Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/323830343a3737343a613130303a3a2f34302d3430203d3e203532383538.roa
File:                     323830343a3737343a613130303a3a2f34302d3430203d3e203532383538.roa (raw, json)
Hash identifier:          Y3S4x55WEPR2zHZ6i0KiAMPFBgMKSZd0y+V6fX71Vjo=
Subject key identifier:   EB:60:CD:FE:A2:A5:74:99:A7:F8:93:D8:11:D4:9E:6C:95:BE:96:89
Certificate issuer:       /CN=4765DF83369720EE1AF514C7CA6660A475D18592
Certificate serial:       5B761F52B795799605BFD89C2F0DB57C38ED2990
Authority key identifier: 47:65:DF:83:36:97:20:EE:1A:F5:14:C7:CA:66:60:A4:75:D1:85:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4765DF83369720EE1AF514C7CA6660A475D18592.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/323830343a3737343a613130303a3a2f34302d3430203d3e203532383538.roa
Signing time:             Thu 06 Mar 2025 04:33:08 +0000
ROA not before:           Thu 06 Mar 2025 04:28:08 +0000
ROA not after:            Thu 05 Mar 2026 04:33:08 +0000
asID:                     52858
IP address blocks:        2804:774:a100::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:76:1f:52:b7:95:79:96:05:bf:d8:9c:2f:0d:b5:7c:38:ed:29:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4765DF83369720EE1AF514C7CA6660A475D18592
        Validity
            Not Before: Mar  6 04:28:08 2025 GMT
            Not After : Mar  5 04:33:08 2026 GMT
        Subject: CN=EB60CDFEA2A57499A7F893D811D49E6C95BE9689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:42:fa:23:06:fb:7c:d0:a1:3c:d8:75:a5:d2:
                    04:2c:94:30:31:db:af:38:c0:b1:f8:5f:7a:ce:2e:
                    6e:3c:07:e8:5d:3c:ae:f9:14:1f:98:0f:c6:78:b0:
                    b4:55:97:c0:26:5f:8c:0a:80:50:d2:23:26:ff:57:
                    28:b8:b1:0d:85:f9:a5:ca:a2:3d:da:fd:50:25:95:
                    20:c0:c6:ee:88:37:cf:8d:97:c0:86:da:32:05:82:
                    a6:f8:a2:0f:ce:06:4c:c5:c4:1b:21:66:96:e2:9a:
                    c8:eb:41:fd:15:fb:9b:87:2c:1b:47:29:fc:f9:f4:
                    bf:95:71:82:32:6a:ab:59:0b:27:0c:1a:00:29:44:
                    d9:81:11:69:f3:d1:3a:14:30:4b:50:23:81:b1:70:
                    46:c0:b0:91:b5:a6:30:9a:d4:05:8b:41:25:62:5b:
                    d7:73:27:e0:d2:a0:2a:37:fc:c0:c9:a2:00:45:91:
                    ad:4c:79:75:1d:d6:be:19:fa:92:0a:d7:f8:d5:73:
                    ad:2a:59:a3:93:ee:06:bc:43:a1:4d:09:5f:43:c3:
                    16:a2:33:71:2e:f5:84:e7:d1:6e:52:ac:a0:cc:e3:
                    c7:c0:0f:f9:34:b3:24:d7:93:d1:72:54:27:47:ad:
                    d2:9f:26:61:a2:66:90:40:9e:1e:29:41:97:cc:90:
                    fb:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:60:CD:FE:A2:A5:74:99:A7:F8:93:D8:11:D4:9E:6C:95:BE:96:89
            X509v3 Authority Key Identifier:
                keyid:47:65:DF:83:36:97:20:EE:1A:F5:14:C7:CA:66:60:A4:75:D1:85:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/4765DF83369720EE1AF514C7CA6660A475D18592.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4765DF83369720EE1AF514C7CA6660A475D18592.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/323830343a3737343a613130303a3a2f34302d3430203d3e203532383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:774:a100::/40

    Signature Algorithm: sha256WithRSAEncryption
         9f:3f:96:62:13:46:0d:83:74:11:33:f2:f7:66:b5:4e:b9:a8:
         1f:90:eb:33:e3:8e:e1:c7:7a:3d:90:83:09:fc:e1:50:22:1e:
         3c:eb:55:e8:4d:58:d7:f6:78:70:d3:05:f4:a9:cf:a3:e3:90:
         90:4c:97:52:60:85:71:4e:4e:37:33:84:0b:85:00:a6:1f:dc:
         fc:85:af:b0:45:dd:e5:09:13:d1:d0:82:b2:d1:86:a8:45:22:
         ba:3f:6a:09:82:f2:bb:eb:b6:19:c0:5f:5e:08:ef:52:43:cc:
         0d:8d:71:cc:fa:eb:13:9e:b3:46:27:7e:5d:2e:5c:26:24:90:
         4e:b3:85:e8:ca:54:a0:2c:e0:ee:f4:7f:a7:74:95:ca:3a:b2:
         47:5e:bf:73:88:fc:e8:0f:04:4d:42:1f:5b:cc:fa:9b:66:03:
         79:5b:9e:c9:bb:23:37:6f:d1:5a:ca:cb:ed:50:e8:8d:17:83:
         a6:64:c4:f0:7f:04:68:e9:c9:45:33:3b:dd:7e:d7:22:e6:8f:
         0c:99:be:aa:40:aa:88:66:8e:62:2f:5e:41:cf:b9:e8:0e:0d:
         bc:64:e8:41:b1:ff:f5:03:75:71:c7:ce:11:bb:63:52:33:cb:
         29:1d:b4:3c:68:6b:46:99:24:93:26:8d:b6:f7:51:54:76:68:
         40:8c:8d:0b
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgIUW3YfUreVeZYFv9icLw21fDjtKZAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDc2NURGODMzNjk3MjBFRTFBRjUxNEM3Q0E2NjYwQTQ3
NUQxODU5MjAeFw0yNTAzMDYwNDI4MDhaFw0yNjAzMDUwNDMzMDhaMDMxMTAvBgNV
BAMTKEVCNjBDREZFQTJBNTc0OTlBN0Y4OTNEODExRDQ5RTZDOTVCRTk2ODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOQvojBvt80KE82HWl0gQslDAx
2684wLH4X3rOLm48B+hdPK75FB+YD8Z4sLRVl8AmX4wKgFDSIyb/Vyi4sQ2F+aXK
oj3a/VAllSDAxu6IN8+Nl8CG2jIFgqb4og/OBkzFxBshZpbimsjrQf0V+5uHLBtH
Kfz59L+VcYIyaqtZCycMGgApRNmBEWnz0ToUMEtQI4GxcEbAsJG1pjCa1AWLQSVi
W9dzJ+DSoCo3/MDJogBFka1MeXUd1r4Z+pIK1/jVc60qWaOT7ga8Q6FNCV9Dwxai
M3Eu9YTn0W5SrKDM48fAD/k0syTXk9FyVCdHrdKfJmGiZpBAnh4pQZfMkPuFAgMB
AAGjggJXMIICUzAdBgNVHQ4EFgQU62DN/qKldJmn+JPYEdSebJW+lokwHwYDVR0j
BBgwFoAUR2XfgzaXIO4a9RTHymZgpHXRhZIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNkJwa2hrSm10VWZZQXV2YnltVEpQOVEzVTRlS2ZFcEVISmlDcXdNVFNk
REMvMS80NzY1REY4MzM2OTcyMEVFMUFGNTE0QzdDQTY2NjBBNDc1RDE4NTkyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ3NjVERjgzMzY5NzIwRUUx
QUY1MTRDN0NBNjY2MEE0NzVEMTg1OTIuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZCcGtoa0ptdFVmWUF1dmJ5bVRKUDlRM1U0ZUtmRXBFSEppQ3F3TVRTZERDLzEv
MzIzODMwMzQzYTM3MzczNDNhNjEzMTMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNl
MjAzNTMyMzgzNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG
AQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKAQHdKEwDQYJKoZIhvcNAQELBQADggEB
AJ8/lmITRg2DdBEz8vdmtU65qB+Q6zPjjuHHej2Qgwn84VAiHjzrVehNWNf2eHDT
BfSpz6PjkJBMl1JghXFOTjczhAuFAKYf3PyFr7BF3eUJE9HQgrLRhqhFIro/agmC
8rvrthnAX14I71JDzA2Nccz66xOes0Ynfl0uXCYkkE6zhejKVKAs4O70f6d0lco6
skdev3OI/OgPBE1CH1vM+ptmA3lbnsm7Izdv0VrKy+1Q6I0Xg6ZkxPB/BGjpyUUz
O91+1yLmjwyZvqpAqohmjmIvXkHPuegODbxk6EGx//UDdXHHzhG7Y1IzyykdtDxo
a0aZJJMmjbb3UVR2aECMjQs=
-----END CERTIFICATE-----
Generated at Sat Apr 12 05:29:53 2025 by rpki-client