Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BnqJf3PDT4bqiPsnLh2piFZSQJrGUbXRF7Ymu5Mu1m1s/0/323830343a376361633a3a2f33322d3332203d3e20323731353131.roa
File:                     323830343a376361633a3a2f33322d3332203d3e20323731353131.roa (raw, json)
Hash identifier:          WLal/dmYzu1pBzPwOoYpBfAbBeCEhTUBGMNZIK6xBcM=
Subject key identifier:   26:6E:82:B1:4A:E5:08:50:00:D0:09:50:47:2B:FD:13:26:E7:05:AB
Certificate issuer:       /CN=5B40140D65BF3DE552FD89CF040B98EFA6400070
Certificate serial:       2747686079D880914284C523DE54ABECD1013416
Authority key identifier: 5B:40:14:0D:65:BF:3D:E5:52:FD:89:CF:04:0B:98:EF:A6:40:00:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B40140D65BF3DE552FD89CF040B98EFA6400070.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BnqJf3PDT4bqiPsnLh2piFZSQJrGUbXRF7Ymu5Mu1m1s/0/323830343a376361633a3a2f33322d3332203d3e20323731353131.roa
Signing time:             Thu 16 Nov 2023 22:24:00 +0000
ROA not before:           Thu 16 Nov 2023 22:19:00 +0000
ROA not after:            Thu 14 Nov 2024 22:24:00 +0000
asID:                     271511
IP address blocks:        2804:7cac::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:47:68:60:79:d8:80:91:42:84:c5:23:de:54:ab:ec:d1:01:34:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B40140D65BF3DE552FD89CF040B98EFA6400070
        Validity
            Not Before: Nov 16 22:19:00 2023 GMT
            Not After : Nov 14 22:24:00 2024 GMT
        Subject: CN=266E82B14AE5085000D00950472BFD1326E705AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b2:3e:af:14:9e:92:4e:0e:8e:54:39:ca:0a:
                    40:37:13:9f:40:bb:05:50:77:11:f8:be:f2:8b:e1:
                    18:be:11:51:2b:e0:dd:70:d5:16:d9:3e:2d:12:5f:
                    f4:37:bf:58:19:22:24:20:f0:9b:a1:f4:54:0d:76:
                    c2:83:8a:a4:35:8e:7b:56:4a:62:9d:09:89:27:b8:
                    67:cd:d7:e2:97:6e:e5:70:10:23:bc:b1:49:c5:f8:
                    32:07:40:f1:04:1f:4d:29:b2:24:61:84:27:f8:64:
                    fd:58:fc:aa:18:7b:3e:4f:f5:0a:d8:1d:49:37:63:
                    e5:99:db:87:39:e5:65:8e:03:49:6d:59:b3:2e:d0:
                    d5:9e:89:e8:f6:e8:d1:a0:3d:5b:c2:e4:a5:6c:42:
                    c0:59:4e:a2:c4:31:ec:2e:4f:3d:18:03:5b:79:a2:
                    9c:ca:05:89:d7:cd:e7:65:24:d0:48:b3:68:2a:6a:
                    8c:29:ea:a1:3c:4e:7b:44:c4:9b:0f:f4:d8:a4:82:
                    16:1e:c2:45:25:44:f7:47:e5:ff:29:48:95:e1:5e:
                    4c:95:4d:27:43:21:ea:cb:51:78:f9:3b:a1:1a:29:
                    a2:eb:ef:82:b0:c6:92:94:5d:17:5e:89:4a:8d:2f:
                    97:14:88:3f:64:da:98:6c:84:26:5c:01:5c:84:30:
                    08:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:6E:82:B1:4A:E5:08:50:00:D0:09:50:47:2B:FD:13:26:E7:05:AB
            X509v3 Authority Key Identifier:
                keyid:5B:40:14:0D:65:BF:3D:E5:52:FD:89:CF:04:0B:98:EF:A6:40:00:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BnqJf3PDT4bqiPsnLh2piFZSQJrGUbXRF7Ymu5Mu1m1s/0/5B40140D65BF3DE552FD89CF040B98EFA6400070.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B40140D65BF3DE552FD89CF040B98EFA6400070.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BnqJf3PDT4bqiPsnLh2piFZSQJrGUbXRF7Ymu5Mu1m1s/0/323830343a376361633a3a2f33322d3332203d3e20323731353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7cac::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:45:4c:c4:4f:da:b1:15:4d:53:92:73:42:a4:5c:f3:0b:e9:
         1a:78:22:a6:ff:b7:a1:c8:30:8d:bf:0a:3e:c7:88:c6:3f:bb:
         a7:e7:95:8d:82:b5:1c:1e:a8:48:1b:a4:29:0b:31:a4:78:ce:
         3f:bd:01:d5:4a:ac:51:de:67:d7:c0:a8:9e:2d:c0:4a:ff:90:
         43:1e:95:a1:bb:2c:eb:67:54:e1:6f:b7:6f:ba:98:8b:98:29:
         db:7c:b5:ea:10:f4:88:68:b2:0d:53:9b:89:bf:2a:ec:82:10:
         9b:e9:6f:a3:ba:3b:f8:3b:e1:a5:d6:1b:17:30:b6:1b:99:47:
         e2:d6:58:57:66:7e:02:7c:a9:34:54:a4:77:46:83:d9:4a:0e:
         3e:fd:32:f6:20:f5:ff:a0:3b:56:67:75:5e:5f:fe:0e:c9:b5:
         e7:e1:79:8e:19:43:a5:b7:8f:3c:f3:d0:55:94:ac:f7:c7:50:
         7c:fe:c6:8e:e2:40:31:1a:38:ec:e5:3c:d5:1d:17:31:27:34:
         0d:f6:0a:3a:38:f8:95:14:95:73:3c:4d:3b:f0:04:4f:48:84:
         ef:4f:d1:13:af:87:75:4c:21:81:c3:7e:a1:f8:01:67:3d:eb:
         78:fa:e9:4d:f7:ff:f5:d7:eb:22:4e:a4:e2:00:e0:c3:c8:f4:
         30:76:5a:5c
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUJ0doYHnYgJFChMUj3lSr7NEBNBYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUI0MDE0MEQ2NUJGM0RFNTUyRkQ4OUNGMDQwQjk4RUZB
NjQwMDA3MDAeFw0yMzExMTYyMjE5MDBaFw0yNDExMTQyMjI0MDBaMDMxMTAvBgNV
BAMTKDI2NkU4MkIxNEFFNTA4NTAwMEQwMDk1MDQ3MkJGRDEzMjZFNzA1QUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwsj6vFJ6STg6OVDnKCkA3E59A
uwVQdxH4vvKL4Ri+EVEr4N1w1RbZPi0SX/Q3v1gZIiQg8Juh9FQNdsKDiqQ1jntW
SmKdCYknuGfN1+KXbuVwECO8sUnF+DIHQPEEH00psiRhhCf4ZP1Y/KoYez5P9QrY
HUk3Y+WZ24c55WWOA0ltWbMu0NWeiej26NGgPVvC5KVsQsBZTqLEMewuTz0YA1t5
opzKBYnXzedlJNBIs2gqaowp6qE8TntExJsP9NikghYewkUlRPdH5f8pSJXhXkyV
TSdDIerLUXj5O6EaKaLr74KwxpKUXRdeiUqNL5cUiD9k2phshCZcAVyEMAj9AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUJm6CsUrlCFAA0AlQRyv9EybnBaswHwYDVR0j
BBgwFoAUW0AUDWW/PeVS/YnPBAuY76ZAAHAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQm5xSmYzUERUNGJxaVBzbkxoMnBpRlpTUUpyR1ViWFJGN1ltdTVNdTFt
MXMvMC81QjQwMTQwRDY1QkYzREU1NTJGRDg5Q0YwNDBCOThFRkE2NDAwMDcwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVCNDAxNDBENjVCRjNERTU1
MkZEODlDRjA0MEI5OEVGQTY0MDAwNzAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JucUpmM1BEVDRicWlQc25MaDJwaUZaU1FKckdVYlhSRjdZbXU1TXUxbTFzLzAv
MzIzODMwMzQzYTM3NjM2MTYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMx
MzUzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAR8rDANBgkqhkiG9w0BAQsFAAOCAQEAaEVMxE/a
sRVNU5JzQqRc8wvpGngipv+3ocgwjb8KPseIxj+7p+eVjYK1HB6oSBukKQsxpHjO
P70B1UqsUd5n18Coni3ASv+QQx6Vobss62dU4W+3b7qYi5gp23y16hD0iGiyDVOb
ib8q7IIQm+lvo7o7+DvhpdYbFzC2G5lH4tZYV2Z+AnypNFSkd0aD2UoOPv0y9iD1
/6A7Vmd1Xl/+Dsm15+F5jhlDpbePPPPQVZSs98dQfP7GjuJAMRo47OU81R0XMSc0
DfYKOjj4lRSVczxNO/AET0iE70/RE6+HdUwhgcN+ofgBZz3rePrpTff/9dfrIk6k
4gDgw8j0MHZaXA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 02:21:52 2025 by rpki-client