Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/0/323830343a353836343a383030303a3a2f33342d3334203d3e20323638313236.roa
File:                     323830343a353836343a383030303a3a2f33342d3334203d3e20323638313236.roa (raw, json)
Hash identifier:          Zf7GaPB2eRfIDKs+4xVAGv0+lsEqYSoeL96wOvOR/TU=
Subject key identifier:   6F:14:8C:39:CF:6D:69:96:9E:8B:19:88:19:2C:C7:A6:5A:09:41:3B
Certificate issuer:       /CN=088019DAB11676C4E95DB6D45B7C4B1E6AA1CB64
Certificate serial:       06355EBA255B8CFCB4D6522A6E4B98BA86CA3CB3
Authority key identifier: 08:80:19:DA:B1:16:76:C4:E9:5D:B6:D4:5B:7C:4B:1E:6A:A1:CB:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/088019DAB11676C4E95DB6D45B7C4B1E6AA1CB64.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/0/323830343a353836343a383030303a3a2f33342d3334203d3e20323638313236.roa
Signing time:             Sat 08 Apr 2023 15:16:39 +0000
ROA not before:           Sat 08 Apr 2023 15:11:39 +0000
ROA not after:            Sat 06 Apr 2024 15:16:39 +0000
asID:                     268126
IP address blocks:        2804:5864:8000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:35:5e:ba:25:5b:8c:fc:b4:d6:52:2a:6e:4b:98:ba:86:ca:3c:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088019DAB11676C4E95DB6D45B7C4B1E6AA1CB64
        Validity
            Not Before: Apr  8 15:11:39 2023 GMT
            Not After : Apr  6 15:16:39 2024 GMT
        Subject: CN=6F148C39CF6D69969E8B1988192CC7A65A09413B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e5:43:84:e2:e9:5f:47:80:91:09:07:c1:b4:
                    7c:0e:9c:d6:36:ec:d5:c0:17:17:6b:ea:de:ed:e4:
                    66:bc:4d:dc:3e:f9:dd:20:3c:6d:c9:9b:4d:f8:e1:
                    34:bf:b7:87:bb:1c:73:56:8d:53:ad:c1:90:21:a9:
                    59:8a:51:b2:af:2b:be:11:48:0a:eb:7a:fc:14:3c:
                    79:88:08:cf:b0:8d:b3:ec:df:6b:75:a5:b4:92:dc:
                    3a:a5:b1:db:aa:5f:af:2f:da:bb:40:1e:52:f9:b5:
                    91:a4:10:d8:0c:ee:76:bd:1c:b5:d1:ca:90:bc:cc:
                    ca:a2:af:0e:8f:76:e8:0d:84:4a:0a:70:62:85:c7:
                    09:0a:15:9d:02:00:79:6a:b4:d5:dd:7f:c7:3d:e9:
                    1b:e2:4d:6b:72:d4:ff:aa:1b:64:b7:88:f7:bb:3b:
                    df:8c:c7:b3:3a:2e:88:f9:ae:d1:5c:e3:b1:9a:04:
                    36:1a:11:e3:f1:d6:de:9a:3f:a7:a7:a9:3a:06:a4:
                    cb:25:c7:31:aa:d7:a9:74:7c:38:3a:31:0a:9a:45:
                    db:31:44:e7:62:9a:09:7b:5d:61:68:f6:68:a4:05:
                    b7:2d:36:a2:4f:57:0f:5b:ee:b2:9a:01:fc:ad:d2:
                    b3:fd:ff:6a:7b:58:82:3a:59:f8:48:fc:14:54:19:
                    50:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:14:8C:39:CF:6D:69:96:9E:8B:19:88:19:2C:C7:A6:5A:09:41:3B
            X509v3 Authority Key Identifier:
                keyid:08:80:19:DA:B1:16:76:C4:E9:5D:B6:D4:5B:7C:4B:1E:6A:A1:CB:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/0/088019DAB11676C4E95DB6D45B7C4B1E6AA1CB64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/088019DAB11676C4E95DB6D45B7C4B1E6AA1CB64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/0/323830343a353836343a383030303a3a2f33342d3334203d3e20323638313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5864:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         75:7b:b8:6c:e3:24:0d:d2:d0:e2:a2:30:74:03:56:23:bb:95:
         12:49:bb:be:c1:ab:c4:25:93:1e:28:57:46:12:d6:13:2f:76:
         89:bc:f1:6a:a9:f5:ef:a6:e7:25:2c:27:db:6a:5c:0a:5c:f1:
         0a:0f:6d:c4:6f:fc:35:4a:a3:d7:d7:55:8c:75:7e:86:22:12:
         42:a3:98:82:15:11:46:fe:31:a2:a7:77:e6:57:46:d8:04:7e:
         bb:87:d7:19:a5:c3:84:01:4c:4a:22:c2:ff:5b:3a:de:82:33:
         be:cd:b4:d7:66:fd:4a:0b:59:d5:9f:0b:69:cc:7e:f3:8f:f4:
         8d:c7:b6:d5:18:83:dd:19:8c:46:e4:d4:83:eb:06:32:4b:31:
         80:bc:44:bf:ff:70:a3:00:cb:d8:a9:33:2e:68:80:63:5f:f1:
         e4:80:40:9f:69:17:d8:12:80:b5:91:ca:23:c4:b9:1f:60:db:
         75:98:a5:a7:d7:8b:46:57:2b:fc:62:25:46:2c:da:48:9e:a9:
         3f:62:6e:5c:a0:27:fe:9c:4b:04:8d:e0:7d:ad:37:21:4e:ee:
         84:35:fe:3a:ad:e3:65:3e:32:05:ea:51:93:6b:2a:63:8f:ad:
         33:e5:5b:54:b8:d4:70:fe:3a:9c:40:bd:e4:33:36:f2:43:b0:
         44:8b:c3:c6
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUBjVeuiVbjPy01lIqbkuYuobKPLMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg4MDE5REFCMTE2NzZDNEU5NURCNkQ0NUI3QzRCMUU2
QUExQ0I2NDAeFw0yMzA0MDgxNTExMzlaFw0yNDA0MDYxNTE2MzlaMDMxMTAvBgNV
BAMTKDZGMTQ4QzM5Q0Y2RDY5OTY5RThCMTk4ODE5MkNDN0E2NUEwOTQxM0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn5UOE4ulfR4CRCQfBtHwOnNY2
7NXAFxdr6t7t5Ga8Tdw++d0gPG3Jm0344TS/t4e7HHNWjVOtwZAhqVmKUbKvK74R
SArrevwUPHmICM+wjbPs32t1pbSS3DqlsduqX68v2rtAHlL5tZGkENgM7na9HLXR
ypC8zMqirw6PdugNhEoKcGKFxwkKFZ0CAHlqtNXdf8c96RviTWty1P+qG2S3iPe7
O9+Mx7M6Loj5rtFc47GaBDYaEePx1t6aP6enqToGpMslxzGq16l0fDg6MQqaRdsx
ROdimgl7XWFo9mikBbctNqJPVw9b7rKaAfyt0rP9/2p7WII6WfhI/BRUGVARAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUbxSMOc9taZaeixmIGSzHploJQTswHwYDVR0j
BBgwFoAUCIAZ2rEWdsTpXbbUW3xLHmqhy2QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXdNcWZ6WVBIWXJtY2tVYlAxZHRNUXluOFR4M1F1aDU3TlNhMkZna1Vh
akEvMC8wODgwMTlEQUIxMTY3NkM0RTk1REI2RDQ1QjdDNEIxRTZBQTFDQjY0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzA4ODAxOURBQjExNjc2QzRF
OTVEQjZENDVCN0M0QjFFNkFBMUNCNjQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV3TXFmellQSFlybWNrVWJQMWR0TVF5bjhUeDNRdWg1N05TYTJGZ2tVYWpBLzAv
MzIzODMwMzQzYTM1MzgzNjM0M2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzODMxMzIzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEWGSAMA0GCSqGSIb3DQEBCwUA
A4IBAQB1e7hs4yQN0tDiojB0A1Yju5USSbu+wavEJZMeKFdGEtYTL3aJvPFqqfXv
puclLCfbalwKXPEKD23Eb/w1SqPX11WMdX6GIhJCo5iCFRFG/jGip3fmV0bYBH67
h9cZpcOEAUxKIsL/WzregjO+zbTXZv1KC1nVnwtpzH7zj/SNx7bVGIPdGYxG5NSD
6wYySzGAvES//3CjAMvYqTMuaIBjX/HkgECfaRfYEoC1kcojxLkfYNt1mKWn14tG
Vyv8YiVGLNpInqk/Ym5coCf+nEsEjeB9rTchTu6ENf46reNlPjIF6lGTaypjj60z
5VtUuNRw/jqcQL3kMzbyQ7BEi8PG
-----END CERTIFICATE-----
Generated at Wed Apr 16 05:14:16 2025 by rpki-client