Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/323830343a333030383a3a2f33322d3332203d3e20323634393237.roa
File:                     323830343a333030383a3a2f33322d3332203d3e20323634393237.roa (raw, json)
Hash identifier:          xeKW0/xofQbBqlDVxNFtHei8wuXyQAEUK4ascBN+m4Y=
Subject key identifier:   9B:67:D5:FF:E1:24:C6:4C:FA:88:61:65:8B:D8:59:BC:ED:68:D3:1F
Certificate issuer:       /CN=B11605843889B763BDD71C75D79082A16C54D7E7
Certificate serial:       2C15A57F98E6E9CE4867F0406821EEA583C203DE
Authority key identifier: B1:16:05:84:38:89:B7:63:BD:D7:1C:75:D7:90:82:A1:6C:54:D7:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B11605843889B763BDD71C75D79082A16C54D7E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/323830343a333030383a3a2f33322d3332203d3e20323634393237.roa
Signing time:             Wed 22 Jan 2025 21:44:36 +0000
ROA not before:           Wed 22 Jan 2025 21:39:36 +0000
ROA not after:            Wed 21 Jan 2026 21:44:36 +0000
asID:                     264927
IP address blocks:        2804:3008::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:15:a5:7f:98:e6:e9:ce:48:67:f0:40:68:21:ee:a5:83:c2:03:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B11605843889B763BDD71C75D79082A16C54D7E7
        Validity
            Not Before: Jan 22 21:39:36 2025 GMT
            Not After : Jan 21 21:44:36 2026 GMT
        Subject: CN=9B67D5FFE124C64CFA8861658BD859BCED68D31F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a1:0b:bc:ea:f4:f3:ae:8d:89:20:db:5a:7b:
                    93:16:a5:46:7e:92:97:02:b8:03:b5:b4:fb:1d:48:
                    46:12:e9:b1:34:c3:cd:f0:ea:c0:8a:e7:57:cf:c1:
                    d9:bc:ff:1d:48:09:fd:6c:6f:69:f6:25:b4:19:8a:
                    e9:af:8b:c1:49:eb:f5:79:5e:98:ce:73:93:92:42:
                    0e:9a:9b:d8:dd:4f:f9:47:d1:cf:2e:1c:1a:80:50:
                    6e:c9:78:aa:d7:8f:d9:26:38:4e:da:1f:49:f5:2f:
                    89:4a:fa:9b:e1:b9:b1:77:ef:de:04:12:a0:4b:07:
                    ed:1a:70:27:e6:2a:35:6b:50:1f:e4:38:54:03:0c:
                    9e:60:a5:c5:ae:f8:3a:5b:ee:bc:b7:a2:9f:44:d0:
                    06:c7:e3:2d:09:8a:d9:42:46:f5:ef:a8:28:51:81:
                    46:e8:19:51:00:a1:37:88:6c:e2:28:fa:52:66:6d:
                    8b:fe:ff:ee:7f:9c:d0:f8:4f:dc:de:8e:4f:5d:54:
                    5b:8f:e4:6b:db:c5:b8:82:70:31:ef:7c:6a:0d:fe:
                    68:f3:2a:c2:64:d2:68:55:ff:6e:8b:58:d7:55:2c:
                    75:ae:cf:e8:d8:19:a7:e6:de:2b:3c:f4:c5:78:4f:
                    2a:36:0f:e3:20:7f:b3:ac:d6:86:9c:09:aa:f9:3d:
                    6d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:67:D5:FF:E1:24:C6:4C:FA:88:61:65:8B:D8:59:BC:ED:68:D3:1F
            X509v3 Authority Key Identifier:
                keyid:B1:16:05:84:38:89:B7:63:BD:D7:1C:75:D7:90:82:A1:6C:54:D7:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/B11605843889B763BDD71C75D79082A16C54D7E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B11605843889B763BDD71C75D79082A16C54D7E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/323830343a333030383a3a2f33322d3332203d3e20323634393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3008::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:e2:1c:10:81:1a:55:ec:26:26:70:e6:93:48:0b:78:f7:8f:
         ae:56:ce:f4:bf:37:2a:9d:1f:7a:0f:69:e5:ac:a8:89:ec:a0:
         d0:c9:5a:75:70:b0:90:1f:a0:91:0d:a3:a2:ab:17:4c:14:0c:
         c4:c5:0d:22:34:d9:d7:93:5a:5f:67:4d:21:55:8e:23:fe:34:
         70:e6:67:75:69:ce:73:21:fb:75:b3:72:81:90:6b:31:b1:4b:
         9e:c2:8b:0f:e3:6f:32:fa:6d:a0:bc:78:cc:09:a4:32:ba:11:
         2e:21:e3:1f:2f:3a:03:0f:ea:bb:c3:19:6a:82:75:7e:b6:ea:
         ad:8c:c7:34:5d:4a:fa:71:10:8d:57:ab:cb:77:08:2d:aa:eb:
         2f:bc:07:a3:13:71:81:5d:94:1c:83:4b:4d:1a:5c:29:11:3f:
         b7:d9:7b:26:a2:d9:cb:3e:5a:b4:ed:97:2c:04:a1:34:4a:28:
         8e:25:75:ff:c8:52:a8:63:fb:81:d0:17:e8:ec:59:ff:e0:10:
         e8:35:48:2d:c2:5b:62:f0:ce:6a:62:08:32:eb:4c:bd:8b:91:
         f8:f8:21:39:8a:a7:4a:07:2f:5d:a3:d1:a3:d9:06:e2:29:59:
         5c:38:93:42:88:30:a1:8e:24:90:43:9c:9b:08:05:7c:3c:22:
         ca:3b:cb:f9
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIULBWlf5jm6c5IZ/BAaCHupYPCA94wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjExNjA1ODQzODg5Qjc2M0JERDcxQzc1RDc5MDgyQTE2
QzU0RDdFNzAeFw0yNTAxMjIyMTM5MzZaFw0yNjAxMjEyMTQ0MzZaMDMxMTAvBgNV
BAMTKDlCNjdENUZGRTEyNEM2NENGQTg4NjE2NThCRDg1OUJDRUQ2OEQzMUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2oQu86vTzro2JINtae5MWpUZ+
kpcCuAO1tPsdSEYS6bE0w83w6sCK51fPwdm8/x1ICf1sb2n2JbQZiumvi8FJ6/V5
XpjOc5OSQg6am9jdT/lH0c8uHBqAUG7JeKrXj9kmOE7aH0n1L4lK+pvhubF3794E
EqBLB+0acCfmKjVrUB/kOFQDDJ5gpcWu+Dpb7ry3op9E0AbH4y0JitlCRvXvqChR
gUboGVEAoTeIbOIo+lJmbYv+/+5/nND4T9zejk9dVFuP5GvbxbiCcDHvfGoN/mjz
KsJk0mhV/26LWNdVLHWuz+jYGafm3is89MV4Tyo2D+Mgf7Os1oacCar5PW1hAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUm2fV/+Ekxkz6iGFli9hZvO1o0x8wHwYDVR0j
BBgwFoAUsRYFhDiJt2O91xx115CCoWxU1+cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWZScmF6aG9UclZMSFpFQUJjRXBOTHh6eEI0bVhhWnJwaDRlMnkycFRG
WUsvMC9CMTE2MDU4NDM4ODlCNzYzQkRENzFDNzVENzkwODJBMTZDNTREN0U3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IxMTYwNTg0Mzg4OUI3NjNC
REQ3MUM3NUQ3OTA4MkExNkM1NEQ3RTcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FmUnJhemhvVHJWTEhaRUFCY0VwTkx4enhCNG1YYVpycGg0ZTJ5MnBURllLLzAv
MzIzODMwMzQzYTMzMzAzMDM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM0
MzkzMjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQwCDANBgkqhkiG9w0BAQsFAAOCAQEATuIcEIEa
VewmJnDmk0gLePePrlbO9L83Kp0feg9p5ayoieyg0MladXCwkB+gkQ2joqsXTBQM
xMUNIjTZ15NaX2dNIVWOI/40cOZndWnOcyH7dbNygZBrMbFLnsKLD+NvMvptoLx4
zAmkMroRLiHjHy86Aw/qu8MZaoJ1frbqrYzHNF1K+nEQjVery3cILarrL7wHoxNx
gV2UHINLTRpcKRE/t9l7JqLZyz5atO2XLAShNEoojiV1/8hSqGP7gdAX6OxZ/+AQ
6DVILcJbYvDOamIIMutMvYuR+PghOYqnSgcvXaPRo9kG4ilZXDiTQogwoY4kkEOc
mwgFfDwiyjvL+Q==
-----END CERTIFICATE-----
Generated at Mon Apr 7 07:47:43 2025 by rpki-client