Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/1/323830343a3837633a3a2f33322d3438203d3e203238323032.roa
File:                     323830343a3837633a3a2f33322d3438203d3e203238323032.roa (raw, json)
Hash identifier:          V/N+Sue7ijepkdYdrMaMsiQl00UUAl2NEcKevXxLljE=
Subject key identifier:   A3:BD:30:29:2C:54:05:9B:02:3C:A7:EA:3C:15:56:F5:D1:1D:62:E5
Certificate issuer:       /CN=E62FC100819A1A7B48F9F79818EFB69B6B9A1FE8
Certificate serial:       27FEDF74461063B7E633722201142D5E2D7AE8D8
Authority key identifier: E6:2F:C1:00:81:9A:1A:7B:48:F9:F7:98:18:EF:B6:9B:6B:9A:1F:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E62FC100819A1A7B48F9F79818EFB69B6B9A1FE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/1/323830343a3837633a3a2f33322d3438203d3e203238323032.roa
Signing time:             Mon 30 Oct 2023 11:39:22 +0000
ROA not before:           Mon 30 Oct 2023 11:34:22 +0000
ROA not after:            Mon 28 Oct 2024 11:39:22 +0000
asID:                     28202
IP address blocks:        2804:87c::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:fe:df:74:46:10:63:b7:e6:33:72:22:01:14:2d:5e:2d:7a:e8:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E62FC100819A1A7B48F9F79818EFB69B6B9A1FE8
        Validity
            Not Before: Oct 30 11:34:22 2023 GMT
            Not After : Oct 28 11:39:22 2024 GMT
        Subject: CN=A3BD30292C54059B023CA7EA3C1556F5D11D62E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:de:4c:d0:09:52:03:ef:19:90:0a:57:6f:17:
                    ae:30:e9:da:1d:46:0d:88:96:92:1a:e7:44:3f:16:
                    10:06:35:fe:bf:7b:aa:44:b9:97:cb:57:6e:ca:51:
                    49:b0:c6:4d:38:31:7e:e8:1c:e8:98:25:e3:bd:5b:
                    8f:7b:a5:4f:ca:3d:be:63:cb:d0:1b:34:88:54:f4:
                    82:c3:7f:c1:53:7a:47:b1:a0:cf:df:7c:f4:11:b0:
                    5f:90:e3:75:ac:79:6b:19:0e:10:f2:db:00:33:d0:
                    8d:31:17:cd:96:69:a6:78:5a:84:e8:45:15:49:b1:
                    f0:9b:91:a2:ce:ca:61:96:4e:05:be:e1:9b:46:ec:
                    94:4f:e8:dc:c6:f4:e8:5a:18:50:bd:df:94:3e:77:
                    88:0c:d5:49:d2:76:71:07:e2:76:1f:42:ba:62:ec:
                    ec:53:47:ee:8c:da:bf:36:a8:82:f1:42:e8:d8:e0:
                    31:79:a5:21:ca:7c:b0:a3:82:09:cf:8e:6f:d8:b3:
                    9d:22:9c:01:4b:57:04:47:d1:0a:5e:9f:ea:c4:59:
                    60:ed:e5:2f:2f:25:9f:1a:4e:9f:f4:da:de:8d:2e:
                    23:f3:a8:b5:db:73:df:89:9c:89:ea:53:bc:6c:17:
                    76:11:b5:c2:e7:1f:9e:45:e8:81:32:7a:11:63:74:
                    27:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:BD:30:29:2C:54:05:9B:02:3C:A7:EA:3C:15:56:F5:D1:1D:62:E5
            X509v3 Authority Key Identifier:
                keyid:E6:2F:C1:00:81:9A:1A:7B:48:F9:F7:98:18:EF:B6:9B:6B:9A:1F:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/1/E62FC100819A1A7B48F9F79818EFB69B6B9A1FE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E62FC100819A1A7B48F9F79818EFB69B6B9A1FE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/1/323830343a3837633a3a2f33322d3438203d3e203238323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:87c::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:a9:99:c0:6a:04:fb:cb:89:de:b8:24:e9:bc:1b:bc:8c:84:
         33:90:0e:89:2a:a1:fc:55:a3:50:48:3f:55:b0:1a:b0:90:95:
         40:12:3a:42:6f:47:d3:62:75:63:b6:ff:25:11:92:df:4b:21:
         40:01:99:01:02:fe:a4:69:90:c6:60:52:1e:74:ae:fc:db:6d:
         63:39:25:8f:cd:fd:ec:12:b8:f6:7e:9b:1e:b9:ee:7d:e2:16:
         3c:50:cc:59:60:4c:f1:47:27:85:16:92:d4:47:cc:fb:f7:a6:
         3f:c6:76:30:91:25:12:b8:0e:ca:16:b7:a4:59:b2:4b:63:5b:
         e1:ed:38:65:70:49:7b:2e:e9:1e:54:80:39:87:aa:b9:14:eb:
         b4:a5:2f:6e:fd:6c:9a:85:83:ba:0c:3c:62:a3:42:2e:35:00:
         50:20:cb:57:d9:9a:18:70:6b:d8:45:9a:98:c5:97:a8:cc:21:
         9e:15:9e:82:7b:84:4b:bd:8d:ad:fc:78:bb:f0:53:09:98:56:
         8c:ac:51:0b:43:d1:5c:6e:d7:ab:4a:e6:c1:2c:f6:a0:a2:10:
         53:d7:b4:fa:ca:68:7f:b1:7f:26:a6:4f:bb:30:bb:24:b8:35:
         7b:ba:11:b6:3d:79:c9:58:ec:1b:8e:8d:2a:7e:54:77:79:c6:
         2d:f0:6d:4a
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUJ/7fdEYQY7fmM3IiARQtXi166NgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTYyRkMxMDA4MTlBMUE3QjQ4RjlGNzk4MThFRkI2OUI2
QjlBMUZFODAeFw0yMzEwMzAxMTM0MjJaFw0yNDEwMjgxMTM5MjJaMDMxMTAvBgNV
BAMTKEEzQkQzMDI5MkM1NDA1OUIwMjNDQTdFQTNDMTU1NkY1RDExRDYyRTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM3kzQCVID7xmQCldvF64w6dod
Rg2IlpIa50Q/FhAGNf6/e6pEuZfLV27KUUmwxk04MX7oHOiYJeO9W497pU/KPb5j
y9AbNIhU9ILDf8FTekexoM/ffPQRsF+Q43WseWsZDhDy2wAz0I0xF82WaaZ4WoTo
RRVJsfCbkaLOymGWTgW+4ZtG7JRP6NzG9OhaGFC935Q+d4gM1UnSdnEH4nYfQrpi
7OxTR+6M2r82qILxQujY4DF5pSHKfLCjggnPjm/Ys50inAFLVwRH0Qpen+rEWWDt
5S8vJZ8aTp/02t6NLiPzqLXbc9+JnInqU7xsF3YRtcLnH55F6IEyehFjdCdJAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUo70wKSxUBZsCPKfqPBVW9dEdYuUwHwYDVR0j
BBgwFoAU5i/BAIGaGntI+feYGO+2m2uaH+gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGRQN05GMUJkM3ZBekdEY2o3dm1RVlc5ZmtyQVE3UHltUDl1eE04Qk1V
V00vMS9FNjJGQzEwMDgxOUExQTdCNDhGOUY3OTgxOEVGQjY5QjZCOUExRkU4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0U2MkZDMTAwODE5QTFBN0I0
OEY5Rjc5ODE4RUZCNjlCNkI5QTFGRTguY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRkUDdORjFCZDN2QXpHRGNqN3ZtUVZXOWZrckFRN1B5bVA5dXhNOEJNVVdNLzEv
MzIzODMwMzQzYTM4Mzc2MzNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzgzMjMw
MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoBAh8MA0GCSqGSIb3DQEBCwUAA4IBAQBrqZnAagT7y4ne
uCTpvBu8jIQzkA6JKqH8VaNQSD9VsBqwkJVAEjpCb0fTYnVjtv8lEZLfSyFAAZkB
Av6kaZDGYFIedK78221jOSWPzf3sErj2fpseue594hY8UMxZYEzxRyeFFpLUR8z7
96Y/xnYwkSUSuA7KFrekWbJLY1vh7ThlcEl7LukeVIA5h6q5FOu0pS9u/WyahYO6
DDxio0IuNQBQIMtX2ZoYcGvYRZqYxZeozCGeFZ6Ce4RLvY2t/Hi78FMJmFaMrFEL
Q9FcbterSubBLPagohBT17T6ymh/sX8mpk+7MLskuDV7uhG2PXnJWOwbjo0qflR3
ecYt8G1K
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:31:39 2025 by rpki-client