Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/79N9KPPgS43ARULBCja3ZF6roFAze7ESt5u4kxgtP2mi/0/323830343a333031343a3a2f33322d313238203d3e20323634393239.roa
File:                     323830343a333031343a3a2f33322d313238203d3e20323634393239.roa (raw, json)
Hash identifier:          UpUN7ScU9MrYdKjd3R3FFaI7Z7BPoKD8iNGrsQJjtHE=
Subject key identifier:   0F:C0:17:CD:85:C1:78:4A:1A:09:30:D5:DD:9D:D1:03:A8:88:00:BD
Certificate issuer:       /CN=02C1FCEBCA7B0671324D050E969C07430540ECA7
Certificate serial:       29DAC043C61ED468FDFDFF490A79BA1403C8B9A6
Authority key identifier: 02:C1:FC:EB:CA:7B:06:71:32:4D:05:0E:96:9C:07:43:05:40:EC:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02C1FCEBCA7B0671324D050E969C07430540ECA7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79N9KPPgS43ARULBCja3ZF6roFAze7ESt5u4kxgtP2mi/0/323830343a333031343a3a2f33322d313238203d3e20323634393239.roa
Signing time:             Fri 30 Aug 2024 20:53:56 +0000
ROA not before:           Fri 30 Aug 2024 20:48:56 +0000
ROA not after:            Fri 29 Aug 2025 20:53:56 +0000
asID:                     264929
IP address blocks:        2804:3014::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:da:c0:43:c6:1e:d4:68:fd:fd:ff:49:0a:79:ba:14:03:c8:b9:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02C1FCEBCA7B0671324D050E969C07430540ECA7
        Validity
            Not Before: Aug 30 20:48:56 2024 GMT
            Not After : Aug 29 20:53:56 2025 GMT
        Subject: CN=0FC017CD85C1784A1A0930D5DD9DD103A88800BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6c:65:4c:2a:a8:05:1e:33:29:ca:78:d5:40:
                    d7:98:41:33:b9:3c:5c:81:b5:8b:56:29:11:27:07:
                    25:6f:48:28:f9:40:a3:8f:ef:33:3c:a4:50:d4:49:
                    30:e9:23:8e:a4:53:b1:76:93:c1:26:4f:99:de:65:
                    58:f3:e2:08:15:7a:b8:1c:96:06:fb:fd:56:b4:c2:
                    08:09:41:f6:d2:de:eb:6b:f8:89:5f:3d:c4:b3:97:
                    c4:57:fa:8a:a3:d1:5d:be:26:ff:85:91:2e:71:74:
                    96:54:0b:5c:22:88:15:91:1c:83:e9:8b:b3:60:2a:
                    8f:42:98:9f:6d:da:d2:5c:b3:3d:b5:47:83:9b:c2:
                    1d:3b:95:98:a9:58:af:ea:15:d5:f3:58:9f:44:c1:
                    8f:fd:2e:fe:43:90:ed:72:03:ed:7f:d8:e9:f4:02:
                    3a:4e:df:47:6f:bb:6a:42:7d:dc:a0:5c:cc:69:9b:
                    f6:06:bd:e9:44:1f:19:cc:70:b5:d2:d7:b7:27:80:
                    dd:86:2d:ad:19:78:a2:8d:5f:1b:64:e8:37:4b:a2:
                    3a:71:41:9c:4f:ae:7c:a7:3b:48:bd:c9:d9:e8:ea:
                    74:73:7d:e0:73:70:4a:09:88:20:b3:76:1d:0d:5d:
                    b1:fb:41:62:77:b1:bb:16:9a:5f:eb:03:99:5f:18:
                    0b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:C0:17:CD:85:C1:78:4A:1A:09:30:D5:DD:9D:D1:03:A8:88:00:BD
            X509v3 Authority Key Identifier:
                keyid:02:C1:FC:EB:CA:7B:06:71:32:4D:05:0E:96:9C:07:43:05:40:EC:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79N9KPPgS43ARULBCja3ZF6roFAze7ESt5u4kxgtP2mi/0/02C1FCEBCA7B0671324D050E969C07430540ECA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02C1FCEBCA7B0671324D050E969C07430540ECA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79N9KPPgS43ARULBCja3ZF6roFAze7ESt5u4kxgtP2mi/0/323830343a333031343a3a2f33322d313238203d3e20323634393239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3014::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:82:68:93:98:69:a6:86:7c:98:77:71:e3:e8:56:a2:36:95:
         a5:da:b4:46:02:7f:f2:16:e9:c9:65:a9:69:7c:78:b9:ee:b5:
         cc:ab:58:37:45:31:bc:af:08:51:d6:03:43:f9:af:0a:b2:2a:
         96:66:75:e9:d1:a6:b7:a6:64:bf:c7:e4:5a:c4:8f:1e:30:fb:
         2f:76:2d:2f:59:2f:bb:c7:c9:35:57:b3:b2:2b:ac:eb:aa:9b:
         b2:33:c2:03:f7:ac:0b:c9:24:87:ae:42:ac:74:fa:67:d0:56:
         e0:1e:5c:5f:6b:71:f1:2c:d6:d7:7e:d5:0e:98:43:c4:9c:56:
         ac:05:eb:13:6f:1d:18:6d:63:b9:f2:bc:c3:fb:7f:c4:fa:98:
         b5:c8:08:54:7e:50:c0:16:2c:5e:d1:77:e2:a5:4e:39:9a:29:
         24:e3:98:26:ae:a8:9c:fd:c3:b3:65:c3:77:2c:6f:60:83:a0:
         bf:e1:8d:57:d6:9f:ab:6a:4b:49:a4:aa:8f:0f:7e:b0:a7:81:
         1c:ef:d5:9a:d4:6b:62:06:5d:c9:be:27:12:a5:49:24:aa:4f:
         f2:1f:f8:76:a8:25:44:32:da:74:bc:e3:7b:55:1c:f4:6c:26:
         92:4c:72:41:34:20:87:8c:91:5b:6a:c7:2c:a3:05:03:35:b5:
         9c:17:f6:92
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUKdrAQ8Ye1Gj9/f9JCnm6FAPIuaYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDJDMUZDRUJDQTdCMDY3MTMyNEQwNTBFOTY5QzA3NDMw
NTQwRUNBNzAeFw0yNDA4MzAyMDQ4NTZaFw0yNTA4MjkyMDUzNTZaMDMxMTAvBgNV
BAMTKDBGQzAxN0NEODVDMTc4NEExQTA5MzBENUREOUREMTAzQTg4ODAwQkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqbGVMKqgFHjMpynjVQNeYQTO5
PFyBtYtWKREnByVvSCj5QKOP7zM8pFDUSTDpI46kU7F2k8EmT5neZVjz4ggVergc
lgb7/Va0wggJQfbS3utr+IlfPcSzl8RX+oqj0V2+Jv+FkS5xdJZUC1wiiBWRHIPp
i7NgKo9CmJ9t2tJcsz21R4Obwh07lZipWK/qFdXzWJ9EwY/9Lv5DkO1yA+1/2On0
AjpO30dvu2pCfdygXMxpm/YGvelEHxnMcLXS17cngN2GLa0ZeKKNXxtk6DdLojpx
QZxPrnynO0i9ydno6nRzfeBzcEoJiCCzdh0NXbH7QWJ3sbsWml/rA5lfGAs3AgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUD8AXzYXBeEoaCTDV3Z3RA6iIAL0wHwYDVR0j
BBgwFoAUAsH868p7BnEyTQUOlpwHQwVA7KcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzlOOUtQUGdTNDNBUlVMQkNqYTNaRjZyb0ZBemU3RVN0NXU0a3hndFAy
bWkvMC8wMkMxRkNFQkNBN0IwNjcxMzI0RDA1MEU5NjlDMDc0MzA1NDBFQ0E3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAyQzFGQ0VCQ0E3QjA2NzEz
MjREMDUwRTk2OUMwNzQzMDU0MEVDQTcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzc5TjlLUFBnUzQzQVJVTEJDamEzWkY2cm9GQXplN0VTdDV1NGt4Z3RQMm1pLzAv
MzIzODMwMzQzYTMzMzAzMTM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzQzOTMyMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBDAUMA0GCSqGSIb3DQEBCwUAA4IBAQCCgmiT
mGmmhnyYd3Hj6FaiNpWl2rRGAn/yFunJZalpfHi57rXMq1g3RTG8rwhR1gND+a8K
siqWZnXp0aa3pmS/x+RaxI8eMPsvdi0vWS+7x8k1V7OyK6zrqpuyM8ID96wLySSH
rkKsdPpn0FbgHlxfa3HxLNbXftUOmEPEnFasBesTbx0YbWO58rzD+3/E+pi1yAhU
flDAFixe0XfipU45mikk45gmrqic/cOzZcN3LG9gg6C/4Y1X1p+raktJpKqPD36w
p4Ec79Wa1GtiBl3JvicSpUkkqk/yH/h2qCVEMtp0vON7VRz0bCaSTHJBNCCHjJFb
ascsowUDNbWcF/aS
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:43 2025 by rpki-client