Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a383030303a3a2f34382d3438203d3e20323634333434.roa
File:                     323830343a323637343a383030303a3a2f34382d3438203d3e20323634333434.roa (raw, json)
Hash identifier:          ktZWeRSezr3jCmLKsGJDyfa2fsO3kcr7vItpZCUJEe8=
Subject key identifier:   35:D2:3D:AA:A6:0C:A5:E0:C5:3D:A2:2B:94:1C:CB:A5:4C:66:E2:18
Certificate issuer:       /CN=E881CE9BB12ED9DAF6F092E0281FD192F9F3C6AD
Certificate serial:       3EFF51145078A591E84EA8D43A93628AE8796EF6
Authority key identifier: E8:81:CE:9B:B1:2E:D9:DA:F6:F0:92:E0:28:1F:D1:92:F9:F3:C6:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E881CE9BB12ED9DAF6F092E0281FD192F9F3C6AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a383030303a3a2f34382d3438203d3e20323634333434.roa
Signing time:             Fri 17 Mar 2023 20:56:44 +0000
ROA not before:           Fri 17 Mar 2023 20:51:44 +0000
ROA not after:            Fri 15 Mar 2024 20:56:44 +0000
asID:                     264344
IP address blocks:        2804:2674:8000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:ff:51:14:50:78:a5:91:e8:4e:a8:d4:3a:93:62:8a:e8:79:6e:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E881CE9BB12ED9DAF6F092E0281FD192F9F3C6AD
        Validity
            Not Before: Mar 17 20:51:44 2023 GMT
            Not After : Mar 15 20:56:44 2024 GMT
        Subject: CN=35D23DAAA60CA5E0C53DA22B941CCBA54C66E218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:1e:f5:e3:be:d3:ab:1c:24:9b:35:61:36:7f:
                    ce:0a:c6:7d:6a:81:08:9b:ed:a1:ce:eb:74:60:24:
                    a5:21:0c:38:fe:b0:08:86:89:b1:41:a8:ca:f2:ac:
                    03:8c:22:d3:dd:fd:cd:b8:66:fb:e6:ea:be:81:ac:
                    93:a8:d2:58:ba:cf:7f:39:2e:e7:18:d2:28:d0:1f:
                    0e:34:82:4d:07:80:20:8a:e3:fa:68:91:fd:6d:9f:
                    80:c3:3c:d3:cc:69:03:10:10:6a:75:0f:a4:38:3f:
                    96:3c:a9:82:e4:83:81:fd:91:b9:bb:ec:15:68:cf:
                    a9:99:5c:c2:73:ea:ff:59:77:f4:df:e8:89:cd:4b:
                    eb:99:69:58:7f:1a:43:ee:2e:49:36:71:ff:f9:93:
                    5e:6e:56:50:03:27:eb:26:ba:6a:d2:d5:c7:da:68:
                    48:bd:f0:29:d8:17:79:e6:b1:26:a3:98:fe:4b:b0:
                    53:d0:f8:a6:3d:27:5a:ec:a0:c1:f1:50:9d:98:9b:
                    76:35:74:41:5c:61:16:51:83:f7:52:3c:92:e0:8b:
                    b5:66:69:22:38:d4:9a:23:da:18:c5:1d:80:23:c0:
                    20:e3:e6:c0:4a:cd:ad:24:1d:51:4b:6c:bf:d5:cf:
                    e4:ec:fe:cc:b6:18:0a:b2:0f:fe:1d:0d:a8:3b:0b:
                    00:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:D2:3D:AA:A6:0C:A5:E0:C5:3D:A2:2B:94:1C:CB:A5:4C:66:E2:18
            X509v3 Authority Key Identifier:
                keyid:E8:81:CE:9B:B1:2E:D9:DA:F6:F0:92:E0:28:1F:D1:92:F9:F3:C6:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/E881CE9BB12ED9DAF6F092E0281FD192F9F3C6AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E881CE9BB12ED9DAF6F092E0281FD192F9F3C6AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a383030303a3a2f34382d3438203d3e20323634333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2674:8000::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:c0:34:17:a6:17:bd:60:e5:02:ed:86:29:fd:e3:2d:58:7c:
         a3:67:5b:6c:d7:38:1e:86:a1:c1:5b:81:e8:af:ca:9f:d8:bb:
         0b:7a:80:21:9a:5e:84:24:f8:89:45:d5:7d:95:a7:e6:04:14:
         8f:cc:02:77:c7:4f:d8:fa:ae:dd:aa:95:0c:78:b4:5c:7a:25:
         0a:26:56:d2:bf:1b:d0:6c:ec:e8:dd:e3:ff:42:c0:ea:66:89:
         48:e2:3b:6c:0d:56:13:63:df:0f:b2:f0:ea:e7:29:43:ef:56:
         74:f2:14:0b:5c:98:11:91:f6:bb:ea:32:dc:82:6f:eb:0e:ad:
         dd:b3:50:7c:98:05:71:17:ec:fd:23:5c:f0:1b:49:f6:a7:79:
         a1:31:e9:55:0d:ce:9e:df:42:3c:de:1c:93:c6:ae:c4:99:8b:
         64:b0:2c:c9:54:49:5a:23:8c:b4:17:b9:61:da:09:f8:89:a0:
         c9:c9:1c:d3:41:d0:6a:e0:71:4a:1c:eb:4a:64:97:36:85:43:
         71:87:d8:14:11:71:59:b7:f9:7b:0a:88:32:5b:0f:43:17:99:
         14:e4:53:47:59:d4:53:7a:6f:84:e4:8c:cb:51:c6:1f:69:22:
         e2:e9:ab:35:74:c7:cc:6d:33:ce:35:5f:9d:67:5e:a3:76:46:
         a3:c2:81:25
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUPv9RFFB4pZHoTqjUOpNiiuh5bvYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTg4MUNFOUJCMTJFRDlEQUY2RjA5MkUwMjgxRkQxOTJG
OUYzQzZBRDAeFw0yMzAzMTcyMDUxNDRaFw0yNDAzMTUyMDU2NDRaMDMxMTAvBgNV
BAMTKDM1RDIzREFBQTYwQ0E1RTBDNTNEQTIyQjk0MUNDQkE1NEM2NkUyMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtHvXjvtOrHCSbNWE2f84Kxn1q
gQib7aHO63RgJKUhDDj+sAiGibFBqMryrAOMItPd/c24Zvvm6r6BrJOo0li6z385
LucY0ijQHw40gk0HgCCK4/pokf1tn4DDPNPMaQMQEGp1D6Q4P5Y8qYLkg4H9kbm7
7BVoz6mZXMJz6v9Zd/Tf6InNS+uZaVh/GkPuLkk2cf/5k15uVlADJ+smumrS1cfa
aEi98CnYF3nmsSajmP5LsFPQ+KY9J1rsoMHxUJ2Ym3Y1dEFcYRZRg/dSPJLgi7Vm
aSI41Joj2hjFHYAjwCDj5sBKza0kHVFLbL/Vz+Ts/sy2GAqyD/4dDag7CwAPAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUNdI9qqYMpeDFPaIrlBzLpUxm4hgwHwYDVR0j
BBgwFoAU6IHOm7Eu2dr28JLgKB/Rkvnzxq0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkxzbWRwc0ZRV0JuemhYNlJQVHRjbVNKaUtLc2p2NlFwQnI0UThrd013
NUEvMC9FODgxQ0U5QkIxMkVEOURBRjZGMDkyRTAyODFGRDE5MkY5RjNDNkFELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0U4ODFDRTlCQjEyRUQ5REFG
NkYwOTJFMDI4MUZEMTkyRjlGM0M2QUQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JMc21kcHNGUVdCbnpoWDZSUFR0Y21TSmlLS3NqdjZRcEJyNFE4a3dNdzVBLzAv
MzIzODMwMzQzYTMyMzYzNzM0M2EzODMwMzAzMDNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzYzNDMzMzQzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEJnSAADANBgkqhkiG9w0BAQsF
AAOCAQEAOMA0F6YXvWDlAu2GKf3jLVh8o2dbbNc4HoahwVuB6K/Kn9i7C3qAIZpe
hCT4iUXVfZWn5gQUj8wCd8dP2Pqu3aqVDHi0XHolCiZW0r8b0Gzs6N3j/0LA6maJ
SOI7bA1WE2PfD7Lw6ucpQ+9WdPIUC1yYEZH2u+oy3IJv6w6t3bNQfJgFcRfs/SNc
8BtJ9qd5oTHpVQ3Ont9CPN4ck8auxJmLZLAsyVRJWiOMtBe5YdoJ+Imgyckc00HQ
auBxShzrSmSXNoVDcYfYFBFxWbf5ewqIMlsPQxeZFORTR1nUU3pvhOSMy1HGH2ki
4umrNXTHzG0zzjVfnWdeo3ZGo8KBJQ==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:23 2025 by rpki-client