Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/323830343a353465633a3a2f33342d3334203d3e20323638363738.roa
File:                     323830343a353465633a3a2f33342d3334203d3e20323638363738.roa (raw, json)
Hash identifier:          W03uwJvpcs63i9ppr1TIooQQO1Rm9pBQtOVuI2dMvNw=
Subject key identifier:   CC:EA:47:33:C2:82:8B:53:F2:98:5A:A9:85:4E:9B:12:90:76:AD:BF
Certificate issuer:       /CN=69055FBEBF6785F771BFF701242EF920E00482FD
Certificate serial:       5F7D2F688D53FC2D532563E82F69DB5E3A0DAD3D
Authority key identifier: 69:05:5F:BE:BF:67:85:F7:71:BF:F7:01:24:2E:F9:20:E0:04:82:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69055FBEBF6785F771BFF701242EF920E00482FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/323830343a353465633a3a2f33342d3334203d3e20323638363738.roa
Signing time:             Tue 30 Jul 2024 12:24:11 +0000
ROA not before:           Tue 30 Jul 2024 12:19:11 +0000
ROA not after:            Tue 29 Jul 2025 12:24:11 +0000
asID:                     268678
IP address blocks:        2804:54ec::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:7d:2f:68:8d:53:fc:2d:53:25:63:e8:2f:69:db:5e:3a:0d:ad:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69055FBEBF6785F771BFF701242EF920E00482FD
        Validity
            Not Before: Jul 30 12:19:11 2024 GMT
            Not After : Jul 29 12:24:11 2025 GMT
        Subject: CN=CCEA4733C2828B53F2985AA9854E9B129076ADBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:85:4d:31:e6:64:22:fa:7a:ae:b3:81:ec:fb:
                    f2:1e:2e:e4:a2:a4:91:cd:b2:94:62:c0:fc:86:6f:
                    b7:94:db:01:a7:69:f1:75:1e:22:b3:a8:d7:10:85:
                    de:f3:51:d5:50:4d:05:2e:4b:03:64:3c:0b:02:94:
                    c5:c0:4f:e8:a0:2e:d9:59:c6:07:9a:05:a6:45:5e:
                    63:30:34:23:bb:ce:01:7b:f6:a3:52:b2:95:13:c6:
                    0e:77:21:a3:ff:82:ba:e1:53:93:88:ee:43:72:2f:
                    bb:f0:e6:d8:c9:5e:3d:b2:1b:c0:c4:a1:88:85:2b:
                    ee:91:29:66:ae:d9:dc:3c:3e:2f:a6:4d:8f:20:e6:
                    0f:53:b7:43:d5:50:a1:04:46:e5:cf:d7:53:0f:ad:
                    df:56:e7:08:78:5f:12:b2:72:b6:e7:48:c5:18:4c:
                    2a:65:ad:2e:f9:52:1f:c1:d9:44:ff:73:5f:9f:58:
                    fa:38:f9:fc:7e:4d:eb:cb:f3:66:bf:f5:47:b0:8a:
                    1e:38:9e:2b:e6:3c:03:d5:cd:91:c1:ca:f8:dd:e6:
                    98:62:59:57:eb:03:48:f0:bc:43:ad:b7:98:0d:8e:
                    c9:e9:91:b1:06:70:b6:a0:9d:56:fe:25:2c:22:d2:
                    d2:db:0a:c5:86:f1:ba:2a:87:6f:2e:82:3d:a5:dd:
                    8c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:EA:47:33:C2:82:8B:53:F2:98:5A:A9:85:4E:9B:12:90:76:AD:BF
            X509v3 Authority Key Identifier:
                keyid:69:05:5F:BE:BF:67:85:F7:71:BF:F7:01:24:2E:F9:20:E0:04:82:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/69055FBEBF6785F771BFF701242EF920E00482FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69055FBEBF6785F771BFF701242EF920E00482FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/323830343a353465633a3a2f33342d3334203d3e20323638363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54ec::/34

    Signature Algorithm: sha256WithRSAEncryption
         57:49:34:88:f0:2b:fe:4a:ba:da:2c:14:d3:7d:81:3d:b3:e0:
         7d:30:83:40:04:31:94:16:5f:75:26:09:dd:d5:77:2e:06:c3:
         fe:99:93:1d:99:65:a7:f2:a3:14:57:43:d5:1b:0f:ee:34:ca:
         da:ab:3c:a5:ad:e8:2f:f9:60:15:d0:5f:6a:f3:71:fb:08:76:
         35:f6:17:0e:37:f7:d9:12:07:bf:91:b1:33:ea:36:af:54:83:
         30:75:7f:88:e7:54:0b:65:89:89:03:83:84:83:25:07:5b:bb:
         52:77:fe:bb:23:16:ca:e6:0a:10:2f:f1:54:5e:c6:ff:be:98:
         1d:d3:6c:1d:d3:41:3f:0d:61:2a:e7:c9:e1:4c:48:ce:b5:1c:
         08:06:8b:b6:20:11:28:99:ea:be:8c:80:46:2d:df:32:55:43:
         d0:b0:64:d5:97:ea:30:6c:ea:03:f9:e0:aa:6c:d7:5f:99:88:
         47:78:44:3b:50:7a:8a:27:8f:e3:a1:f9:4c:6f:1b:65:19:20:
         78:51:be:79:8d:1b:b6:db:1d:2f:cd:f4:d5:18:c1:ce:bc:ed:
         b0:e1:90:cd:1a:24:50:b5:62:26:b3:06:21:d8:3a:c7:89:bd:
         dc:bf:db:60:57:7e:7b:6d:55:93:aa:38:1a:1d:e6:2b:75:be:
         fb:e1:57:6f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUX30vaI1T/C1TJWPoL2nbXjoNrT0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjkwNTVGQkVCRjY3ODVGNzcxQkZGNzAxMjQyRUY5MjBF
MDA0ODJGRDAeFw0yNDA3MzAxMjE5MTFaFw0yNTA3MjkxMjI0MTFaMDMxMTAvBgNV
BAMTKENDRUE0NzMzQzI4MjhCNTNGMjk4NUFBOTg1NEU5QjEyOTA3NkFEQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5hU0x5mQi+nqus4Hs+/IeLuSi
pJHNspRiwPyGb7eU2wGnafF1HiKzqNcQhd7zUdVQTQUuSwNkPAsClMXAT+igLtlZ
xgeaBaZFXmMwNCO7zgF79qNSspUTxg53IaP/grrhU5OI7kNyL7vw5tjJXj2yG8DE
oYiFK+6RKWau2dw8Pi+mTY8g5g9Tt0PVUKEERuXP11MPrd9W5wh4XxKycrbnSMUY
TCplrS75Uh/B2UT/c1+fWPo4+fx+TevL82a/9Uewih44nivmPAPVzZHByvjd5phi
WVfrA0jwvEOtt5gNjsnpkbEGcLagnVb+JSwi0tLbCsWG8boqh28ugj2l3Yy5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUzOpHM8KCi1PymFqphU6bEpB2rb8wHwYDVR0j
BBgwFoAUaQVfvr9nhfdxv/cBJC75IOAEgv0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUdyZ2pLRFdOSmgyZ25kVjFpeGRSelBVYmZDd0wxdU1YMzZBS2l3U3Yy
VHovMC82OTA1NUZCRUJGNjc4NUY3NzFCRkY3MDEyNDJFRjkyMEUwMDQ4MkZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY5MDU1RkJFQkY2Nzg1Rjc3
MUJGRjcwMTI0MkVGOTIwRTAwNDgyRkQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVHcmdqS0RXTkpoMmduZFYxaXhkUnpQVWJmQ3dMMXVNWDM2QUtpd1N2MlR6LzAv
MzIzODMwMzQzYTM1MzQ2NTYzM2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzIzNjM4
MzYzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYGKARU7AAwDQYJKoZIhvcNAQELBQADggEBAFdJNIjw
K/5KutosFNN9gT2z4H0wg0AEMZQWX3UmCd3Vdy4Gw/6Zkx2ZZafyoxRXQ9UbD+40
ytqrPKWt6C/5YBXQX2rzcfsIdjX2Fw4399kSB7+RsTPqNq9UgzB1f4jnVAtliYkD
g4SDJQdbu1J3/rsjFsrmChAv8VRexv++mB3TbB3TQT8NYSrnyeFMSM61HAgGi7Yg
ESiZ6r6MgEYt3zJVQ9CwZNWX6jBs6gP54Kps11+ZiEd4RDtQeoonj+Oh+UxvG2UZ
IHhRvnmNG7bbHS/N9NUYwc687bDhkM0aJFC1YiazBiHYOseJvdy/22BXfnttVZOq
OBod5it1vvvhV28=
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:57:41 2025 by rpki-client