Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a3132303a3a2f34332d3433203d3e20323634393336.roa
File:                     323830343a333033343a3132303a3a2f34332d3433203d3e20323634393336.roa (raw, json)
Hash identifier:          VX5dQbb/RkJlyAETnd54PZLMw7697OOaEQj4tbBd1wI=
Subject key identifier:   47:C8:75:A1:79:97:92:41:99:B1:9A:3F:E9:97:2D:D9:C2:76:E2:9A
Certificate issuer:       /CN=13FDACDC2F1641AAEF2664C2C19927624122A6A5
Certificate serial:       3E912D196EFA4CE4E7705345F5DB06F5933AC152
Authority key identifier: 13:FD:AC:DC:2F:16:41:AA:EF:26:64:C2:C1:99:27:62:41:22:A6:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13FDACDC2F1641AAEF2664C2C19927624122A6A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a3132303a3a2f34332d3433203d3e20323634393336.roa
Signing time:             Tue 02 Apr 2024 14:40:50 +0000
ROA not before:           Tue 02 Apr 2024 14:35:50 +0000
ROA not after:            Tue 01 Apr 2025 14:40:50 +0000
asID:                     264936
IP address blocks:        2804:3034:120::/43 maxlen: 43
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:91:2d:19:6e:fa:4c:e4:e7:70:53:45:f5:db:06:f5:93:3a:c1:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13FDACDC2F1641AAEF2664C2C19927624122A6A5
        Validity
            Not Before: Apr  2 14:35:50 2024 GMT
            Not After : Apr  1 14:40:50 2025 GMT
        Subject: CN=47C875A17997924199B19A3FE9972DD9C276E29A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:21:b2:07:82:3f:65:10:c7:f6:18:cd:c8:cf:
                    7c:cf:04:10:80:5d:e3:55:ae:39:2b:31:1c:21:07:
                    39:de:15:5b:99:d5:e3:70:ce:2a:9c:b6:26:26:a6:
                    73:d5:ed:ba:e9:a2:08:10:ac:65:fd:8d:cf:21:76:
                    7a:cf:01:62:4d:c0:47:24:80:5f:38:53:91:a1:a4:
                    39:ad:10:44:ed:f9:19:d4:73:6d:20:d0:a2:a0:45:
                    be:84:93:31:1a:7e:48:62:f0:7b:31:d1:e4:0f:e1:
                    e1:00:c1:53:c3:06:43:2b:6f:25:43:00:b9:45:92:
                    04:95:2e:a1:3b:b8:c2:ae:c9:36:24:dc:43:61:11:
                    03:a4:2d:e9:99:c5:5c:4a:ae:39:1a:ea:34:a1:61:
                    c1:ae:af:79:14:30:57:93:3e:18:2e:99:c6:48:d4:
                    8b:dc:71:55:2c:c9:e2:9d:4f:a0:f5:59:0a:98:07:
                    46:ce:83:2c:bc:91:c5:ee:9f:cb:f6:4f:87:2f:58:
                    19:03:f4:7b:50:a1:0a:c9:b7:6d:df:ef:d4:d9:01:
                    9d:9a:ca:7b:eb:60:c6:00:c4:ce:6a:c7:5c:45:82:
                    af:28:c5:a9:3c:07:75:d6:cd:40:48:01:db:2b:48:
                    55:6d:ed:df:db:8e:b1:49:1f:29:5b:8e:cb:31:91:
                    4a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:C8:75:A1:79:97:92:41:99:B1:9A:3F:E9:97:2D:D9:C2:76:E2:9A
            X509v3 Authority Key Identifier:
                keyid:13:FD:AC:DC:2F:16:41:AA:EF:26:64:C2:C1:99:27:62:41:22:A6:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/13FDACDC2F1641AAEF2664C2C19927624122A6A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13FDACDC2F1641AAEF2664C2C19927624122A6A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a3132303a3a2f34332d3433203d3e20323634393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3034:120::/43

    Signature Algorithm: sha256WithRSAEncryption
         7e:e0:14:31:3a:9d:f7:11:00:2f:9f:26:3b:b6:46:a7:1a:b7:
         b3:87:30:04:f9:9a:6c:51:4d:11:76:f5:31:c7:c7:cc:92:f5:
         31:92:c1:05:e7:db:5e:68:25:76:9e:37:67:fd:ec:c8:ca:4d:
         b9:58:bb:03:9c:00:cc:81:e0:98:d3:29:90:f6:fc:9f:ea:85:
         8b:d8:09:67:6d:41:27:e3:6a:4a:06:9b:00:db:1e:5f:c0:6d:
         3b:a6:c5:c4:dd:f0:f8:12:35:94:7e:14:d2:dd:91:0c:79:1e:
         56:aa:d8:8f:c5:37:40:36:42:58:08:41:82:4a:8a:da:55:2c:
         1c:f5:36:35:50:a7:2c:e8:32:eb:d5:88:85:4a:91:e1:a2:3f:
         f7:06:9f:9b:98:07:40:43:01:61:ec:6c:1d:ba:f0:ef:e0:e4:
         98:b0:79:f7:2c:db:b3:78:ff:1b:45:22:94:14:36:c9:bf:97:
         5a:79:e1:ce:d3:f7:55:7c:4e:c4:cd:b5:9d:5b:3b:9c:a1:28:
         e5:47:7d:a9:d4:7e:51:8c:07:4a:13:5a:e7:57:4f:bd:95:81:
         87:ba:1b:cc:f5:b2:11:9d:be:52:72:4e:19:c7:10:fe:e7:92:
         21:14:31:dc:2b:3a:c9:b8:69:5c:88:1c:e4:b4:c3:11:10:4a:
         b4:8b:7e:0d
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUPpEtGW76TOTncFNF9dsG9ZM6wVIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTNGREFDREMyRjE2NDFBQUVGMjY2NEMyQzE5OTI3NjI0
MTIyQTZBNTAeFw0yNDA0MDIxNDM1NTBaFw0yNTA0MDExNDQwNTBaMDMxMTAvBgNV
BAMTKDQ3Qzg3NUExNzk5NzkyNDE5OUIxOUEzRkU5OTcyREQ5QzI3NkUyOUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4IbIHgj9lEMf2GM3Iz3zPBBCA
XeNVrjkrMRwhBzneFVuZ1eNwziqctiYmpnPV7brpoggQrGX9jc8hdnrPAWJNwEck
gF84U5GhpDmtEETt+RnUc20g0KKgRb6EkzEafkhi8Hsx0eQP4eEAwVPDBkMrbyVD
ALlFkgSVLqE7uMKuyTYk3ENhEQOkLemZxVxKrjka6jShYcGur3kUMFeTPhgumcZI
1IvccVUsyeKdT6D1WQqYB0bOgyy8kcXun8v2T4cvWBkD9HtQoQrJt23f79TZAZ2a
ynvrYMYAxM5qx1xFgq8oxak8B3XWzUBIAdsrSFVt7d/bjrFJHylbjssxkUohAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUR8h1oXmXkkGZsZo/6Zct2cJ24powHwYDVR0j
BBgwFoAUE/2s3C8WQarvJmTCwZknYkEipqUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDNyNUh0TnVhQnRmcUNEM0xiVmdHb2F3dmlyaXdWNk5YWXlwYmEzcmFX
UG4vMC8xM0ZEQUNEQzJGMTY0MUFBRUYyNjY0QzJDMTk5Mjc2MjQxMjJBNkE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzEzRkRBQ0RDMkYxNjQxQUFF
RjI2NjRDMkMxOTkyNzYyNDEyMkE2QTUuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQzcjVIdE51YUJ0ZnFDRDNMYlZnR29hd3Zpcml3VjZOWFl5cGJhM3JhV1BuLzAv
MzIzODMwMzQzYTMzMzAzMzM0M2EzMTMyMzAzYTNhMmYzNDMzMmQzNDMzMjAzZDNl
MjAzMjM2MzQzOTMzMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwUoBDA0ASAwDQYJKoZIhvcNAQELBQAD
ggEBAH7gFDE6nfcRAC+fJju2Rqcat7OHMAT5mmxRTRF29THHx8yS9TGSwQXn215o
JXaeN2f97MjKTblYuwOcAMyB4JjTKZD2/J/qhYvYCWdtQSfjakoGmwDbHl/AbTum
xcTd8PgSNZR+FNLdkQx5Hlaq2I/FN0A2QlgIQYJKitpVLBz1NjVQpyzoMuvViIVK
keGiP/cGn5uYB0BDAWHsbB268O/g5Jiwefcs27N4/xtFIpQUNsm/l1p54c7T91V8
TsTNtZ1bO5yhKOVHfanUflGMB0oTWudXT72VgYe6G8z1shGdvlJyThnHEP7nkiEU
MdwrOsm4aVyIHOS0wxEQSrSLfg0=
-----END CERTIFICATE-----
Generated at Mon Apr 21 07:53:39 2025 by rpki-client