Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/323830343a373636383a3a2f33322d3332203d3e20323731313130.roa
File:                     323830343a373636383a3a2f33322d3332203d3e20323731313130.roa (raw, json)
Hash identifier:          oCTKxmiwEUqToQ0dmhDjw9ywcmxLjP/0HtwlC0RfLMk=
Subject key identifier:   CE:8B:60:72:6C:85:48:BD:5C:FD:F3:75:4B:1C:9F:DC:98:A2:7F:60
Certificate issuer:       /CN=8525A6BC54DB2BC4E1439EF172B907CDEF59A2FE
Certificate serial:       3F2E3F3ED8E1680F1A52AED0928C326A5D375C9E
Authority key identifier: 85:25:A6:BC:54:DB:2B:C4:E1:43:9E:F1:72:B9:07:CD:EF:59:A2:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8525A6BC54DB2BC4E1439EF172B907CDEF59A2FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/323830343a373636383a3a2f33322d3332203d3e20323731313130.roa
Signing time:             Thu 21 Jul 2022 20:07:39 +0000
ROA not before:           Thu 21 Jul 2022 20:02:39 +0000
ROA not after:            Thu 20 Jul 2023 20:07:39 +0000
asID:                     271110
IP address blocks:        2804:7668::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:2e:3f:3e:d8:e1:68:0f:1a:52:ae:d0:92:8c:32:6a:5d:37:5c:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8525A6BC54DB2BC4E1439EF172B907CDEF59A2FE
        Validity
            Not Before: Jul 21 20:02:39 2022 GMT
            Not After : Jul 20 20:07:39 2023 GMT
        Subject: CN=CE8B60726C8548BD5CFDF3754B1C9FDC98A27F60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:fb:c3:8e:d2:f0:7a:d8:76:ac:8d:d2:d7:67:
                    49:ec:42:6a:6a:31:64:d0:75:62:ce:46:03:06:18:
                    4c:53:8d:c3:ef:8a:10:8f:95:1d:fd:22:25:86:3e:
                    12:19:42:57:75:a5:99:86:fe:4b:2d:19:ce:da:52:
                    d9:dd:cd:dd:07:59:f9:02:00:cd:3a:f5:7b:8b:d0:
                    5f:b0:f4:2c:50:76:81:ae:99:5c:1c:1b:cb:eb:f2:
                    db:1b:33:56:23:31:32:2f:96:40:3d:12:1f:7c:6c:
                    c5:ac:b8:1f:71:ea:05:b7:4d:a1:d0:6b:6f:66:cf:
                    14:3f:7f:8c:d6:f2:d3:cc:90:3b:b3:d0:74:b5:ef:
                    ec:67:b4:37:35:69:da:1a:33:ea:18:2b:78:f1:9e:
                    cc:a0:fc:5c:7e:96:41:60:e9:50:ce:32:66:68:29:
                    39:db:f0:5f:63:d8:e9:c3:7b:7f:6f:be:fb:ef:04:
                    78:04:ad:e8:f5:36:9a:c8:0b:5c:b4:70:89:9f:e1:
                    24:e6:12:40:29:16:ec:42:8e:d8:09:63:83:41:95:
                    86:c2:a8:20:c9:5b:b0:15:e6:d7:93:44:1a:77:c8:
                    26:88:da:dc:f7:d8:52:ac:8c:81:aa:ce:cd:a4:d6:
                    64:9e:c7:fa:58:78:57:8a:e2:da:a6:62:57:ad:e8:
                    66:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:8B:60:72:6C:85:48:BD:5C:FD:F3:75:4B:1C:9F:DC:98:A2:7F:60
            X509v3 Authority Key Identifier:
                keyid:85:25:A6:BC:54:DB:2B:C4:E1:43:9E:F1:72:B9:07:CD:EF:59:A2:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/8525A6BC54DB2BC4E1439EF172B907CDEF59A2FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8525A6BC54DB2BC4E1439EF172B907CDEF59A2FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/323830343a373636383a3a2f33322d3332203d3e20323731313130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7668::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:80:2c:5a:12:bc:01:67:63:83:fc:7a:4f:27:0f:08:bc:2e:
         97:92:9b:d0:b7:55:4f:6c:7b:70:64:df:dd:30:f0:eb:f6:27:
         87:42:42:41:42:8b:9e:51:c4:9a:42:6e:0d:8d:8b:17:c6:30:
         21:1c:27:26:1b:5a:2b:b0:11:8e:7b:32:93:17:70:e8:b5:c2:
         de:bd:a8:ad:8a:36:f7:93:80:09:7d:78:07:f9:59:c5:50:1f:
         0a:6c:cf:8a:85:cf:da:89:bf:25:50:b6:65:11:4b:a1:42:81:
         d5:1d:65:47:6a:b3:56:9c:49:b7:4f:63:43:10:3d:31:14:4b:
         27:f0:68:82:00:eb:ee:b3:18:4a:9e:be:f2:a6:cb:7d:30:d0:
         71:3d:08:d1:d4:5f:ee:fe:33:f1:81:4e:a6:34:9b:39:c7:62:
         e4:6c:7f:ef:92:c0:5e:07:f7:7d:40:23:40:fc:9b:10:4f:63:
         f6:cd:3b:d5:3b:71:47:4c:7a:b7:97:84:d0:d6:89:60:93:84:
         5b:9a:da:74:5d:31:fb:85:e0:dd:95:66:2c:27:a3:41:96:6f:
         9a:02:16:8f:0d:cb:4f:8c:76:ba:48:6e:ac:80:19:41:c0:c9:
         de:b6:c8:be:3d:31:73:17:c8:40:65:a6:52:68:cd:de:af:78:
         23:09:68:e8
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUPy4/PtjhaA8aUq7Qkowyal03XJ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODUyNUE2QkM1NERCMkJDNEUxNDM5RUYxNzJCOTA3Q0RF
RjU5QTJGRTAeFw0yMjA3MjEyMDAyMzlaFw0yMzA3MjAyMDA3MzlaMDMxMTAvBgNV
BAMTKENFOEI2MDcyNkM4NTQ4QkQ1Q0ZERjM3NTRCMUM5RkRDOThBMjdGNjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX+8OO0vB62HasjdLXZ0nsQmpq
MWTQdWLORgMGGExTjcPvihCPlR39IiWGPhIZQld1pZmG/kstGc7aUtndzd0HWfkC
AM069XuL0F+w9CxQdoGumVwcG8vr8tsbM1YjMTIvlkA9Eh98bMWsuB9x6gW3TaHQ
a29mzxQ/f4zW8tPMkDuz0HS17+xntDc1adoaM+oYK3jxnsyg/Fx+lkFg6VDOMmZo
KTnb8F9j2OnDe39vvvvvBHgErej1NprIC1y0cImf4STmEkApFuxCjtgJY4NBlYbC
qCDJW7AV5teTRBp3yCaI2tz32FKsjIGqzs2k1mSex/pYeFeK4tqmYlet6GZZAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUzotgcmyFSL1c/fN1Sxyf3Jiif2AwHwYDVR0j
BBgwFoAUhSWmvFTbK8ThQ57xcrkHze9Zov4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNW9tVXRDYVVSRjNhdHVIdXhDNnNEVnNTNUVhRFVxY0daZVg4aFNvQXVx
bWkvMC84NTI1QTZCQzU0REIyQkM0RTE0MzlFRjE3MkI5MDdDREVGNTlBMkZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzg1MjVBNkJDNTREQjJCQzRF
MTQzOUVGMTcyQjkwN0NERUY1OUEyRkUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVvbVV0Q2FVUkYzYXR1SHV4QzZzRFZzUzVFYURVcWNHWmVYOGhTb0F1cW1pLzAv
MzIzODMwMzQzYTM3MzYzNjM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMx
MzEzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAR2aDANBgkqhkiG9w0BAQsFAAOCAQEAk4AsWhK8
AWdjg/x6TycPCLwul5Kb0LdVT2x7cGTf3TDw6/Ynh0JCQUKLnlHEmkJuDY2LF8Yw
IRwnJhtaK7ARjnsykxdw6LXC3r2orYo295OACX14B/lZxVAfCmzPioXP2om/JVC2
ZRFLoUKB1R1lR2qzVpxJt09jQxA9MRRLJ/BoggDr7rMYSp6+8qbLfTDQcT0I0dRf
7v4z8YFOpjSbOcdi5Gx/75LAXgf3fUAjQPybEE9j9s071TtxR0x6t5eE0NaJYJOE
W5radF0x+4Xg3ZVmLCejQZZvmgIWjw3LT4x2ukhurIAZQcDJ3rbIvj0xcxfIQGWm
UmjN3q94Iwlo6A==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:26:27 2025 by rpki-client