Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/0/323830343a353836343a3a2f33322d3336203d3e20323638313236.roa
File:                     323830343a353836343a3a2f33322d3336203d3e20323638313236.roa (raw, json)
Hash identifier:          dnuhHucR4TtJWuVcywKhkNu30hiaXGKy5CshIG8RZdw=
Subject key identifier:   49:F3:85:D4:C3:5B:CE:00:E8:9A:D9:42:A7:DA:25:E1:18:5D:F4:73
Certificate issuer:       /CN=7DDD1BAC7F4B720D346ADC0831C599B7146A832A
Certificate serial:       6116EBAC8EBE7CEC2ED812FE7644BB4B150E6BAB
Authority key identifier: 7D:DD:1B:AC:7F:4B:72:0D:34:6A:DC:08:31:C5:99:B7:14:6A:83:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7DDD1BAC7F4B720D346ADC0831C599B7146A832A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/0/323830343a353836343a3a2f33322d3336203d3e20323638313236.roa
Signing time:             Mon 23 Jan 2023 17:55:41 +0000
ROA not before:           Mon 23 Jan 2023 17:50:41 +0000
ROA not after:            Mon 22 Jan 2024 17:55:41 +0000
asID:                     268126
IP address blocks:        2804:5864::/32 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:16:eb:ac:8e:be:7c:ec:2e:d8:12:fe:76:44:bb:4b:15:0e:6b:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DDD1BAC7F4B720D346ADC0831C599B7146A832A
        Validity
            Not Before: Jan 23 17:50:41 2023 GMT
            Not After : Jan 22 17:55:41 2024 GMT
        Subject: CN=49F385D4C35BCE00E89AD942A7DA25E1185DF473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2a:53:42:10:38:c2:f3:19:e1:f8:e6:31:b4:
                    bb:62:bd:fe:ac:49:58:9a:c7:d9:22:fd:10:2e:79:
                    d2:81:8a:f1:9e:09:68:dc:89:5c:ad:45:20:88:69:
                    e4:35:80:21:c9:41:a4:73:88:e1:ec:fd:d1:b5:4d:
                    60:f7:61:10:df:cb:bd:55:ed:92:8c:39:be:19:79:
                    61:fb:06:c2:23:d5:fe:91:14:6f:f0:5f:79:89:6b:
                    2b:d7:54:e5:5e:fc:16:8c:b5:15:44:5f:3f:40:c0:
                    77:d2:4a:6b:89:60:4e:0d:b0:82:a0:4c:3b:7f:85:
                    53:24:a4:e3:03:9c:ae:72:3c:c9:0e:0b:62:97:3d:
                    05:18:60:94:8a:d9:e6:32:c0:c3:a5:bc:d1:ab:bc:
                    2c:a5:e7:6e:e0:cb:ca:af:3e:c9:bc:8a:22:d5:31:
                    3f:c0:28:32:ea:54:6c:56:32:c5:4b:47:fa:c3:78:
                    55:95:f1:16:05:28:ef:c8:d0:e3:96:bf:2f:2c:d2:
                    49:c5:4d:37:5b:9a:d2:d2:29:09:07:65:fd:20:cd:
                    99:35:0c:35:93:c3:88:54:92:25:f3:70:67:46:57:
                    bc:2e:aa:48:6b:5a:48:e7:be:ff:24:0b:de:49:a2:
                    d7:9f:b9:c7:13:fb:a0:f9:f8:87:01:77:8a:91:54:
                    6d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:F3:85:D4:C3:5B:CE:00:E8:9A:D9:42:A7:DA:25:E1:18:5D:F4:73
            X509v3 Authority Key Identifier:
                keyid:7D:DD:1B:AC:7F:4B:72:0D:34:6A:DC:08:31:C5:99:B7:14:6A:83:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/0/7DDD1BAC7F4B720D346ADC0831C599B7146A832A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7DDD1BAC7F4B720D346ADC0831C599B7146A832A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/0/323830343a353836343a3a2f33322d3336203d3e20323638313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5864::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:c0:b6:ab:4b:f6:57:ec:0a:93:c6:65:38:17:c7:55:8e:e3:
         1b:fb:49:62:10:7d:ca:d8:df:d3:4a:e5:ff:10:31:e6:4d:f7:
         fa:8f:57:1b:cd:a3:5a:54:ba:62:92:8e:94:0e:25:b8:4f:11:
         b5:61:84:71:5d:40:96:01:d4:dc:8e:c7:d0:28:81:65:00:32:
         c8:f6:23:01:71:d7:00:97:bd:9b:f5:b8:a5:87:f7:58:25:e9:
         c6:e5:07:3d:f1:e3:0e:f0:55:a9:9f:1e:af:17:e4:64:64:01:
         f1:12:67:87:b5:11:3f:cd:28:82:dc:58:db:a3:18:3d:ba:a6:
         72:fe:c6:b7:4f:d6:97:6c:e7:e4:93:d2:5c:13:f4:2b:90:0e:
         00:48:e9:35:85:da:da:bb:1e:e6:f1:5e:44:5a:2f:31:d3:8e:
         53:22:bd:a6:d1:d5:65:47:9f:02:1d:1b:f0:61:c5:66:0a:cf:
         68:1b:fd:17:dc:b1:38:c8:79:13:cc:9c:22:cb:58:b8:9b:92:
         60:2a:1f:79:21:0e:c7:45:6c:9b:c6:f8:7e:a9:3a:06:99:77:
         a4:e2:ed:53:43:c7:4a:03:13:06:2e:45:7e:00:07:2f:40:ce:
         62:7a:18:90:bd:bd:89:1a:16:bd:12:d1:71:da:45:9b:d7:3f:
         31:6f:06:56
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUYRbrrI6+fOwu2BL+dkS7SxUOa6swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0RERDFCQUM3RjRCNzIwRDM0NkFEQzA4MzFDNTk5Qjcx
NDZBODMyQTAeFw0yMzAxMjMxNzUwNDFaFw0yNDAxMjIxNzU1NDFaMDMxMTAvBgNV
BAMTKDQ5RjM4NUQ0QzM1QkNFMDBFODlBRDk0MkE3REEyNUUxMTg1REY0NzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWKlNCEDjC8xnh+OYxtLtivf6s
SViax9ki/RAuedKBivGeCWjciVytRSCIaeQ1gCHJQaRziOHs/dG1TWD3YRDfy71V
7ZKMOb4ZeWH7BsIj1f6RFG/wX3mJayvXVOVe/BaMtRVEXz9AwHfSSmuJYE4NsIKg
TDt/hVMkpOMDnK5yPMkOC2KXPQUYYJSK2eYywMOlvNGrvCyl527gy8qvPsm8iiLV
MT/AKDLqVGxWMsVLR/rDeFWV8RYFKO/I0OOWvy8s0knFTTdbmtLSKQkHZf0gzZk1
DDWTw4hUkiXzcGdGV7wuqkhrWkjnvv8kC95JotefuccT+6D5+IcBd4qRVG3hAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUSfOF1MNbzgDomtlCp9ol4Rhd9HMwHwYDVR0j
BBgwFoAUfd0brH9Lcg00atwIMcWZtxRqgyowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXdNcWZ6WVBIWXJtY2tVYlAxZHRNUXluOFR4M1F1aDU3TlNhMkZna1Vh
akEvMC83REREMUJBQzdGNEI3MjBEMzQ2QURDMDgzMUM1OTlCNzE0NkE4MzJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzdEREQxQkFDN0Y0QjcyMEQz
NDZBREMwODMxQzU5OUI3MTQ2QTgzMkEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV3TXFmellQSFlybWNrVWJQMWR0TVF5bjhUeDNRdWg1N05TYTJGZ2tVYWpBLzAv
MzIzODMwMzQzYTM1MzgzNjM0M2EzYTJmMzMzMjJkMzMzNjIwM2QzZTIwMzIzNjM4
MzEzMjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARYZDANBgkqhkiG9w0BAQsFAAOCAQEAQMC2q0v2
V+wKk8ZlOBfHVY7jG/tJYhB9ytjf00rl/xAx5k33+o9XG82jWlS6YpKOlA4luE8R
tWGEcV1AlgHU3I7H0CiBZQAyyPYjAXHXAJe9m/W4pYf3WCXpxuUHPfHjDvBVqZ8e
rxfkZGQB8RJnh7URP80ogtxY26MYPbqmcv7Gt0/Wl2zn5JPSXBP0K5AOAEjpNYXa
2rse5vFeRFovMdOOUyK9ptHVZUefAh0b8GHFZgrPaBv9F9yxOMh5E8ycIstYuJuS
YCofeSEOx0Vsm8b4fqk6Bpl3pOLtU0PHSgMTBi5FfgAHL0DOYnoYkL29iRoWvRLR
cdpFm9c/MW8GVg==
-----END CERTIFICATE-----
Generated at Wed Apr 16 05:14:20 2025 by rpki-client