Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6TNXVDp2GKcNQvoT13ryNogD1uzFs6x3WDeegCxY5uaf/0/323830343a386261633a3a2f33322d3438203d3e20323733373438.roa
File:                     323830343a386261633a3a2f33322d3438203d3e20323733373438.roa (raw, json)
Hash identifier:          C1q/7rYJ+cYQPJFYKS6CHbDjmO01NmmggJpNZuYQmSU=
Subject key identifier:   48:DE:12:C5:19:DD:7E:52:DE:C4:B3:C8:82:DB:36:A5:15:78:3B:4C
Certificate issuer:       /CN=07A4A45C7BED3B45A8CE964C70EA33D6DB8EF994
Certificate serial:       3FF791C8734D0F8FDEAA51CAAF95A5763A3B5A0A
Authority key identifier: 07:A4:A4:5C:7B:ED:3B:45:A8:CE:96:4C:70:EA:33:D6:DB:8E:F9:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07A4A45C7BED3B45A8CE964C70EA33D6DB8EF994.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6TNXVDp2GKcNQvoT13ryNogD1uzFs6x3WDeegCxY5uaf/0/323830343a386261633a3a2f33322d3438203d3e20323733373438.roa
Signing time:             Wed 29 Jan 2025 20:08:10 +0000
ROA not before:           Wed 29 Jan 2025 20:03:10 +0000
ROA not after:            Wed 28 Jan 2026 20:08:10 +0000
asID:                     273748
IP address blocks:        2804:8bac::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:f7:91:c8:73:4d:0f:8f:de:aa:51:ca:af:95:a5:76:3a:3b:5a:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07A4A45C7BED3B45A8CE964C70EA33D6DB8EF994
        Validity
            Not Before: Jan 29 20:03:10 2025 GMT
            Not After : Jan 28 20:08:10 2026 GMT
        Subject: CN=48DE12C519DD7E52DEC4B3C882DB36A515783B4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:bd:f5:6a:fa:12:02:07:12:a9:01:96:8c:3b:
                    ac:5a:77:a6:df:2d:b5:79:02:28:ee:4b:d8:87:dc:
                    c9:b3:cd:20:7d:7b:d5:52:a8:f7:d6:08:b3:e1:6f:
                    76:87:8f:42:5f:9a:e3:92:8a:1d:d6:5d:98:ad:1c:
                    35:c4:96:45:f6:a9:25:83:08:14:56:e0:98:4c:9a:
                    90:be:ae:4a:77:b5:77:f6:e1:c9:7e:d3:74:0a:7e:
                    8e:39:d2:29:b6:99:80:f7:a6:26:a0:ec:bd:ae:71:
                    b4:76:03:10:4d:5f:af:4a:e1:48:e4:16:2b:89:b8:
                    ae:01:26:23:21:55:6a:1e:2c:6e:bb:c7:a1:e8:2f:
                    e8:15:e3:3d:d7:c3:5f:42:7a:cd:19:58:32:ea:c3:
                    4b:d6:5b:f3:23:5e:19:6d:7e:21:15:5f:b2:d5:26:
                    5c:dd:01:8a:64:c2:53:68:98:94:30:f3:9b:59:50:
                    ad:d3:12:af:e1:a4:52:51:dd:0f:96:a8:eb:08:0d:
                    44:67:12:09:95:91:01:36:d3:9e:da:41:43:aa:ba:
                    fb:67:c7:dc:02:6d:d6:3d:fd:fd:5c:f9:e2:59:cf:
                    0e:c1:b1:ce:a1:50:38:17:b3:bf:03:17:53:cf:8f:
                    58:ab:b5:49:62:7d:d9:b5:43:00:92:8c:1b:78:50:
                    78:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:DE:12:C5:19:DD:7E:52:DE:C4:B3:C8:82:DB:36:A5:15:78:3B:4C
            X509v3 Authority Key Identifier:
                keyid:07:A4:A4:5C:7B:ED:3B:45:A8:CE:96:4C:70:EA:33:D6:DB:8E:F9:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6TNXVDp2GKcNQvoT13ryNogD1uzFs6x3WDeegCxY5uaf/0/07A4A45C7BED3B45A8CE964C70EA33D6DB8EF994.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07A4A45C7BED3B45A8CE964C70EA33D6DB8EF994.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6TNXVDp2GKcNQvoT13ryNogD1uzFs6x3WDeegCxY5uaf/0/323830343a386261633a3a2f33322d3438203d3e20323733373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8bac::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:e7:08:d2:2a:92:bb:b7:42:41:62:0a:b9:34:25:e3:5d:7e:
         ed:08:00:57:ba:db:89:a5:51:21:69:84:b4:34:e2:60:11:1e:
         3f:70:94:d3:63:9d:58:7d:4c:c8:4f:da:ff:f1:b0:a5:09:51:
         1f:d3:73:99:42:8d:8e:c5:62:56:9b:df:bd:f5:aa:00:4d:da:
         79:18:5c:97:7e:73:90:69:6b:c7:70:08:7e:4a:9f:36:e7:af:
         93:c6:b2:3c:bf:06:47:5f:b2:7d:d8:0c:df:a9:f4:75:3b:a1:
         b4:2d:a0:6a:94:90:f9:e2:9d:db:3f:51:db:a7:24:17:1b:f7:
         f0:97:27:63:0e:06:03:16:b2:7c:51:b0:e2:8a:09:46:23:ab:
         61:2b:59:a1:11:b7:ec:3b:fe:e5:f1:35:3c:5e:ef:76:ed:0b:
         e1:b9:6f:a1:4b:69:c9:a1:9b:7b:50:74:e6:d6:cb:f1:2a:2a:
         4b:b4:f4:72:98:20:7e:14:dd:76:69:96:4e:08:21:3e:43:11:
         5a:5f:f2:81:69:59:a9:62:d0:8c:f6:1f:09:8c:28:77:b1:2c:
         dd:fb:08:87:25:bf:de:fc:f1:57:44:a0:f7:e4:b0:f9:19:c5:
         c8:49:45:6e:86:4e:49:4e:bf:96:1c:9a:14:53:ef:18:82:55:
         00:43:e6:c2
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUP/eRyHNND4/eqlHKr5Wldjo7WgowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDdBNEE0NUM3QkVEM0I0NUE4Q0U5NjRDNzBFQTMzRDZE
QjhFRjk5NDAeFw0yNTAxMjkyMDAzMTBaFw0yNjAxMjgyMDA4MTBaMDMxMTAvBgNV
BAMTKDQ4REUxMkM1MTlERDdFNTJERUM0QjNDODgyREIzNkE1MTU3ODNCNEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNvfVq+hICBxKpAZaMO6xad6bf
LbV5AijuS9iH3MmzzSB9e9VSqPfWCLPhb3aHj0JfmuOSih3WXZitHDXElkX2qSWD
CBRW4JhMmpC+rkp3tXf24cl+03QKfo450im2mYD3piag7L2ucbR2AxBNX69K4Ujk
FiuJuK4BJiMhVWoeLG67x6HoL+gV4z3Xw19Ces0ZWDLqw0vWW/MjXhltfiEVX7LV
JlzdAYpkwlNomJQw85tZUK3TEq/hpFJR3Q+WqOsIDURnEgmVkQE2057aQUOquvtn
x9wCbdY9/f1c+eJZzw7Bsc6hUDgXs78DF1PPj1irtUlifdm1QwCSjBt4UHhvAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUSN4SxRndflLexLPIgts2pRV4O0wwHwYDVR0j
BBgwFoAUB6SkXHvtO0WozpZMcOoz1tuO+ZQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlROWFZEcDJHS2NOUXZvVDEzcnlOb2dEMXV6RnM2eDNXRGVlZ0N4WTV1
YWYvMC8wN0E0QTQ1QzdCRUQzQjQ1QThDRTk2NEM3MEVBMzNENkRCOEVGOTk0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA3QTRBNDVDN0JFRDNCNDVB
OENFOTY0QzcwRUEzM0Q2REI4RUY5OTQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZUTlhWRHAyR0tjTlF2b1QxM3J5Tm9nRDF1ekZzNngzV0RlZWdDeFk1dWFmLzAv
MzIzODMwMzQzYTM4NjI2MTYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMz
MzczNDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASLrDANBgkqhkiG9w0BAQsFAAOCAQEAfecI0iqS
u7dCQWIKuTQl411+7QgAV7rbiaVRIWmEtDTiYBEeP3CU02OdWH1MyE/a//GwpQlR
H9NzmUKNjsViVpvfvfWqAE3aeRhcl35zkGlrx3AIfkqfNuevk8ayPL8GR1+yfdgM
36n0dTuhtC2gapSQ+eKd2z9R26ckFxv38JcnYw4GAxayfFGw4ooJRiOrYStZoRG3
7Dv+5fE1PF7vdu0L4blvoUtpyaGbe1B05tbL8SoqS7T0cpggfhTddmmWTgghPkMR
Wl/ygWlZqWLQjPYfCYwod7Es3fsIhyW/3vzxV0Sg9+Sw+RnFyElFboZOSU6/lhya
FFPvGIJVAEPmwg==
-----END CERTIFICATE-----
Generated at Tue Apr 8 15:02:46 2025 by rpki-client