Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a633030303a3a2f34302d3430203d3e20323634333434.roa
File:                     323830343a323637343a633030303a3a2f34302d3430203d3e20323634333434.roa (raw, json)
Hash identifier:          js9tcPHO19OvlhoTVVvVgb0eqqEaxuSYVRhxZEmfui8=
Subject key identifier:   7A:3A:AA:FA:2E:EB:06:49:0F:20:42:72:1C:57:9C:86:C4:D0:40:06
Certificate issuer:       /CN=E881CE9BB12ED9DAF6F092E0281FD192F9F3C6AD
Certificate serial:       352A3C5768CDCBEDEBE51F23BF409883514AC2DE
Authority key identifier: E8:81:CE:9B:B1:2E:D9:DA:F6:F0:92:E0:28:1F:D1:92:F9:F3:C6:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E881CE9BB12ED9DAF6F092E0281FD192F9F3C6AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a633030303a3a2f34302d3430203d3e20323634333434.roa
Signing time:             Fri 17 Mar 2023 20:55:43 +0000
ROA not before:           Fri 17 Mar 2023 20:50:43 +0000
ROA not after:            Fri 15 Mar 2024 20:55:43 +0000
asID:                     264344
IP address blocks:        2804:2674:c000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:2a:3c:57:68:cd:cb:ed:eb:e5:1f:23:bf:40:98:83:51:4a:c2:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E881CE9BB12ED9DAF6F092E0281FD192F9F3C6AD
        Validity
            Not Before: Mar 17 20:50:43 2023 GMT
            Not After : Mar 15 20:55:43 2024 GMT
        Subject: CN=7A3AAAFA2EEB06490F2042721C579C86C4D04006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a7:39:dd:cb:78:dc:d2:80:c2:d3:3d:80:66:
                    9f:d2:56:9a:2c:b9:84:ab:f1:3f:cb:db:01:44:22:
                    f7:38:1f:e0:05:e0:94:40:ad:3c:c9:16:e9:b9:e1:
                    e2:dc:c8:6f:7c:e5:1a:bd:c8:9f:f3:e7:3f:ae:9c:
                    3e:6d:af:a5:c1:75:20:a1:53:5a:93:47:d4:1f:60:
                    1c:a5:d1:cb:ce:73:50:6d:95:f8:60:81:b1:38:fe:
                    55:9a:fe:6b:95:05:24:56:f8:a7:a1:bf:f3:49:21:
                    46:e6:b1:1a:dd:bd:b6:f3:bc:60:7b:56:59:d0:7e:
                    e1:a5:79:bc:c8:fd:93:93:9d:ad:e7:b6:ca:54:85:
                    49:3a:26:34:4e:0d:9c:8c:0e:e0:39:2a:c4:65:44:
                    00:14:f8:24:ef:01:2e:5d:5c:7b:a7:90:e9:90:6e:
                    49:39:e5:b3:4d:59:37:6b:65:9d:5f:18:41:da:21:
                    4b:a1:6b:16:8f:f5:5f:06:b2:62:c4:6a:8f:c3:43:
                    07:1a:b1:2b:3d:4a:1d:b3:84:b7:6a:99:ac:44:e5:
                    08:fd:bf:fb:bf:15:cf:62:e6:99:c2:89:a0:04:c6:
                    ea:59:b2:87:a8:2c:68:4a:1e:d7:e2:3d:09:2f:be:
                    ed:10:a2:02:61:c3:e3:4a:39:cb:2b:63:8b:2b:4a:
                    80:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:3A:AA:FA:2E:EB:06:49:0F:20:42:72:1C:57:9C:86:C4:D0:40:06
            X509v3 Authority Key Identifier:
                keyid:E8:81:CE:9B:B1:2E:D9:DA:F6:F0:92:E0:28:1F:D1:92:F9:F3:C6:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/E881CE9BB12ED9DAF6F092E0281FD192F9F3C6AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E881CE9BB12ED9DAF6F092E0281FD192F9F3C6AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a633030303a3a2f34302d3430203d3e20323634333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2674:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         6d:00:ef:ac:17:8e:23:af:f8:9f:f9:49:fe:cb:7e:e5:9d:ef:
         2f:99:96:ca:82:7d:35:4c:42:d3:f1:f8:e8:b6:97:b8:d3:db:
         be:d7:a3:4e:8d:72:e6:84:3c:11:ec:1d:67:72:b4:ce:f0:27:
         dc:27:28:6d:ae:06:82:b3:a4:93:e1:a9:41:ef:64:5d:96:a0:
         76:e3:47:86:eb:e4:52:df:03:6f:6b:88:4e:25:95:29:d8:ca:
         5c:ec:e3:6b:a2:5e:37:76:e7:4e:12:53:26:0d:d1:70:76:c4:
         5c:eb:4b:7b:6f:3a:af:5b:08:b7:a6:00:47:d4:3e:f7:70:37:
         fa:79:12:de:19:1e:e7:67:6b:d5:0b:d9:18:a1:17:bb:ec:43:
         b9:58:8c:6f:33:cb:f7:31:59:42:34:60:97:11:54:3e:93:79:
         b6:13:1a:82:b0:06:32:43:e3:dc:6d:9b:3e:9d:bc:e6:f1:b7:
         41:6a:ca:c0:2e:e2:2b:28:03:bc:4b:26:a7:39:fe:15:88:d7:
         66:ff:2e:3b:11:b6:32:58:f7:b1:04:ae:f4:77:57:e6:3a:29:
         9e:70:ab:ae:50:d0:11:b4:5c:7c:77:e8:d4:3e:7b:70:dd:6c:
         66:6e:d8:51:65:7e:1c:ab:f0:4d:73:e7:d6:56:ea:53:e2:2c:
         9a:e1:c9:6b
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUNSo8V2jNy+3r5R8jv0CYg1FKwt4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTg4MUNFOUJCMTJFRDlEQUY2RjA5MkUwMjgxRkQxOTJG
OUYzQzZBRDAeFw0yMzAzMTcyMDUwNDNaFw0yNDAzMTUyMDU1NDNaMDMxMTAvBgNV
BAMTKDdBM0FBQUZBMkVFQjA2NDkwRjIwNDI3MjFDNTc5Qzg2QzREMDQwMDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDApzndy3jc0oDC0z2AZp/SVpos
uYSr8T/L2wFEIvc4H+AF4JRArTzJFum54eLcyG985Rq9yJ/z5z+unD5tr6XBdSCh
U1qTR9QfYByl0cvOc1BtlfhggbE4/lWa/muVBSRW+Kehv/NJIUbmsRrdvbbzvGB7
VlnQfuGlebzI/ZOTna3ntspUhUk6JjRODZyMDuA5KsRlRAAU+CTvAS5dXHunkOmQ
bkk55bNNWTdrZZ1fGEHaIUuhaxaP9V8GsmLEao/DQwcasSs9Sh2zhLdqmaxE5Qj9
v/u/Fc9i5pnCiaAExupZsoeoLGhKHtfiPQkvvu0QogJhw+NKOcsrY4srSoDHAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUejqq+i7rBkkPIEJyHFechsTQQAYwHwYDVR0j
BBgwFoAU6IHOm7Eu2dr28JLgKB/Rkvnzxq0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkxzbWRwc0ZRV0JuemhYNlJQVHRjbVNKaUtLc2p2NlFwQnI0UThrd013
NUEvMC9FODgxQ0U5QkIxMkVEOURBRjZGMDkyRTAyODFGRDE5MkY5RjNDNkFELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0U4ODFDRTlCQjEyRUQ5REFG
NkYwOTJFMDI4MUZEMTkyRjlGM0M2QUQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JMc21kcHNGUVdCbnpoWDZSUFR0Y21TSmlLS3NqdjZRcEJyNFE4a3dNdzVBLzAv
MzIzODMwMzQzYTMyMzYzNzM0M2E2MzMwMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzNDMzMzQzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEJnTAMA0GCSqGSIb3DQEBCwUA
A4IBAQBtAO+sF44jr/if+Un+y37lne8vmZbKgn01TELT8fjotpe409u+16NOjXLm
hDwR7B1ncrTO8CfcJyhtrgaCs6ST4alB72RdlqB240eG6+RS3wNva4hOJZUp2Mpc
7ONrol43dudOElMmDdFwdsRc60t7bzqvWwi3pgBH1D73cDf6eRLeGR7nZ2vVC9kY
oRe77EO5WIxvM8v3MVlCNGCXEVQ+k3m2ExqCsAYyQ+PcbZs+nbzm8bdBasrALuIr
KAO8SyanOf4ViNdm/y47EbYyWPexBK70d1fmOimecKuuUNARtFx8d+jUPntw3Wxm
bthRZX4cq/BNc+fWVupT4iya4clr
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:01 2025 by rpki-client