Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/2/323830343a3265383a323a3a2f34382d3438203d3e20323632383437.roa
File:                     323830343a3265383a323a3a2f34382d3438203d3e20323632383437.roa (raw, json)
Hash identifier:          RMy67dCsTgSsZ3lp/D4183VMjnStPnIBRhX+2ETyoaM=
Subject key identifier:   66:33:69:C7:D6:0D:5A:89:84:5A:33:EA:BA:8D:6C:AC:DB:07:DE:7C
Certificate issuer:       /CN=1E2E6ED960A6A353DC84BE7F178278337B3007FC
Certificate serial:       18C7ED37CB6C0FA9B2C2AF2C83DAEE3CD1EB2F91
Authority key identifier: 1E:2E:6E:D9:60:A6:A3:53:DC:84:BE:7F:17:82:78:33:7B:30:07:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E2E6ED960A6A353DC84BE7F178278337B3007FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/2/323830343a3265383a323a3a2f34382d3438203d3e20323632383437.roa
Signing time:             Thu 04 Apr 2024 16:12:36 +0000
ROA not before:           Thu 04 Apr 2024 16:07:36 +0000
ROA not after:            Thu 03 Apr 2025 16:12:36 +0000
asID:                     262847
IP address blocks:        2804:2e8:2::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:c7:ed:37:cb:6c:0f:a9:b2:c2:af:2c:83:da:ee:3c:d1:eb:2f:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E2E6ED960A6A353DC84BE7F178278337B3007FC
        Validity
            Not Before: Apr  4 16:07:36 2024 GMT
            Not After : Apr  3 16:12:36 2025 GMT
        Subject: CN=663369C7D60D5A89845A33EABA8D6CACDB07DE7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:03:76:a1:53:0e:10:85:16:27:e1:d1:cd:c4:
                    d7:73:84:5f:2a:3d:cb:5b:94:6b:57:ee:0e:26:8e:
                    4b:42:f9:ef:e8:5c:d4:46:75:07:54:3c:6b:89:66:
                    37:98:ad:53:36:72:7b:fa:ca:76:1d:1a:4e:55:68:
                    79:be:d3:ec:bc:3b:9d:f4:4d:58:db:3e:55:79:3f:
                    6f:e8:d3:07:cf:52:c1:7e:0c:f5:c0:bc:76:4f:da:
                    dc:f5:fc:fb:9d:38:03:c6:f2:4b:66:bb:30:1a:9e:
                    e7:c0:9a:4d:7b:a2:d7:3c:e1:a9:9e:3d:4b:e8:6a:
                    f0:b1:ff:01:4a:a2:28:98:a4:75:a7:69:69:8f:91:
                    8b:09:9d:3f:ac:e6:2d:fd:3b:02:5b:e9:b9:ad:70:
                    8b:1a:70:01:43:58:fa:ed:39:d5:a4:94:38:78:cf:
                    78:45:03:f4:48:e3:eb:43:46:64:49:bf:e6:bf:bb:
                    61:38:35:69:de:2d:6f:21:40:68:36:ee:7f:98:75:
                    5b:e2:19:da:b3:61:20:2c:10:ee:4c:02:47:be:83:
                    32:7b:ce:ab:bc:bc:df:c3:f0:f6:4e:35:6d:c0:5a:
                    ca:42:74:8e:37:2a:7d:1a:fa:2c:85:d9:ba:0f:3e:
                    a9:28:73:95:35:c7:c5:c5:08:83:43:73:1e:98:7b:
                    89:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:33:69:C7:D6:0D:5A:89:84:5A:33:EA:BA:8D:6C:AC:DB:07:DE:7C
            X509v3 Authority Key Identifier:
                keyid:1E:2E:6E:D9:60:A6:A3:53:DC:84:BE:7F:17:82:78:33:7B:30:07:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/2/1E2E6ED960A6A353DC84BE7F178278337B3007FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E2E6ED960A6A353DC84BE7F178278337B3007FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/2/323830343a3265383a323a3a2f34382d3438203d3e20323632383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e8:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:91:8e:8a:f4:2b:9b:6e:b1:78:57:d3:8c:54:07:7b:ec:08:
         1f:14:98:d0:d4:1a:31:e2:0d:1d:0b:af:a3:33:06:22:4e:6f:
         ae:40:e2:bc:10:43:81:fd:18:83:08:c9:38:95:9e:1b:1d:53:
         78:61:99:bd:08:66:e2:9c:0b:8d:7d:ae:ea:e5:5f:81:5e:e9:
         60:cf:c1:f9:69:f7:15:f5:28:98:b9:fd:59:b5:cd:a2:e6:d7:
         af:f8:c4:89:54:10:4f:ba:89:ce:32:b9:0c:60:8d:b8:91:b6:
         a3:7d:ba:4c:1c:b9:d4:3f:07:05:a6:73:90:8c:c8:0b:f4:2d:
         85:f1:b3:57:e7:e1:07:a6:f4:f1:f5:87:c1:a9:26:c5:40:a8:
         28:49:31:40:6a:e1:a6:d4:43:7b:29:57:f3:39:b4:d5:ab:07:
         ad:c7:9d:e3:d8:15:fd:97:77:07:8c:44:7b:5f:56:f5:ef:4b:
         8a:19:02:93:88:02:16:f2:86:42:da:c1:49:f8:2c:4f:3c:53:
         f2:47:b2:50:7c:d3:bf:d8:55:38:48:97:50:83:84:4e:94:48:
         22:5a:4b:5c:a7:77:6f:5c:78:e9:d8:21:e5:ce:25:0e:6e:0d:
         4f:68:e0:9a:ea:69:35:ab:7d:12:db:b7:1b:4f:a9:8d:9f:93:
         d8:3e:c1:98
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgIUGMftN8tsD6mywq8sg9ruPNHrL5EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUUyRTZFRDk2MEE2QTM1M0RDODRCRTdGMTc4Mjc4MzM3
QjMwMDdGQzAeFw0yNDA0MDQxNjA3MzZaFw0yNTA0MDMxNjEyMzZaMDMxMTAvBgNV
BAMTKDY2MzM2OUM3RDYwRDVBODk4NDVBMzNFQUJBOEQ2Q0FDREIwN0RFN0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjA3ahUw4QhRYn4dHNxNdzhF8q
PctblGtX7g4mjktC+e/oXNRGdQdUPGuJZjeYrVM2cnv6ynYdGk5VaHm+0+y8O530
TVjbPlV5P2/o0wfPUsF+DPXAvHZP2tz1/PudOAPG8ktmuzAanufAmk17otc84ame
PUvoavCx/wFKoiiYpHWnaWmPkYsJnT+s5i39OwJb6bmtcIsacAFDWPrtOdWklDh4
z3hFA/RI4+tDRmRJv+a/u2E4NWneLW8hQGg27n+YdVviGdqzYSAsEO5MAke+gzJ7
zqu8vN/D8PZONW3AWspCdI43Kn0a+iyF2boPPqkoc5U1x8XFCINDcx6Ye4m/AgMB
AAGjggJUMIICUDAdBgNVHQ4EFgQUZjNpx9YNWomEWjPquo1srNsH3nwwHwYDVR0j
BBgwFoAUHi5u2WCmo1PchL5/F4J4M3swB/wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2JBYmJaNng1RnJ3QTRKNmFkNjFKZW90d2RZQ3hSM3Z2ZER1VjdoSEdx
QmYvMi8xRTJFNkVEOTYwQTZBMzUzREM4NEJFN0YxNzgyNzgzMzdCMzAwN0ZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFFMkU2RUQ5NjBBNkEzNTNE
Qzg0QkU3RjE3ODI3ODMzN0IzMDA3RkMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNiQWJiWjZ4NUZyd0E0SjZhZDYxSmVvdHdkWUN4UjN2dmREdVY3aEhHcUJmLzIv
MzIzODMwMzQzYTMyNjUzODNhMzIzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM2
MzIzODM0Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUH
AQcBAf8EEzARMA8EAgACMAkDBwAoBALoAAIwDQYJKoZIhvcNAQELBQADggEBABOR
jor0K5tusXhX04xUB3vsCB8UmNDUGjHiDR0Lr6MzBiJOb65A4rwQQ4H9GIMIyTiV
nhsdU3hhmb0IZuKcC419rurlX4Fe6WDPwflp9xX1KJi5/Vm1zaLm16/4xIlUEE+6
ic4yuQxgjbiRtqN9ukwcudQ/BwWmc5CMyAv0LYXxs1fn4Qem9PH1h8GpJsVAqChJ
MUBq4abUQ3spV/M5tNWrB63HnePYFf2XdweMRHtfVvXvS4oZApOIAhbyhkLawUn4
LE88U/JHslB807/YVThIl1CDhE6USCJaS1ynd29ceOnYIeXOJQ5uDU9o4JrqaTWr
fRLbtxtPqY2fk9g+wZg=
-----END CERTIFICATE-----
Generated at Wed Apr 9 00:34:27 2025 by rpki-client