Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Yjd1zQqZnsGutBd7sT1bxQTg43sNm1Q68yATve1Qegn/0/323830343a373363303a3a2f33322d3333203d3e20323730393335.roa
File:                     323830343a373363303a3a2f33322d3333203d3e20323730393335.roa (raw, json)
Hash identifier:          hYeM7f83hWHJfL5Gt7DFxDtK7ZNr3rfFV5KKPzhCFpM=
Subject key identifier:   FF:4A:31:D2:B6:A1:8B:0B:33:FD:97:5F:55:7E:D6:35:B9:13:C5:4D
Certificate issuer:       /CN=F2CB4D8C555C5C75560EAC12733A3547001E9332
Certificate serial:       1AA7CA2547AD5A36717FB9B4C9903FB0E1C71E39
Authority key identifier: F2:CB:4D:8C:55:5C:5C:75:56:0E:AC:12:73:3A:35:47:00:1E:93:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2CB4D8C555C5C75560EAC12733A3547001E9332.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Yjd1zQqZnsGutBd7sT1bxQTg43sNm1Q68yATve1Qegn/0/323830343a373363303a3a2f33322d3333203d3e20323730393335.roa
Signing time:             Tue 31 Oct 2023 21:02:00 +0000
ROA not before:           Tue 31 Oct 2023 20:57:00 +0000
ROA not after:            Tue 29 Oct 2024 21:02:00 +0000
asID:                     270935
IP address blocks:        2804:73c0::/32 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:a7:ca:25:47:ad:5a:36:71:7f:b9:b4:c9:90:3f:b0:e1:c7:1e:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2CB4D8C555C5C75560EAC12733A3547001E9332
        Validity
            Not Before: Oct 31 20:57:00 2023 GMT
            Not After : Oct 29 21:02:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d2:c2:37:eb:f9:e6:b6:81:05:e5:1c:0f:2d:
                    da:21:88:3d:11:ce:dd:06:30:6e:69:ad:98:b1:99:
                    d2:d5:5b:84:7e:ca:fe:cb:54:f0:ab:53:db:ca:a4:
                    cc:56:e6:37:cb:58:7a:b7:8a:b0:de:19:79:55:8c:
                    f5:8b:a1:05:a0:1e:01:1c:b4:2a:a9:a9:2b:24:20:
                    a3:95:4b:4d:47:35:f3:60:64:b0:5a:78:e7:a4:28:
                    3b:43:86:61:f5:bc:c5:15:8c:3a:cf:f0:93:9d:a1:
                    82:79:62:38:c5:ff:45:5b:b2:22:27:64:70:e9:a7:
                    15:7e:89:05:f1:23:85:ac:fa:a2:a2:f2:fa:3a:89:
                    e4:bd:2f:a4:08:4b:3d:f0:04:8a:52:44:29:75:e9:
                    89:04:74:bb:c9:28:ee:43:0e:72:dd:2a:23:ca:f1:
                    3a:06:e2:0e:21:58:b1:f2:43:d4:ce:19:a9:29:58:
                    00:f4:e0:73:83:59:5d:2f:e6:d2:32:af:0a:dd:62:
                    85:5d:3f:e7:f0:dc:f6:d1:4b:21:ff:5a:88:d8:40:
                    16:01:d3:d6:83:cc:39:ef:46:82:68:09:f1:40:e1:
                    c5:ee:07:ca:97:83:3b:e8:27:02:16:a4:e1:2a:75:
                    66:68:0a:e1:1b:fe:ae:19:12:0d:29:87:df:ff:20:
                    7a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:4A:31:D2:B6:A1:8B:0B:33:FD:97:5F:55:7E:D6:35:B9:13:C5:4D
            X509v3 Authority Key Identifier:
                keyid:F2:CB:4D:8C:55:5C:5C:75:56:0E:AC:12:73:3A:35:47:00:1E:93:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Yjd1zQqZnsGutBd7sT1bxQTg43sNm1Q68yATve1Qegn/0/F2CB4D8C555C5C75560EAC12733A3547001E9332.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2CB4D8C555C5C75560EAC12733A3547001E9332.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Yjd1zQqZnsGutBd7sT1bxQTg43sNm1Q68yATve1Qegn/0/323830343a373363303a3a2f33322d3333203d3e20323730393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:73c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:79:a2:68:0d:b0:ab:c5:77:79:f0:2c:7d:e7:9c:54:d0:9a:
         12:79:34:1d:76:b5:f4:28:eb:01:9d:f3:16:fe:38:75:b2:10:
         41:fd:1e:66:bc:12:fd:50:b1:c9:a6:2e:14:d5:b2:28:4c:1a:
         fa:ed:ed:f9:6e:ed:97:1f:e1:a1:85:d5:86:5c:97:31:d4:61:
         29:a9:2a:b2:e0:ef:65:ec:84:19:1f:18:6c:c0:1f:6f:8e:a7:
         2c:c8:35:f2:39:67:17:f7:68:40:d6:9d:ce:ca:33:ed:b5:2d:
         06:0d:7f:38:d9:2b:73:e4:59:f6:f2:2f:4c:a6:13:67:c2:70:
         9e:8e:7a:f4:ff:8b:59:2d:9a:a6:3e:62:42:e5:5e:c7:0b:30:
         eb:ab:c4:28:f0:6b:09:61:11:26:5c:1a:2b:b6:f7:f7:3c:83:
         fc:b2:b0:e5:7c:b0:d4:ff:1b:b2:62:35:2a:71:65:7e:71:f4:
         b7:96:35:f0:34:14:24:8f:05:ae:2c:f0:bf:4f:7d:73:a2:c7:
         fe:89:e6:a0:45:55:dc:97:f3:d4:14:03:c4:b1:49:a7:3d:eb:
         e9:6e:46:a0:bd:6f:76:59:d4:8e:90:a4:55:37:d8:e7:40:58:
         f2:4e:63:56:34:76:1c:da:72:15:cc:4c:ec:76:f0:87:39:07:
         3e:c7:a1:3e
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUGqfKJUetWjZxf7m0yZA/sOHHHjkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjJDQjREOEM1NTVDNUM3NTU2MEVBQzEyNzMzQTM1NDcw
MDFFOTMzMjAeFw0yMzEwMzEyMDU3MDBaFw0yNDEwMjkyMTAyMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkNEMkMyMzdFQkY5RTZCNjgx
MDVFNTFDMEYyRERBMjE4ODNEMTFDRUREMDYzMDZFNjlBRDk4QjE5OUQyRDU1Qjg0
N0VDQUZFQ0I1NEYwQUI1M0RCQ0FBNENDNTZFNjM3Q0I1ODdBQjc4QUIwREUxOTc5
NTU4Q0Y1OEJBMTA1QTAxRTAxMUNCNDJBQTlBOTJCMjQyMEEzOTU0QjRENDczNUYz
NjA2NEIwNUE3OEU3QTQyODNCNDM4NjYxRjVCQ0M1MTU4QzNBQ0ZGMDkzOURBMTgy
Nzk2MjM4QzVGRjQ1NUJCMjIyMjc2NDcwRTlBNzE1N0U4OTA1RjEyMzg1QUNGQUEy
QTJGMkZBM0E4OUU0QkQyRkE0MDg0QjNERjAwNDhBNTI0NDI5NzVFOTg5MDQ3NEJC
QzkyOEVFNDMwRTcyREQyQTIzQ0FGMTNBMDZFMjBFMjE1OEIxRjI0M0Q0Q0UxOUE5
Mjk1ODAwRjRFMDczODM1OTVEMkZFNkQyMzJBRjBBREQ2Mjg1NUQzRkU3RjBEQ0Y2
RDE0QjIxRkY1QTg4RDg0MDE2MDFEM0Q2ODNDQzM5RUY0NjgyNjgwOUYxNDBFMUM1
RUUwN0NBOTc4MzNCRTgyNzAyMTZBNEUxMkE3NTY2NjgwQUUxMUJGRUFFMTkxMjBE
Mjk4N0RGRkYyMDdBRjcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAvNLCN+v55raBBeUcDy3aIYg9Ec7dBjBuaa2YsZnS1VuEfsr+y1Tw
q1PbyqTMVuY3y1h6t4qw3hl5VYz1i6EFoB4BHLQqqakrJCCjlUtNRzXzYGSwWnjn
pCg7Q4Zh9bzFFYw6z/CTnaGCeWI4xf9FW7IiJ2Rw6acVfokF8SOFrPqiovL6Oonk
vS+kCEs98ASKUkQpdemJBHS7ySjuQw5y3SojyvE6BuIOIVix8kPUzhmpKVgA9OBz
g1ldL+bSMq8K3WKFXT/n8Nz20Ush/1qI2EAWAdPWg8w570aCaAnxQOHF7gfKl4M7
6CcCFqThKnVmaArhG/6uGRINKYff/yB69wIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FP9KMdK2oYsLM/2XX1V+1jW5E8VNMB8GA1UdIwQYMBaAFPLLTYxVXFx1Vg6sEnM6
NUcAHpMyMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNZamQxelFxWm5zR3V0
QmQ3c1QxYnhRVGc0M3NObTFRNjh5QVR2ZTFRZWduLzAvRjJDQjREOEM1NTVDNUM3
NTU2MEVBQzEyNzMzQTM1NDcwMDFFOTMzMi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9GMkNCNEQ4QzU1NUM1Qzc1NTYwRUFDMTI3MzNBMzU0NzAwMUU5
MzMyLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zWWpkMXpRcVpuc0d1dEJkN3NU
MWJ4UVRnNDNzTm0xUTY4eUFUdmUxUWVnbi8wLzMyMzgzMDM0M2EzNzMzNjMzMDNh
M2EyZjMzMzIyZDMzMzMyMDNkM2UyMDMyMzczMDM5MzMzNS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
c8AwDQYJKoZIhvcNAQELBQADggEBAE95omgNsKvFd3nwLH3nnFTQmhJ5NB12tfQo
6wGd8xb+OHWyEEH9Hma8Ev1QscmmLhTVsihMGvrt7flu7Zcf4aGF1YZclzHUYSmp
KrLg72XshBkfGGzAH2+OpyzINfI5Zxf3aEDWnc7KM+21LQYNfzjZK3PkWfbyL0ym
E2fCcJ6OevT/i1ktmqY+YkLlXscLMOurxCjwawlhESZcGiu29/c8g/yysOV8sNT/
G7JiNSpxZX5x9LeWNfA0FCSPBa4s8L9PfXOix/6J5qBFVdyX89QUA8SxSac96+lu
RqC9b3ZZ1I6QpFU32OdAWPJOY1Y0dhzachXMTOx28Ic5Bz7HoT4=
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:35:11 2025 by rpki-client