Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7SbY9QEuS4foCDkoDfpEkeCYWZze485LBqkfiofR3NRr/0/323830343a333838633a3a2f33322d313238203d3e20323636343835.roa
File:                     323830343a333838633a3a2f33322d313238203d3e20323636343835.roa (raw, json)
Hash identifier:          wMppdLzmeoztyh+iD+6Wgu/B44ckXCwVqYEJqOyVaSI=
Subject key identifier:   F4:2A:68:BA:61:11:AC:98:FF:F3:46:94:C6:38:52:9F:65:40:E3:50
Certificate issuer:       /CN=29A900C215A505163BD9D2844266656FCCF69E76
Certificate serial:       437F14AD666429E991E32C2175DA268F0CD305C9
Authority key identifier: 29:A9:00:C2:15:A5:05:16:3B:D9:D2:84:42:66:65:6F:CC:F6:9E:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29A900C215A505163BD9D2844266656FCCF69E76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7SbY9QEuS4foCDkoDfpEkeCYWZze485LBqkfiofR3NRr/0/323830343a333838633a3a2f33322d313238203d3e20323636343835.roa
Signing time:             Tue 17 Dec 2024 00:56:47 +0000
ROA not before:           Tue 17 Dec 2024 00:51:47 +0000
ROA not after:            Tue 16 Dec 2025 00:56:47 +0000
asID:                     266485
IP address blocks:        2804:388c::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:7f:14:ad:66:64:29:e9:91:e3:2c:21:75:da:26:8f:0c:d3:05:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29A900C215A505163BD9D2844266656FCCF69E76
        Validity
            Not Before: Dec 17 00:51:47 2024 GMT
            Not After : Dec 16 00:56:47 2025 GMT
        Subject: CN=F42A68BA6111AC98FFF34694C638529F6540E350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5d:05:7c:d8:ed:cf:9e:be:a7:0d:d1:ea:08:
                    c6:e3:91:48:72:e3:3c:26:7e:1f:1c:c8:31:9e:6c:
                    4e:72:49:79:dd:e2:7d:bd:8c:e2:b5:86:92:4a:59:
                    3f:dd:45:d0:e6:02:a2:75:13:3c:df:f9:a1:b2:86:
                    cd:00:eb:e1:b2:7e:27:bf:c4:6a:b7:6e:a4:74:f2:
                    1c:a7:f2:98:64:87:11:d1:90:d9:d5:83:d7:ee:13:
                    fd:f1:0b:07:42:5a:bc:19:65:5e:95:27:e2:70:ae:
                    29:1f:10:bc:c7:db:63:30:08:c2:93:66:fc:7f:95:
                    aa:99:77:88:62:7e:1e:c9:11:6f:1b:d3:b8:5b:a1:
                    40:44:4c:15:fe:cb:d3:6c:f5:10:9c:5e:af:9e:49:
                    63:62:b5:c6:70:37:87:a1:34:b6:ae:a4:ea:97:89:
                    3b:ea:4a:d8:02:51:fe:88:6b:74:5b:d5:05:a2:34:
                    82:28:e8:7c:4f:ba:1c:b8:f0:44:cf:8a:91:4f:fc:
                    66:18:39:71:2e:51:eb:47:b8:38:36:b4:a0:4f:61:
                    b8:5f:72:08:fc:6a:b5:2e:93:42:1e:5c:88:95:b4:
                    66:98:35:1b:15:3b:14:30:bc:fe:00:c2:95:42:0b:
                    6e:87:75:42:98:f4:f1:9c:4a:0f:fe:69:aa:40:30:
                    9b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:2A:68:BA:61:11:AC:98:FF:F3:46:94:C6:38:52:9F:65:40:E3:50
            X509v3 Authority Key Identifier:
                keyid:29:A9:00:C2:15:A5:05:16:3B:D9:D2:84:42:66:65:6F:CC:F6:9E:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7SbY9QEuS4foCDkoDfpEkeCYWZze485LBqkfiofR3NRr/0/29A900C215A505163BD9D2844266656FCCF69E76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29A900C215A505163BD9D2844266656FCCF69E76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7SbY9QEuS4foCDkoDfpEkeCYWZze485LBqkfiofR3NRr/0/323830343a333838633a3a2f33322d313238203d3e20323636343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:388c::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:c7:b0:f0:fa:48:db:e8:76:2a:79:98:7a:fe:18:97:ac:eb:
         5f:bf:e2:41:87:63:38:61:ee:69:c0:34:3e:82:e1:f5:aa:96:
         98:ca:42:ce:bd:52:39:2a:3a:53:a9:17:3c:74:f8:d7:42:db:
         86:97:8d:55:1c:fe:ee:0b:a2:69:21:ff:73:bf:52:44:03:1f:
         5e:30:22:69:37:e0:91:74:77:6d:0c:9e:f0:13:93:d0:c4:09:
         99:66:69:db:ed:5c:c8:38:86:3d:28:4e:88:d4:59:23:12:af:
         49:db:f5:7e:ec:cc:b1:24:c8:c3:71:2c:1c:89:0d:7a:d6:a0:
         5b:d4:75:67:55:e4:4b:d8:f6:6a:51:dd:88:38:12:fb:0d:df:
         7f:d3:d2:92:61:da:ea:7d:68:65:13:b3:fb:f1:6c:01:1d:df:
         3a:2e:23:56:4f:5c:e5:37:31:e8:83:5f:17:15:53:2b:e5:01:
         15:c9:a2:be:f3:de:a9:ca:ca:e7:a2:39:aa:6d:03:91:bf:88:
         52:f1:dc:73:fd:8a:4e:d0:74:99:c0:79:2f:7b:1b:25:36:6c:
         8d:b6:86:7b:c8:0b:93:b8:3a:90:aa:98:a1:10:8c:a7:b1:ec:
         32:f5:74:1b:c7:ff:ff:53:08:af:4a:94:27:33:78:6a:78:64:
         1e:9b:91:6f
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUQ38UrWZkKemR4ywhddomjwzTBckwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjlBOTAwQzIxNUE1MDUxNjNCRDlEMjg0NDI2NjY1NkZD
Q0Y2OUU3NjAeFw0yNDEyMTcwMDUxNDdaFw0yNTEyMTYwMDU2NDdaMDMxMTAvBgNV
BAMTKEY0MkE2OEJBNjExMUFDOThGRkYzNDY5NEM2Mzg1MjlGNjU0MEUzNTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0XQV82O3Pnr6nDdHqCMbjkUhy
4zwmfh8cyDGebE5ySXnd4n29jOK1hpJKWT/dRdDmAqJ1Ezzf+aGyhs0A6+Gyfie/
xGq3bqR08hyn8phkhxHRkNnVg9fuE/3xCwdCWrwZZV6VJ+JwrikfELzH22MwCMKT
Zvx/laqZd4hifh7JEW8b07hboUBETBX+y9Ns9RCcXq+eSWNitcZwN4ehNLaupOqX
iTvqStgCUf6Ia3Rb1QWiNIIo6HxPuhy48ETPipFP/GYYOXEuUetHuDg2tKBPYbhf
cgj8arUuk0IeXIiVtGaYNRsVOxQwvP4AwpVCC26HdUKY9PGcSg/+aapAMJsZAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQU9CpoumERrJj/80aUxjhSn2VA41AwHwYDVR0j
BBgwFoAUKakAwhWlBRY72dKEQmZlb8z2nnYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1NiWTlRRXVTNGZvQ0Rrb0RmcEVrZUNZV1p6ZTQ4NUxCcWtmaW9mUjNO
UnIvMC8yOUE5MDBDMjE1QTUwNTE2M0JEOUQyODQ0MjY2NjU2RkNDRjY5RTc2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI5QTkwMEMyMTVBNTA1MTYz
QkQ5RDI4NDQyNjY2NTZGQ0NGNjlFNzYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdTYlk5UUV1UzRmb0NEa29EZnBFa2VDWVdaemU0ODVMQnFrZmlvZlIzTlJyLzAv
MzIzODMwMzQzYTMzMzgzODYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzYzNDM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBDiMMA0GCSqGSIb3DQEBCwUAA4IBAQA2x7Dw
+kjb6HYqeZh6/hiXrOtfv+JBh2M4Ye5pwDQ+guH1qpaYykLOvVI5KjpTqRc8dPjX
QtuGl41VHP7uC6JpIf9zv1JEAx9eMCJpN+CRdHdtDJ7wE5PQxAmZZmnb7VzIOIY9
KE6I1FkjEq9J2/V+7MyxJMjDcSwciQ161qBb1HVnVeRL2PZqUd2IOBL7Dd9/09KS
YdrqfWhlE7P78WwBHd86LiNWT1zlNzHog18XFVMr5QEVyaK+896pysrnojmqbQOR
v4hS8dxz/YpO0HSZwHkvexslNmyNtoZ7yAuTuDqQqpihEIynsewy9XQbx///Uwiv
SpQnM3hqeGQem5Fv
-----END CERTIFICATE-----
Generated at Sun Apr 13 09:09:31 2025 by rpki-client