Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/0/323830343a373365633a633030303a3a2f33342d3334203d3e20323730393436.roa
File:                     323830343a373365633a633030303a3a2f33342d3334203d3e20323730393436.roa (raw, json)
Hash identifier:          gSZIGXUCqv+kd+yFkEgNf5TemBDMdYhw0QQ8CciPAXU=
Subject key identifier:   92:AC:05:B4:F7:A0:13:8E:CA:37:76:3D:26:16:5B:EF:89:D6:06:73
Certificate issuer:       /CN=87C98FAEA3D481ABF326707163A8DC73294B8D71
Certificate serial:       2886F9224DE168C9B20A9A55B2AEA9644A77335B
Authority key identifier: 87:C9:8F:AE:A3:D4:81:AB:F3:26:70:71:63:A8:DC:73:29:4B:8D:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87C98FAEA3D481ABF326707163A8DC73294B8D71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/0/323830343a373365633a633030303a3a2f33342d3334203d3e20323730393436.roa
Signing time:             Sat 17 Feb 2024 05:23:53 +0000
ROA not before:           Sat 17 Feb 2024 05:18:53 +0000
ROA not after:            Sat 15 Feb 2025 05:23:53 +0000
asID:                     270946
IP address blocks:        2804:73ec:c000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:86:f9:22:4d:e1:68:c9:b2:0a:9a:55:b2:ae:a9:64:4a:77:33:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87C98FAEA3D481ABF326707163A8DC73294B8D71
        Validity
            Not Before: Feb 17 05:18:53 2024 GMT
            Not After : Feb 15 05:23:53 2025 GMT
        Subject: CN=92AC05B4F7A0138ECA37763D26165BEF89D60673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:34:fd:b3:54:0f:81:c8:aa:0a:cc:15:ba:1e:
                    8a:57:fa:38:9c:3f:d4:7e:5d:d8:17:d0:ab:f1:f5:
                    7d:74:e0:7a:71:ff:12:70:05:4d:47:ae:b9:4b:a0:
                    53:8e:a6:86:1a:b9:42:5e:64:ec:83:19:df:4c:12:
                    58:08:f7:59:c8:6b:d8:d4:dd:9e:11:95:6f:f9:28:
                    8d:7a:a9:f9:30:e8:78:c1:69:1e:42:5a:d7:3b:31:
                    e1:96:57:2a:32:4c:3b:80:c9:1f:e1:0d:29:55:b8:
                    a1:4b:de:38:33:59:6d:34:62:c7:73:d2:3e:7c:12:
                    59:d5:31:cd:14:23:d6:74:dd:90:f0:11:a2:c9:67:
                    64:89:45:ca:3d:29:c7:04:43:da:e2:07:35:b9:86:
                    97:a6:bb:5a:db:c6:a0:4f:41:2f:e4:e9:b0:40:66:
                    72:9a:70:6e:ae:cd:cf:5a:6f:00:73:c8:3b:e0:aa:
                    51:32:a3:28:c5:e5:33:5f:52:62:e9:83:ae:30:da:
                    bf:cc:87:12:b8:a4:28:a4:e8:0a:e5:27:4b:ce:54:
                    57:26:7f:1a:ac:ad:d1:63:1c:b1:b2:f3:31:e3:bd:
                    78:c5:93:41:d7:e3:64:e5:e6:38:0c:ec:74:9f:0c:
                    92:b7:7b:12:68:c5:7d:b9:ed:45:ed:23:a3:7e:2f:
                    21:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:AC:05:B4:F7:A0:13:8E:CA:37:76:3D:26:16:5B:EF:89:D6:06:73
            X509v3 Authority Key Identifier:
                keyid:87:C9:8F:AE:A3:D4:81:AB:F3:26:70:71:63:A8:DC:73:29:4B:8D:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/0/87C98FAEA3D481ABF326707163A8DC73294B8D71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87C98FAEA3D481ABF326707163A8DC73294B8D71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/0/323830343a373365633a633030303a3a2f33342d3334203d3e20323730393436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:73ec:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         99:4e:2a:ce:c6:06:dc:38:c8:33:0c:82:16:ef:3b:cc:e9:91:
         58:12:77:be:96:d8:46:a8:c5:a4:2b:d3:ca:c9:6a:75:d6:80:
         6b:39:d3:f5:0e:39:8f:c5:0a:92:10:70:70:ca:9f:bd:6b:ea:
         bd:e6:83:c7:51:72:8f:ae:aa:58:87:c2:cb:7f:ec:04:d6:77:
         95:a4:54:7d:d8:36:8e:47:c4:fe:b0:cd:27:e8:57:b1:a0:74:
         53:55:3a:2b:4e:ba:6a:af:07:3e:bf:ad:b0:ad:12:98:5d:49:
         c9:58:5d:ac:6f:a0:c5:6f:57:63:00:a5:6e:8d:e4:e5:c1:59:
         73:d2:a1:7b:63:f7:90:e0:07:57:bf:4a:e3:1e:ad:fa:fa:28:
         a2:67:aa:3b:2a:6e:f5:ff:e5:9f:e6:ff:76:bd:c2:33:8f:e6:
         9c:67:60:de:29:3f:55:77:e6:07:59:d5:2a:28:25:b7:26:2e:
         ae:89:8c:8a:9a:81:5b:f8:3e:a4:1f:9f:ca:b9:57:22:db:66:
         da:16:23:ae:2b:4d:86:7d:01:df:26:64:dd:60:94:9a:e3:94:
         0f:52:e7:71:91:70:26:4f:49:9b:db:00:16:84:8c:3f:dd:b1:
         44:2c:fa:6f:a8:8a:2d:c0:31:e2:97:5c:cd:3a:d8:33:48:7a:
         ee:37:a8:63
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUKIb5Ik3haMmyCppVsq6pZEp3M1swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODdDOThGQUVBM0Q0ODFBQkYzMjY3MDcxNjNBOERDNzMy
OTRCOEQ3MTAeFw0yNDAyMTcwNTE4NTNaFw0yNTAyMTUwNTIzNTNaMDMxMTAvBgNV
BAMTKDkyQUMwNUI0RjdBMDEzOEVDQTM3NzYzRDI2MTY1QkVGODlENjA2NzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFNP2zVA+ByKoKzBW6HopX+jic
P9R+XdgX0Kvx9X104Hpx/xJwBU1HrrlLoFOOpoYauUJeZOyDGd9MElgI91nIa9jU
3Z4RlW/5KI16qfkw6HjBaR5CWtc7MeGWVyoyTDuAyR/hDSlVuKFL3jgzWW00Ysdz
0j58ElnVMc0UI9Z03ZDwEaLJZ2SJRco9KccEQ9riBzW5hpemu1rbxqBPQS/k6bBA
ZnKacG6uzc9abwBzyDvgqlEyoyjF5TNfUmLpg64w2r/MhxK4pCik6ArlJ0vOVFcm
fxqsrdFjHLGy8zHjvXjFk0HX42Tl5jgM7HSfDJK3exJoxX257UXtI6N+LyHvAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUkqwFtPegE47KN3Y9JhZb74nWBnMwHwYDVR0j
BBgwFoAUh8mPrqPUgavzJnBxY6jccylLjXEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQm8zOFYxeHQ2WFlhYXR1SmdTd0pCZkVnZ2ljOGZkdHhIWXBGUDJHVkR6
eHIvMC84N0M5OEZBRUEzRDQ4MUFCRjMyNjcwNzE2M0E4REM3MzI5NEI4RDcxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzg3Qzk4RkFFQTNENDgxQUJG
MzI2NzA3MTYzQThEQzczMjk0QjhENzEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JvMzhWMXh0NlhZYWF0dUpnU3dKQmZFZ2dpYzhmZHR4SFlwRlAyR1ZEenhyLzAv
MzIzODMwMzQzYTM3MzM2NTYzM2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzczMDM5MzQzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEc+zAMA0GCSqGSIb3DQEBCwUA
A4IBAQCZTirOxgbcOMgzDIIW7zvM6ZFYEne+lthGqMWkK9PKyWp11oBrOdP1DjmP
xQqSEHBwyp+9a+q95oPHUXKPrqpYh8LLf+wE1neVpFR92DaOR8T+sM0n6FexoHRT
VTorTrpqrwc+v62wrRKYXUnJWF2sb6DFb1djAKVujeTlwVlz0qF7Y/eQ4AdXv0rj
Hq36+iiiZ6o7Km71/+Wf5v92vcIzj+acZ2DeKT9Vd+YHWdUqKCW3Ji6uiYyKmoFb
+D6kH5/KuVci22baFiOuK02GfQHfJmTdYJSa45QPUudxkXAmT0mb2wAWhIw/3bFE
LPpvqIotwDHil1zNOtgzSHruN6hj
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:45 2025 by rpki-client