Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/0/323830343a336465633a383030303a3a2f33332d3333203d3e20323636353633.roa
File:                     323830343a336465633a383030303a3a2f33332d3333203d3e20323636353633.roa (raw, json)
Hash identifier:          bttKK/1um6kYMldqLRARZb8wPySl91ieUZN1AGm3AzI=
Subject key identifier:   E8:94:00:F3:76:C8:2C:27:98:26:B4:2B:9F:6C:3E:22:D4:BE:25:5C
Certificate issuer:       /CN=2A83403E3F327DC79717B586A2AFD087B2A92076
Certificate serial:       63CCA25A8D23066192A3B279872E3CD8BE753501
Authority key identifier: 2A:83:40:3E:3F:32:7D:C7:97:17:B5:86:A2:AF:D0:87:B2:A9:20:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A83403E3F327DC79717B586A2AFD087B2A92076.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/0/323830343a336465633a383030303a3a2f33332d3333203d3e20323636353633.roa
Signing time:             Thu 08 Dec 2022 13:00:00 +0000
ROA not before:           Thu 08 Dec 2022 12:55:00 +0000
ROA not after:            Thu 07 Dec 2023 13:00:00 +0000
asID:                     266563
IP address blocks:        2804:3dec:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:cc:a2:5a:8d:23:06:61:92:a3:b2:79:87:2e:3c:d8:be:75:35:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A83403E3F327DC79717B586A2AFD087B2A92076
        Validity
            Not Before: Dec  8 12:55:00 2022 GMT
            Not After : Dec  7 13:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:dd:0f:e3:6c:b9:e7:c4:bc:55:b3:b1:8a:6d:
                    0e:fa:cf:ce:50:b7:63:a8:6d:3f:0f:95:b6:ee:2f:
                    f9:c4:ed:1c:f8:e5:a0:c2:43:15:79:6b:1c:84:69:
                    25:f4:08:70:db:74:f1:84:46:f5:a2:74:0b:97:16:
                    24:3e:db:16:1d:43:f2:d7:58:b7:12:2f:2c:db:8b:
                    7d:a7:26:94:2b:ad:ec:d5:14:41:20:d5:fb:ae:31:
                    60:58:4f:c9:bd:78:af:94:19:3e:b0:3d:1c:42:83:
                    97:6e:d6:2c:89:9d:e3:3d:32:80:d4:47:0e:82:9a:
                    4f:cb:cd:e3:28:d6:bc:0b:fa:92:29:d7:ae:85:43:
                    23:4e:d0:8e:cb:c8:54:5f:aa:5d:5d:b0:36:14:76:
                    1e:75:75:a2:c0:0a:84:fc:da:c9:43:81:99:52:65:
                    cc:23:b2:d9:3b:32:2e:28:09:db:4f:31:e7:e4:f2:
                    c3:2a:cc:5e:72:c8:ba:28:ef:4c:9e:0b:43:a4:c8:
                    dc:bc:5c:c4:39:51:fe:60:8e:fe:33:e3:fb:c3:bd:
                    55:61:54:13:af:61:d7:f2:e9:f8:d5:3c:32:42:d6:
                    11:6d:9b:1e:46:8b:c1:ab:da:d4:60:dc:55:48:17:
                    51:b9:90:e7:ac:4e:7d:d4:2c:56:ca:24:56:63:59:
                    44:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:94:00:F3:76:C8:2C:27:98:26:B4:2B:9F:6C:3E:22:D4:BE:25:5C
            X509v3 Authority Key Identifier:
                keyid:2A:83:40:3E:3F:32:7D:C7:97:17:B5:86:A2:AF:D0:87:B2:A9:20:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/0/2A83403E3F327DC79717B586A2AFD087B2A92076.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A83403E3F327DC79717B586A2AFD087B2A92076.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/0/323830343a336465633a383030303a3a2f33332d3333203d3e20323636353633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3dec:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         3b:16:20:95:ec:bc:57:f7:55:44:e9:9f:54:05:3c:ed:14:ef:
         97:ef:41:b3:b0:35:f8:48:42:68:ba:3d:7c:fa:3e:2d:e9:0a:
         ec:ef:33:5d:c8:4a:f8:aa:7c:58:ec:40:0c:ee:48:48:91:58:
         d8:b9:02:c1:a4:de:a2:41:ad:17:c6:dc:d3:b4:eb:16:fa:6f:
         da:87:3a:59:e0:1a:0e:a6:fa:29:7e:34:40:a7:38:83:8a:cc:
         22:19:1a:1c:f0:9f:4c:73:18:ba:e4:0b:ad:c0:fe:2b:93:fa:
         f1:a5:03:76:a1:be:b9:05:3a:90:40:6a:28:04:c7:99:0e:94:
         64:a0:dc:1b:81:46:90:16:b5:5a:b4:66:9e:a9:ca:f7:6c:51:
         65:92:d6:7d:78:6d:8b:6f:eb:4a:61:c0:80:0b:84:51:a8:06:
         57:6b:b2:82:34:28:7a:82:ba:2e:f1:28:2d:49:17:79:fe:d2:
         64:12:f3:5d:7e:c0:34:2d:6e:de:1d:77:7f:85:c1:ef:a0:e2:
         b4:6a:64:1a:15:29:6c:47:26:ca:9a:ac:c7:06:a1:39:fa:a7:
         30:94:e2:48:e3:78:35:f1:a8:38:f1:7c:a4:96:eb:e9:77:f3:
         9f:72:36:44:3c:bc:d6:eb:59:58:ae:1b:ec:95:fb:74:a8:e6:
         d0:b6:dc:63
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUY8yiWo0jBmGSo7J5hy482L51NQEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkE4MzQwM0UzRjMyN0RDNzk3MTdCNTg2QTJBRkQwODdC
MkE5MjA3NjAeFw0yMjEyMDgxMjU1MDBaFw0yMzEyMDcxMzAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkJERDBGRTM2Q0I5RTdDNEJD
NTVCM0IxOEE2RDBFRkFDRkNFNTBCNzYzQTg2RDNGMEY5NUI2RUUyRkY5QzRFRDFD
RjhFNUEwQzI0MzE1Nzk2QjFDODQ2OTI1RjQwODcwREI3NEYxODQ0NkY1QTI3NDBC
OTcxNjI0M0VEQjE2MUQ0M0YyRDc1OEI3MTIyRjJDREI4QjdEQTcyNjk0MkJBREVD
RDUxNDQxMjBENUZCQUUzMTYwNTg0RkM5QkQ3OEFGOTQxOTNFQjAzRDFDNDI4Mzk3
NkVENjJDODk5REUzM0QzMjgwRDQ0NzBFODI5QTRGQ0JDREUzMjhENkJDMEJGQTky
MjlEN0FFODU0MzIzNEVEMDhFQ0JDODU0NUZBQTVENURCMDM2MTQ3NjFFNzU3NUEy
QzAwQTg0RkNEQUM5NDM4MTk5NTI2NUNDMjNCMkQ5M0IzMjJFMjgwOURCNEYzMUU3
RTRGMkMzMkFDQzVFNzJDOEJBMjhFRjRDOUUwQjQzQTRDOERDQkM1Q0M0Mzk1MUZF
NjA4RUZFMzNFM0ZCQzNCRDU1NjE1NDEzQUY2MUQ3RjJFOUY4RDUzQzMyNDJENjEx
NkQ5QjFFNDY4QkMxQUJEQUQ0NjBEQzU1NDgxNzUxQjk5MEU3QUM0RTdERDQyQzU2
Q0EyNDU2NjM1OTQ0Q0QwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAu90P42y558S8VbOxim0O+s/OULdjqG0/D5W27i/5xO0c+OWgwkMV
eWschGkl9Ahw23TxhEb1onQLlxYkPtsWHUPy11i3Ei8s24t9pyaUK63s1RRBINX7
rjFgWE/JvXivlBk+sD0cQoOXbtYsiZ3jPTKA1EcOgppPy83jKNa8C/qSKdeuhUMj
TtCOy8hUX6pdXbA2FHYedXWiwAqE/NrJQ4GZUmXMI7LZOzIuKAnbTzHn5PLDKsxe
csi6KO9MngtDpMjcvFzEOVH+YI7+M+P7w71VYVQTr2HX8un41TwyQtYRbZseRovB
q9rUYNxVSBdRuZDnrE591CxWyiRWY1lEzQIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FOiUAPN2yCwnmCa0K59sPiLUviVcMB8GA1UdIwQYMBaAFCqDQD4/Mn3Hlxe1hqKv
0IeyqSB2MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVxYmlUNlJNcDl0aENu
MUdvZlVhUHFoTDdTd1ZaeFU2WFY1R1l1TjlzOEJvLzAvMkE4MzQwM0UzRjMyN0RD
Nzk3MTdCNTg2QTJBRkQwODdCMkE5MjA3Ni5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8yQTgzNDAzRTNGMzI3REM3OTcxN0I1ODZBMkFGRDA4N0IyQTky
MDc2LmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby81cWJpVDZSTXA5dGhDbjFHb2ZV
YVBxaEw3U3dWWnhVNlhWNUdZdU45czhCby8wLzMyMzgzMDM0M2EzMzY0NjU2MzNh
MzgzMDMwMzAzYTNhMmYzMzMzMmQzMzMzMjAzZDNlMjAzMjM2MzYzNTM2MzMucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgcoBD3sgDANBgkqhkiG9w0BAQsFAAOCAQEAOxYgley8V/dVROmfVAU8
7RTvl+9Bs7A1+EhCaLo9fPo+LekK7O8zXchK+Kp8WOxADO5ISJFY2LkCwaTeokGt
F8bc07TrFvpv2oc6WeAaDqb6KX40QKc4g4rMIhkaHPCfTHMYuuQLrcD+K5P68aUD
dqG+uQU6kEBqKATHmQ6UZKDcG4FGkBa1WrRmnqnK92xRZZLWfXhti2/rSmHAgAuE
UagGV2uygjQoeoK6LvEoLUkXef7SZBLzXX7ANC1u3h13f4XB76DitGpkGhUpbEcm
ypqsxwahOfqnMJTiSON4NfGoOPF8pJbr6Xfzn3I2RDy81utZWK4b7JX7dKjm0Lbc
Yw==
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:36:03 2025 by rpki-client