONRXruLN2fm8jyrkh6SxDVD8HFy
7fHph5NB165YCw==
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:50:37 2025 by rpki-client