Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HUXoMFP76a3b3TGtVHVKPD6A7hNjWQG1qDg9LN1RRop/0/323830343a356633383a3331303a3a2f34342d3434203d3e20323639303834.roa
File:                     323830343a356633383a3331303a3a2f34342d3434203d3e20323639303834.roa (raw, json)
Hash identifier:          Ojcqq7sWgbQEwxRH0u4SHEEMPP/SURQTlFgzKYZe9gI=
Subject key identifier:   1B:F4:8A:CC:C1:10:8C:4F:92:4F:F4:88:AF:49:AF:D0:1C:DB:E5:6E
Certificate issuer:       /CN=FC91ABE2B9C46E0650B987CA9366CF084CEAAA96
Certificate serial:       3F7029E97FA460A8FEAA91B910D2FF7C0340C563
Authority key identifier: FC:91:AB:E2:B9:C4:6E:06:50:B9:87:CA:93:66:CF:08:4C:EA:AA:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC91ABE2B9C46E0650B987CA9366CF084CEAAA96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HUXoMFP76a3b3TGtVHVKPD6A7hNjWQG1qDg9LN1RRop/0/323830343a356633383a3331303a3a2f34342d3434203d3e20323639303834.roa
Signing time:             Mon 29 May 2023 17:29:37 +0000
ROA not before:           Mon 29 May 2023 17:24:37 +0000
ROA not after:            Mon 27 May 2024 17:29:37 +0000
asID:                     269084
IP address blocks:        2804:5f38:310::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:70:29:e9:7f:a4:60:a8:fe:aa:91:b9:10:d2:ff:7c:03:40:c5:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC91ABE2B9C46E0650B987CA9366CF084CEAAA96
        Validity
            Not Before: May 29 17:24:37 2023 GMT
            Not After : May 27 17:29:37 2024 GMT
        Subject: CN=1BF48ACCC1108C4F924FF488AF49AFD01CDBE56E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:02:a0:12:60:38:7f:b2:d3:8b:d6:96:c0:b6:
                    5a:26:e0:f2:18:9d:93:9c:db:a8:d4:fc:3c:4b:15:
                    b5:5f:0b:b4:12:3f:d1:d6:36:ab:14:44:a8:cc:fe:
                    8f:c7:b1:2c:7e:d3:fd:ab:8d:81:66:a2:44:b5:2a:
                    d2:82:ea:8d:d7:19:95:77:e8:8b:ca:92:cf:b5:da:
                    13:8f:1b:4c:75:ed:89:6b:53:d2:80:48:8d:0c:cb:
                    35:97:33:e5:58:05:bd:b7:25:6a:cc:b2:21:b4:b7:
                    ca:35:fc:0a:7b:c8:64:1e:e4:ad:59:77:14:e5:5e:
                    ad:54:39:fe:c4:6c:71:bf:46:7e:b4:70:54:d5:72:
                    44:45:35:38:7c:04:ab:cf:18:19:6a:1f:fc:bc:98:
                    33:33:48:7f:43:b3:f0:99:55:a0:a1:bb:3a:cb:ef:
                    cb:37:7e:f4:ca:26:9c:be:cd:53:ab:fe:38:89:11:
                    99:70:aa:35:35:20:ea:a2:b8:81:87:fb:81:95:0f:
                    e3:9d:64:15:ce:a6:6d:f2:d4:11:c0:ca:b1:39:08:
                    4c:0d:85:ca:5a:44:ae:16:a6:c3:1b:be:c5:27:68:
                    92:bb:3c:2c:97:74:2e:db:d6:b3:3c:63:93:dc:2a:
                    09:7f:40:7e:0a:ca:df:5c:67:61:48:3d:a9:92:54:
                    26:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:F4:8A:CC:C1:10:8C:4F:92:4F:F4:88:AF:49:AF:D0:1C:DB:E5:6E
            X509v3 Authority Key Identifier:
                keyid:FC:91:AB:E2:B9:C4:6E:06:50:B9:87:CA:93:66:CF:08:4C:EA:AA:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HUXoMFP76a3b3TGtVHVKPD6A7hNjWQG1qDg9LN1RRop/0/FC91ABE2B9C46E0650B987CA9366CF084CEAAA96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC91ABE2B9C46E0650B987CA9366CF084CEAAA96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HUXoMFP76a3b3TGtVHVKPD6A7hNjWQG1qDg9LN1RRop/0/323830343a356633383a3331303a3a2f34342d3434203d3e20323639303834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f38:310::/44

    Signature Algorithm: sha256WithRSAEncryption
         24:7c:12:fc:33:94:a1:bf:62:56:87:37:6d:4d:bc:31:71:a6:
         2c:08:d4:0a:aa:c8:21:19:f2:53:d8:1a:d3:2e:a1:cf:f1:19:
         06:29:0a:78:26:5d:ab:32:3c:23:b7:52:f0:2c:1c:da:3d:0c:
         46:b0:19:c9:ff:49:c4:58:e9:03:55:50:6d:ff:9b:34:f9:36:
         f3:d0:37:01:00:fe:8d:ec:7e:1c:c9:09:20:4e:b2:98:9b:14:
         ed:ff:3d:50:ae:ca:75:34:30:0a:e3:c0:9b:34:6e:3a:d9:99:
         94:98:da:04:c2:44:d0:7d:44:96:55:54:ae:bf:dd:b0:10:20:
         b6:e6:4d:30:2a:e2:8d:f1:88:17:77:2d:c3:c8:6f:19:7e:c3:
         58:47:22:6c:83:8d:df:56:c8:d1:e1:3b:4e:66:5f:74:f3:a4:
         a8:10:54:0a:14:0c:57:39:08:41:91:e5:7b:60:95:53:bc:d8:
         11:a8:74:fe:0c:1a:5a:42:34:44:e6:94:fd:84:95:c2:11:db:
         c0:d5:ad:4c:54:1a:79:98:3c:28:ce:66:bd:48:d0:bd:cd:91:
         ee:d5:8c:35:37:c2:e0:78:4d:a0:a3:2e:38:fc:10:c5:1f:9d:
         d5:58:78:25:f9:12:00:5e:4f:08:c6:2c:04:6c:ec:1d:61:3d:
         7f:f5:7f:27
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUP3Ap6X+kYKj+qpG5ENL/fANAxWMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkM5MUFCRTJCOUM0NkUwNjUwQjk4N0NBOTM2NkNGMDg0
Q0VBQUE5NjAeFw0yMzA1MjkxNzI0MzdaFw0yNDA1MjcxNzI5MzdaMDMxMTAvBgNV
BAMTKDFCRjQ4QUNDQzExMDhDNEY5MjRGRjQ4OEFGNDlBRkQwMUNEQkU1NkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbAqASYDh/stOL1pbAtlom4PIY
nZOc26jU/DxLFbVfC7QSP9HWNqsURKjM/o/HsSx+0/2rjYFmokS1KtKC6o3XGZV3
6IvKks+12hOPG0x17YlrU9KASI0MyzWXM+VYBb23JWrMsiG0t8o1/Ap7yGQe5K1Z
dxTlXq1UOf7EbHG/Rn60cFTVckRFNTh8BKvPGBlqH/y8mDMzSH9Ds/CZVaChuzrL
78s3fvTKJpy+zVOr/jiJEZlwqjU1IOqiuIGH+4GVD+OdZBXOpm3y1BHAyrE5CEwN
hcpaRK4WpsMbvsUnaJK7PCyXdC7b1rM8Y5PcKgl/QH4Kyt9cZ2FIPamSVCZpAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUG/SKzMEQjE+ST/SIr0mv0Bzb5W4wHwYDVR0j
BBgwFoAU/JGr4rnEbgZQuYfKk2bPCEzqqpYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEhVWG9NRlA3NmEzYjNUR3RWSFZLUEQ2QTdoTmpXUUcxcURnOUxOMVJS
b3AvMC9GQzkxQUJFMkI5QzQ2RTA2NTBCOTg3Q0E5MzY2Q0YwODRDRUFBQTk2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ZDOTFBQkUyQjlDNDZFMDY1
MEI5ODdDQTkzNjZDRjA4NENFQUFBOTYuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRIVVhvTUZQNzZhM2IzVEd0VkhWS1BENkE3aE5qV1FHMXFEZzlMTjFSUm9wLzAv
MzIzODMwMzQzYTM1NjYzMzM4M2EzMzMxMzAzYTNhMmYzNDM0MmQzNDM0MjAzZDNl
MjAzMjM2MzkzMDM4MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQoBF84AxAwDQYJKoZIhvcNAQELBQAD
ggEBACR8EvwzlKG/YlaHN21NvDFxpiwI1AqqyCEZ8lPYGtMuoc/xGQYpCngmXasy
PCO3UvAsHNo9DEawGcn/ScRY6QNVUG3/mzT5NvPQNwEA/o3sfhzJCSBOspibFO3/
PVCuynU0MArjwJs0bjrZmZSY2gTCRNB9RJZVVK6/3bAQILbmTTAq4o3xiBd3LcPI
bxl+w1hHImyDjd9WyNHhO05mX3TzpKgQVAoUDFc5CEGR5XtglVO82BGodP4MGlpC
NETmlP2ElcIR28DVrUxUGnmYPCjOZr1I0L3Nke7VjDU3wuB4TaCjLjj8EMUfndVY
eCX5EgBeTwjGLARs7B1hPX/1fyc=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:33:19 2025 by rpki-client