Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a363030363a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a363030363a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          fnrNzm+XQA8CcaRkeIXkzD2R7umJZRfih99YmSKQCkQ=
Subject key identifier:   BB:DC:36:8C:82:D7:2D:4F:77:82:46:BB:5F:AF:A3:F7:40:2E:C4:82
Certificate issuer:       /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial:       0E6C35756D7EBA793D252CCB511C97E0691C1F4A
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a363030363a3a2f34382d3438203d3e203532373036.roa
Signing time:             Thu 06 Mar 2025 02:31:46 +0000
ROA not before:           Thu 06 Mar 2025 02:26:46 +0000
ROA not after:            Thu 05 Mar 2026 02:31:46 +0000
asID:                     52706
IP address blocks:        2804:c70:6006::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:6c:35:75:6d:7e:ba:79:3d:25:2c:cb:51:1c:97:e0:69:1c:1f:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
        Validity
            Not Before: Mar  6 02:26:46 2025 GMT
            Not After : Mar  5 02:31:46 2026 GMT
        Subject: CN=BBDC368C82D72D4F778246BB5FAFA3F7402EC482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9d:d4:2f:4c:cc:17:ad:e4:87:1e:34:bd:a2:
                    d4:5b:b5:c5:87:a5:87:13:56:cf:1f:ea:18:eb:90:
                    cb:e8:ea:ed:1c:d8:18:83:c9:56:9c:28:3f:3c:74:
                    53:b1:a5:8c:62:34:30:9d:c9:9b:c8:e3:7f:75:61:
                    8a:cf:2d:6a:50:aa:2f:1c:65:66:ba:37:d1:88:02:
                    af:cb:bf:68:72:d6:c2:30:9b:24:cc:fd:14:6e:58:
                    b1:30:91:60:f0:59:79:cf:53:13:76:33:c0:d8:7f:
                    83:2d:67:3d:86:fa:5e:a6:7c:ad:c0:2b:47:a7:40:
                    e5:ff:b8:6a:c6:15:d5:e3:94:73:74:77:4f:96:5f:
                    6a:c9:39:0f:88:41:68:df:09:54:bb:d1:0a:f2:4e:
                    d3:45:9e:65:b2:98:77:79:da:bb:bb:87:3c:27:91:
                    84:8c:8c:9a:ef:4e:12:de:65:04:59:f2:98:1b:45:
                    d7:44:17:92:05:2d:d4:b0:06:b6:8e:99:4b:1d:6c:
                    97:ae:91:3b:e7:21:06:5f:75:f3:7e:7c:28:53:89:
                    4f:70:2b:52:4b:02:29:a1:28:13:29:74:53:81:e7:
                    19:de:e6:be:f3:07:c2:07:e9:f9:6d:df:92:89:e7:
                    a6:45:df:2a:dc:09:62:dc:0e:f7:a4:af:1a:ad:67:
                    6e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:DC:36:8C:82:D7:2D:4F:77:82:46:BB:5F:AF:A3:F7:40:2E:C4:82
            X509v3 Authority Key Identifier:
                keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a363030363a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:6006::/48

    Signature Algorithm: sha256WithRSAEncryption
         b7:7c:85:f3:c8:f7:2f:4d:36:12:4b:67:26:11:2a:05:ac:36:
         48:92:d6:24:cd:fc:d5:d1:a4:2c:77:30:44:ee:d9:22:60:60:
         e1:27:f1:64:e3:65:98:14:ae:d8:37:14:07:38:2d:d0:3d:f8:
         08:f4:c7:60:a1:89:b0:1f:58:d0:11:ee:3c:47:83:1d:6f:62:
         24:fb:91:bc:81:d1:c8:a1:f1:0d:c7:e6:4c:8d:8a:51:e1:75:
         69:4b:64:ec:35:0f:75:81:8b:cb:63:04:1f:58:b1:a7:ea:41:
         54:13:9d:e7:3a:8c:aa:6b:03:48:13:cf:74:e4:79:a4:e7:fc:
         44:8e:bb:ce:8c:57:9f:4b:9e:a2:f9:cd:74:e8:36:77:58:45:
         f1:dc:2e:03:ac:a8:05:b7:c6:35:b2:31:3f:47:40:a3:41:c5:
         cd:ef:6c:ea:30:93:e8:ae:3c:9f:d0:26:fd:0c:ce:04:a5:a4:
         b2:71:7c:65:10:c0:53:b6:55:fd:bc:b1:45:ba:8f:ce:ce:c9:
         e9:67:2d:c5:08:fe:6a:43:54:b4:94:6a:8c:86:63:b2:cc:6d:
         12:bb:3a:1e:7b:dd:96:5a:66:d5:10:50:20:bb:2a:53:5f:5d:
         56:5f:e1:a2:c2:cb:6e:fa:d6:64:41:56:bb:5f:4b:d5:1b:be:
         b3:3d:6b:56
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUDmw1dW1+unk9JSzLURyX4GkcH0owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTM1RTU0RjFEMDI2M0I4RTkwM0EwOTI5QTYxMzEzQzhD
NUJFOERBNjAeFw0yNTAzMDYwMjI2NDZaFw0yNjAzMDUwMjMxNDZaMDMxMTAvBgNV
BAMTKEJCREMzNjhDODJENzJENEY3NzgyNDZCQjVGQUZBM0Y3NDAyRUM0ODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFndQvTMwXreSHHjS9otRbtcWH
pYcTVs8f6hjrkMvo6u0c2BiDyVacKD88dFOxpYxiNDCdyZvI4391YYrPLWpQqi8c
ZWa6N9GIAq/Lv2hy1sIwmyTM/RRuWLEwkWDwWXnPUxN2M8DYf4MtZz2G+l6mfK3A
K0enQOX/uGrGFdXjlHN0d0+WX2rJOQ+IQWjfCVS70QryTtNFnmWymHd52ru7hzwn
kYSMjJrvThLeZQRZ8pgbRddEF5IFLdSwBraOmUsdbJeukTvnIQZfdfN+fChTiU9w
K1JLAimhKBMpdFOB5xne5r7zB8IH6flt35KJ56ZF3yrcCWLcDvekrxqtZ27BAgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUu9w2jILXLU93gka7X6+j90AuxIIwHwYDVR0j
BBgwFoAU415U8dAmO46QOgkpphMTyMW+jaYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEdIYU5yeFVTdUVjUWpuSDNqam0zaEE3cHBuSjZKdDJnRU1VdGdxYXhX
MUcvMS9FMzVFNTRGMUQwMjYzQjhFOTAzQTA5MjlBNjEzMTNDOEM1QkU4REE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UzNUU1NEYxRDAyNjNCOEU5
MDNBMDkyOUE2MTMxM0M4QzVCRThEQTYuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRHSGFOcnhVU3VFY1FqbkgzamptM2hBN3Bwbko2SnQyZ0VNVXRncWF4VzFHLzEv
MzIzODMwMzQzYTYzMzczMDNhMzYzMDMwMzYzYTNhMmYzNDM4MmQzNDM4MjAzZDNl
MjAzNTMyMzczMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG
AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAQMcGAGMA0GCSqGSIb3DQEBCwUAA4IB
AQC3fIXzyPcvTTYSS2cmESoFrDZIktYkzfzV0aQsdzBE7tkiYGDhJ/Fk42WYFK7Y
NxQHOC3QPfgI9MdgoYmwH1jQEe48R4Mdb2Ik+5G8gdHIofENx+ZMjYpR4XVpS2Ts
NQ91gYvLYwQfWLGn6kFUE53nOoyqawNIE8905Hmk5/xEjrvOjFefS56i+c106DZ3
WEXx3C4DrKgFt8Y1sjE/R0CjQcXN72zqMJPorjyf0Cb9DM4EpaSycXxlEMBTtlX9
vLFFuo/OzsnpZy3FCP5qQ1S0lGqMhmOyzG0Suzoee92WWmbVEFAguypTX11WX+Gi
wstu+tZkQVa7X0vVG76zPWtW
-----END CERTIFICATE-----
Generated at Wed Apr 9 20:58:57 2025 by rpki-client