Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3s5f3Zpur4FwYdq7yrX2v1JZUMDZEZfUA9co9QVrkLvp/0/323830343a346634343a3238303a3a2f34312d3431203d3e20323638333136.roa
File:                     323830343a346634343a3238303a3a2f34312d3431203d3e20323638333136.roa (raw, json)
Hash identifier:          Xt4wnxK53GZ0MNLYwF/FHWtoJaNISO58gtVFbFF4J60=
Subject key identifier:   71:5F:CA:CA:F2:3E:F6:65:B4:89:69:23:2A:09:C4:16:E8:30:B2:FF
Certificate issuer:       /CN=6394333A258FBDBBD544DE363E2767998C64BB78
Certificate serial:       4B82A22EDCAC12BF4846CDE313650AEA55B6CC92
Authority key identifier: 63:94:33:3A:25:8F:BD:BB:D5:44:DE:36:3E:27:67:99:8C:64:BB:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6394333A258FBDBBD544DE363E2767998C64BB78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3s5f3Zpur4FwYdq7yrX2v1JZUMDZEZfUA9co9QVrkLvp/0/323830343a346634343a3238303a3a2f34312d3431203d3e20323638333136.roa
Signing time:             Fri 31 May 2024 17:11:27 +0000
ROA not before:           Fri 31 May 2024 17:06:27 +0000
ROA not after:            Fri 30 May 2025 17:11:27 +0000
asID:                     268316
IP address blocks:        2804:4f44:280::/41 maxlen: 41
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:82:a2:2e:dc:ac:12:bf:48:46:cd:e3:13:65:0a:ea:55:b6:cc:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6394333A258FBDBBD544DE363E2767998C64BB78
        Validity
            Not Before: May 31 17:06:27 2024 GMT
            Not After : May 30 17:11:27 2025 GMT
        Subject: CN=715FCACAF23EF665B48969232A09C416E830B2FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:00:f3:0f:38:55:ad:fd:f3:8d:64:10:18:f0:
                    5d:e8:a1:9c:3a:55:5a:bd:69:be:fe:28:9f:50:e1:
                    8d:a6:4c:a6:ad:24:46:f2:27:06:e7:6f:81:ef:f4:
                    a1:91:07:a3:7e:6e:6f:cc:4e:ed:85:f8:74:75:4b:
                    f1:80:49:5a:79:b6:68:a2:8e:95:41:a2:e1:0d:1e:
                    e2:d5:e3:cc:ec:fd:2a:30:3c:a7:e7:e9:b6:9c:c2:
                    b1:b8:df:fd:67:d3:04:db:af:90:7a:30:b2:50:f5:
                    84:92:41:b8:cf:76:b7:f0:96:58:9d:c4:40:72:40:
                    a9:5d:9e:a5:72:ed:04:20:9a:14:6c:68:ec:f0:b9:
                    8a:ee:d8:fb:2b:f4:fe:af:c0:ca:9a:50:1d:23:5f:
                    a5:a9:70:eb:e8:11:32:72:7e:a1:fa:6a:c3:23:50:
                    7a:f2:ba:36:f4:9c:f6:7a:5d:bc:a6:3d:86:62:aa:
                    82:36:93:8f:33:81:f6:49:04:ee:b9:18:c2:e0:27:
                    e7:af:bb:cd:79:ad:59:18:06:ef:1b:38:d7:8c:f4:
                    2c:e4:06:35:2e:d4:3a:d0:e0:11:07:95:c4:d6:1b:
                    30:38:00:58:9d:af:90:0e:d7:a8:43:fd:e6:ca:1f:
                    96:a8:5b:bb:49:b0:d5:8a:fa:ed:6e:56:99:66:16:
                    1a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:5F:CA:CA:F2:3E:F6:65:B4:89:69:23:2A:09:C4:16:E8:30:B2:FF
            X509v3 Authority Key Identifier:
                keyid:63:94:33:3A:25:8F:BD:BB:D5:44:DE:36:3E:27:67:99:8C:64:BB:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3s5f3Zpur4FwYdq7yrX2v1JZUMDZEZfUA9co9QVrkLvp/0/6394333A258FBDBBD544DE363E2767998C64BB78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6394333A258FBDBBD544DE363E2767998C64BB78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3s5f3Zpur4FwYdq7yrX2v1JZUMDZEZfUA9co9QVrkLvp/0/323830343a346634343a3238303a3a2f34312d3431203d3e20323638333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4f44:280::/41

    Signature Algorithm: sha256WithRSAEncryption
         cc:c0:ac:da:8a:7f:cb:bb:2e:32:1d:4f:3a:4e:2e:b9:0d:30:
         50:5c:e6:cb:f3:6a:21:ff:a0:a5:36:84:70:4b:1d:04:b5:f6:
         80:ac:e6:90:76:ac:69:d2:1d:8d:f8:0e:c7:e1:91:0a:f9:d1:
         bd:b3:54:8f:67:36:89:f2:0a:61:2e:d0:4a:7d:65:ac:66:eb:
         4b:eb:c4:14:b0:08:a3:38:b8:39:40:f2:e0:65:38:93:e2:69:
         91:10:68:ab:0a:2a:89:96:fc:23:fe:38:e6:0e:fa:c8:f4:0a:
         8d:01:9c:51:55:40:a8:76:1e:68:99:89:25:ba:e5:7d:41:89:
         8f:c2:94:15:aa:38:29:5f:e0:c8:b6:37:31:fd:0b:25:dc:e7:
         e0:6e:de:21:92:6f:48:c9:a8:43:47:ef:1e:a0:a4:17:9a:fc:
         00:c4:49:eb:51:f1:32:91:a6:18:c1:c5:4f:45:48:f1:05:64:
         27:9a:3c:96:1c:b8:cc:79:9d:53:7c:27:44:06:23:b6:aa:83:
         ca:8b:23:d1:88:ba:39:af:cc:34:96:31:a1:24:1a:11:66:f9:
         63:57:2d:f8:73:ea:92:d3:03:1f:32:e7:7b:45:74:0d:8c:9f:
         84:4a:10:b5:b0:2a:dc:44:08:bb:80:4f:dd:33:10:4a:12:69:
         d4:0d:86:a2
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUS4KiLtysEr9IRs3jE2UK6lW2zJIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDMzM0EyNThGQkRCQkQ1NDRERTM2M0UyNzY3OTk4
QzY0QkI3ODAeFw0yNDA1MzExNzA2MjdaFw0yNTA1MzAxNzExMjdaMDMxMTAvBgNV
BAMTKDcxNUZDQUNBRjIzRUY2NjVCNDg5NjkyMzJBMDlDNDE2RTgzMEIyRkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCAPMPOFWt/fONZBAY8F3ooZw6
VVq9ab7+KJ9Q4Y2mTKatJEbyJwbnb4Hv9KGRB6N+bm/MTu2F+HR1S/GASVp5tmii
jpVBouENHuLV48zs/SowPKfn6bacwrG43/1n0wTbr5B6MLJQ9YSSQbjPdrfwllid
xEByQKldnqVy7QQgmhRsaOzwuYru2Psr9P6vwMqaUB0jX6WpcOvoETJyfqH6asMj
UHryujb0nPZ6XbymPYZiqoI2k48zgfZJBO65GMLgJ+evu815rVkYBu8bONeM9Czk
BjUu1DrQ4BEHlcTWGzA4AFidr5AO16hD/ebKH5aoW7tJsNWK+u1uVplmFhqVAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUcV/KyvI+9mW0iWkjKgnEFugwsv8wHwYDVR0j
BBgwFoAUY5QzOiWPvbvVRN42PidnmYxku3gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3M1ZjNacHVyNEZ3WWRxN3lyWDJ2MUpaVU1EWkVaZlVBOWNvOVFWcmtM
dnAvMC82Mzk0MzMzQTI1OEZCREJCRDU0NERFMzYzRTI3Njc5OThDNjRCQjc4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYzOTQzMzNBMjU4RkJEQkJE
NTQ0REUzNjNFMjc2Nzk5OEM2NEJCNzguY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNzNWYzWnB1cjRGd1lkcTd5clgydjFKWlVNRFpFWmZVQTljbzlRVnJrTHZwLzAv
MzIzODMwMzQzYTM0NjYzNDM0M2EzMjM4MzAzYTNhMmYzNDMxMmQzNDMxMjAzZDNl
MjAzMjM2MzgzMzMxMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwcoBE9EAoAwDQYJKoZIhvcNAQELBQAD
ggEBAMzArNqKf8u7LjIdTzpOLrkNMFBc5svzaiH/oKU2hHBLHQS19oCs5pB2rGnS
HY34DsfhkQr50b2zVI9nNonyCmEu0Ep9Zaxm60vrxBSwCKM4uDlA8uBlOJPiaZEQ
aKsKKomW/CP+OOYO+sj0Co0BnFFVQKh2HmiZiSW65X1BiY/ClBWqOClf4Mi2NzH9
CyXc5+Bu3iGSb0jJqENH7x6gpBea/ADESetR8TKRphjBxU9FSPEFZCeaPJYcuMx5
nVN8J0QGI7aqg8qLI9GIujmvzDSWMaEkGhFm+WNXLfhz6pLTAx8y53tFdA2Mn4RK
ELWwKtxECLuAT90zEEoSadQNhqI=
-----END CERTIFICATE-----
Generated at Mon Feb 17 02:15:42 2025 by rpki-client