Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/0/323830343a383333633a323030303a3a2f33352d3335203d3e20323732313835.roa
File:                     323830343a383333633a323030303a3a2f33352d3335203d3e20323732313835.roa (raw, json)
Hash identifier:          hXYJ/fsKci57x05s+WN7PxGpdc2Xv9R47OJScR8ttHk=
Subject key identifier:   02:5E:BA:49:7C:20:1F:18:43:B0:75:31:F0:F2:A2:14:8A:49:E6:DD
Certificate issuer:       /CN=C6BD52DC079825A702D874B54502AD138171621D
Certificate serial:       3205C3C568588457056EA0EDC716E3F096A267D5
Authority key identifier: C6:BD:52:DC:07:98:25:A7:02:D8:74:B5:45:02:AD:13:81:71:62:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6BD52DC079825A702D874B54502AD138171621D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/0/323830343a383333633a323030303a3a2f33352d3335203d3e20323732313835.roa
Signing time:             Wed 16 Mar 2022 20:05:28 +0000
ROA not before:           Wed 16 Mar 2022 20:00:28 +0000
ROA not after:            Wed 15 Mar 2023 20:05:28 +0000
asID:                     272185
IP address blocks:        2804:833c:2000::/35 maxlen: 35
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:05:c3:c5:68:58:84:57:05:6e:a0:ed:c7:16:e3:f0:96:a2:67:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6BD52DC079825A702D874B54502AD138171621D
        Validity
            Not Before: Mar 16 20:00:28 2022 GMT
            Not After : Mar 15 20:05:28 2023 GMT
        Subject: CN=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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:8c:da:11:4a:7c:15:8b:7f:b2:c0:c2:a4:34:
                    f4:f6:53:19:38:b8:22:59:24:48:63:94:4a:ee:51:
                    ab:aa:af:01:1e:a1:27:e9:33:19:af:95:8a:3e:3f:
                    b8:70:05:28:88:1b:54:40:cc:3f:68:2d:0b:38:9e:
                    70:6a:0b:20:92:85:aa:2a:c9:80:b5:2c:c2:98:d5:
                    bb:eb:9a:bd:c8:08:6b:de:2c:e6:58:de:5a:13:c1:
                    53:63:b0:05:f6:37:0a:ee:bc:c9:04:be:b0:0a:69:
                    7d:da:e1:23:41:ab:5a:55:c3:30:40:b0:aa:22:fa:
                    a7:8a:3d:ff:16:8a:30:ae:c3:13:33:26:bf:5c:72:
                    4c:ed:20:9e:d9:c3:3f:41:b7:2f:ba:72:b2:03:f5:
                    87:62:10:b8:99:f7:0f:ea:aa:8e:7a:87:21:8a:79:
                    4c:a8:bb:89:26:65:aa:b2:c3:20:63:b5:31:e9:4e:
                    ec:d0:ca:d4:3c:61:5e:90:c4:ca:df:9a:ba:3e:7f:
                    fa:46:39:85:3c:a5:c3:de:ac:6a:92:c0:12:8e:e0:
                    09:01:62:01:a4:0c:24:3a:5a:19:83:67:eb:be:bc:
                    ce:bd:6c:e4:58:47:c1:7d:91:fc:7c:ea:f0:df:36:
                    8d:26:92:1d:bb:4d:53:18:44:99:96:4c:b6:30:14:
                    b4:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:5E:BA:49:7C:20:1F:18:43:B0:75:31:F0:F2:A2:14:8A:49:E6:DD
            X509v3 Authority Key Identifier:
                keyid:C6:BD:52:DC:07:98:25:A7:02:D8:74:B5:45:02:AD:13:81:71:62:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/0/C6BD52DC079825A702D874B54502AD138171621D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6BD52DC079825A702D874B54502AD138171621D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/0/323830343a383333633a323030303a3a2f33352d3335203d3e20323732313835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:833c:2000::/35

    Signature Algorithm: sha256WithRSAEncryption
         58:e8:33:af:15:96:09:a5:6e:f9:ed:48:0b:77:17:26:f2:d2:
         6b:0a:4a:06:74:c1:87:b6:25:66:f8:7c:42:bc:18:e6:95:6d:
         cf:38:9b:22:31:6d:bf:28:04:1a:0e:3c:32:2c:80:7d:dd:46:
         a3:6d:5e:81:1c:cc:85:c5:12:e2:a4:76:43:c7:c1:2d:4a:b8:
         e2:71:5b:ed:00:e8:a9:b2:ad:92:25:ce:ee:cd:11:16:df:86:
         61:05:ef:1e:c8:e9:8e:d2:bb:8a:82:df:75:70:f9:1f:05:25:
         c8:c1:47:68:4b:eb:7e:d3:b9:7f:fd:f7:a6:a0:72:cc:0f:a8:
         8c:dc:39:2a:5c:58:78:fd:d7:58:df:d5:54:81:49:f2:0b:2a:
         8a:64:8e:cd:42:fb:08:08:bc:f0:eb:62:60:c6:3f:fe:3f:ca:
         5f:c0:ca:90:a7:76:70:35:bd:c8:b9:c2:cf:9f:04:23:fd:4d:
         02:ac:1d:d0:b1:7b:da:67:9e:63:a4:6c:a4:0b:06:49:37:7e:
         1c:8b:6e:0e:af:1f:be:10:25:3a:55:d0:11:ff:a8:93:f8:11:
         41:f6:a3:0d:12:34:fe:59:ec:3e:ee:2f:74:e7:7b:aa:9f:e8:
         72:de:b3:8e:9e:c4:35:b4:6a:09:a7:25:39:61:ed:96:04:14:
         0b:0b:82:74
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUMgXDxWhYhFcFbqDtxxbj8JaiZ9UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzZCRDUyREMwNzk4MjVBNzAyRDg3NEI1NDUwMkFEMTM4
MTcxNjIxRDAeFw0yMjAzMTYyMDAwMjhaFw0yMzAzMTUyMDA1MjhaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDQ4Q0RBMTE0QTdDMTU4QjdG
QjJDMEMyQTQzNEY0RjY1MzE5MzhCODIyNTkyNDQ4NjM5NDRBRUU1MUFCQUFBRjAx
MUVBMTI3RTkzMzE5QUY5NThBM0UzRkI4NzAwNTI4ODgxQjU0NDBDQzNGNjgyRDBC
Mzg5RTcwNkEwQjIwOTI4NUFBMkFDOTgwQjUyQ0MyOThENUJCRUI5QUJEQzgwODZC
REUyQ0U2NThERTVBMTNDMTUzNjNCMDA1RjYzNzBBRUVCQ0M5MDRCRUIwMEE2OTdE
REFFMTIzNDFBQjVBNTVDMzMwNDBCMEFBMjJGQUE3OEEzREZGMTY4QTMwQUVDMzEz
MzMyNkJGNUM3MjRDRUQyMDlFRDlDMzNGNDFCNzJGQkE3MkIyMDNGNTg3NjIxMEI4
OTlGNzBGRUFBQThFN0E4NzIxOEE3OTRDQThCQjg5MjY2NUFBQjJDMzIwNjNCNTMx
RTk0RUVDRDBDQUQ0M0M2MTVFOTBDNENBREY5QUJBM0U3RkZBNDYzOTg1M0NBNUMz
REVBQzZBOTJDMDEyOEVFMDA5MDE2MjAxQTQwQzI0M0E1QTE5ODM2N0VCQkVCQ0NF
QkQ2Q0U0NTg0N0MxN0Q5MUZDN0NFQUYwREYzNjhEMjY5MjFEQkI0RDUzMTg0NDk5
OTY0Q0I2MzAxNEI0NDEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA1IzaEUp8FYt/ssDCpDT09lMZOLgiWSRIY5RK7lGrqq8BHqEn6TMZ
r5WKPj+4cAUoiBtUQMw/aC0LOJ5wagsgkoWqKsmAtSzCmNW765q9yAhr3izmWN5a
E8FTY7AF9jcK7rzJBL6wCml92uEjQataVcMwQLCqIvqnij3/FoowrsMTMya/XHJM
7SCe2cM/QbcvunKyA/WHYhC4mfcP6qqOeochinlMqLuJJmWqssMgY7Ux6U7s0MrU
PGFekMTK35q6Pn/6RjmFPKXD3qxqksASjuAJAWIBpAwkOloZg2frvrzOvWzkWEfB
fZH8fOrw3zaNJpIdu01TGESZlky2MBS0QQIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FAJeukl8IB8YQ7B1MfDyohSKSebdMB8GA1UdIwQYMBaAFMa9UtwHmCWnAth0tUUC
rROBcWIdMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVNOHVrdVZwY25rOUxX
SlFyN1k5WmlpRkNoYllLN2gzcGNxallKMjlnWnZnLzAvQzZCRDUyREMwNzk4MjVB
NzAyRDg3NEI1NDUwMkFEMTM4MTcxNjIxRC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9DNkJENTJEQzA3OTgyNUE3MDJEODc0QjU0NTAyQUQxMzgxNzE2
MjFELmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby81TTh1a3VWcGNuazlMV0pRcjdZ
OVppaUZDaGJZSzdoM3BjcWpZSjI5Z1p2Zy8wLzMyMzgzMDM0M2EzODMzMzM2MzNh
MzIzMDMwMzAzYTNhMmYzMzM1MmQzMzM1MjAzZDNlMjAzMjM3MzIzMTM4MzUucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgUoBIM8IDANBgkqhkiG9w0BAQsFAAOCAQEAWOgzrxWWCaVu+e1IC3cX
JvLSawpKBnTBh7YlZvh8QrwY5pVtzzibIjFtvygEGg48MiyAfd1Go21egRzMhcUS
4qR2Q8fBLUq44nFb7QDoqbKtkiXO7s0RFt+GYQXvHsjpjtK7ioLfdXD5HwUlyMFH
aEvrftO5f/33pqByzA+ojNw5KlxYeP3XWN/VVIFJ8gsqimSOzUL7CAi88OtiYMY/
/j/KX8DKkKd2cDW9yLnCz58EI/1NAqwd0LF72meeY6RspAsGSTd+HItuDq8fvhAl
OlXQEf+ok/gRQfajDRI0/lnsPu4vdOd7qp/oct6zjp7ENbRqCaclOWHtlgQUCwuC
dA==
-----END CERTIFICATE-----
Generated at Thu Mar 13 09:18:51 2025 by rpki-client