Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C2fvRbuAYkWfUV8F4cTd4VBfb4HfxXKzWNXhiAAAK7h7/0/323830343a323939343a3a2f33322d313238203d3e20323634303233.roa
File:                     323830343a323939343a3a2f33322d313238203d3e20323634303233.roa (raw, json)
Hash identifier:          IFd6DBYf5SDL2XwUbbLYKE+u1TBKRPkjCYALK6LvnQQ=
Subject key identifier:   F0:5F:36:C8:FA:59:CC:14:44:D6:E6:6C:F2:9E:C8:89:0E:A6:46:5C
Certificate issuer:       /CN=08136CA7352D25C029AA2B1D778499953A3A28E7
Certificate serial:       3A2318C23A7A0D4EACF884F2CDEAC43606D96326
Authority key identifier: 08:13:6C:A7:35:2D:25:C0:29:AA:2B:1D:77:84:99:95:3A:3A:28:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08136CA7352D25C029AA2B1D778499953A3A28E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C2fvRbuAYkWfUV8F4cTd4VBfb4HfxXKzWNXhiAAAK7h7/0/323830343a323939343a3a2f33322d313238203d3e20323634303233.roa
Signing time:             Thu 19 Sep 2024 18:04:19 +0000
ROA not before:           Thu 19 Sep 2024 17:59:19 +0000
ROA not after:            Thu 18 Sep 2025 18:04:19 +0000
asID:                     264023
IP address blocks:        2804:2994::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:23:18:c2:3a:7a:0d:4e:ac:f8:84:f2:cd:ea:c4:36:06:d9:63:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08136CA7352D25C029AA2B1D778499953A3A28E7
        Validity
            Not Before: Sep 19 17:59:19 2024 GMT
            Not After : Sep 18 18:04:19 2025 GMT
        Subject: CN=F05F36C8FA59CC1444D6E66CF29EC8890EA6465C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:19:59:85:fe:2a:0c:e5:a1:ec:3b:a2:1f:15:
                    61:57:17:fb:70:73:36:ab:48:87:77:ee:74:4e:ae:
                    35:75:cf:c7:a7:6d:17:25:74:6d:7e:a9:2d:80:f4:
                    63:fd:34:08:4a:76:1a:dc:d8:4d:28:f1:ac:bc:d0:
                    f9:d4:03:c7:d8:72:8e:30:49:34:68:c1:f1:5f:44:
                    3f:99:65:53:df:24:6b:04:ee:62:f7:2b:dd:21:ab:
                    4e:6c:05:b2:74:11:2e:80:74:b4:9d:19:75:a2:d5:
                    d1:9c:8b:2b:c1:73:79:ed:35:46:10:a6:d2:36:7d:
                    29:b8:ff:d5:1a:31:c2:d1:94:98:d1:7b:68:be:69:
                    50:7b:a2:a9:75:85:80:57:41:aa:21:d8:d9:50:bb:
                    ce:39:c5:a7:bc:51:20:82:9d:e9:1d:5f:c9:59:ba:
                    53:88:33:17:1f:cd:8f:69:7f:bd:34:05:d0:16:7c:
                    3e:26:23:9d:df:19:3a:6b:28:bf:b1:c8:34:ac:65:
                    47:2d:a1:ca:d2:ab:b7:69:b2:2b:23:4a:c8:c1:b5:
                    1b:b9:59:6d:98:62:df:bf:2f:c3:85:d8:6f:d7:b1:
                    e9:ca:45:18:17:d8:4c:50:0b:11:4b:bd:39:87:57:
                    4c:3c:5f:d3:8b:8f:90:1b:a6:74:09:eb:ba:51:08:
                    16:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:5F:36:C8:FA:59:CC:14:44:D6:E6:6C:F2:9E:C8:89:0E:A6:46:5C
            X509v3 Authority Key Identifier:
                keyid:08:13:6C:A7:35:2D:25:C0:29:AA:2B:1D:77:84:99:95:3A:3A:28:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C2fvRbuAYkWfUV8F4cTd4VBfb4HfxXKzWNXhiAAAK7h7/0/08136CA7352D25C029AA2B1D778499953A3A28E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08136CA7352D25C029AA2B1D778499953A3A28E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C2fvRbuAYkWfUV8F4cTd4VBfb4HfxXKzWNXhiAAAK7h7/0/323830343a323939343a3a2f33322d313238203d3e20323634303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2994::/32

    Signature Algorithm: sha256WithRSAEncryption
         b5:53:81:df:1c:be:8b:4c:2e:56:f5:28:1f:f3:96:ec:83:27:
         c5:5d:a8:f8:df:6a:12:ef:6b:3c:8b:71:be:76:ae:6e:d3:23:
         ef:ff:4b:12:84:55:88:1d:63:87:f2:e0:26:3f:b8:a4:fa:1a:
         9d:5a:61:ac:29:ff:ca:a5:0e:17:f1:21:ad:51:b3:f3:81:14:
         15:2a:2c:36:9c:95:10:38:40:1b:28:15:3b:1d:87:56:a2:ad:
         e8:ec:48:91:32:50:60:64:63:2f:18:86:d1:04:2b:50:77:64:
         56:85:09:a7:8c:c3:72:b6:cc:61:8d:f3:56:ca:77:58:2b:2e:
         a8:1a:c5:5e:7b:36:93:30:d3:d8:ec:3f:af:3c:dd:1f:17:26:
         ed:25:e4:38:9d:c4:a0:bf:60:58:9d:a5:98:02:77:b9:02:28:
         77:44:c6:4b:8b:6e:99:24:24:94:f7:29:6f:07:01:d9:e4:cc:
         40:22:b3:0f:76:8e:54:56:b5:8a:0b:c9:88:ff:7b:96:95:0c:
         0c:b3:d9:66:63:25:3f:ca:c5:f8:62:a4:b6:2f:c8:ee:25:92:
         44:f9:ea:ef:35:b0:bd:5d:0d:c1:17:97:64:2a:a4:df:f6:98:
         f9:0b:cb:1e:54:24:c7:20:51:87:ce:03:29:f9:c7:7b:e8:9d:
         e2:12:ba:25
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUOiMYwjp6DU6s+ITyzerENgbZYyYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDgxMzZDQTczNTJEMjVDMDI5QUEyQjFENzc4NDk5OTUz
QTNBMjhFNzAeFw0yNDA5MTkxNzU5MTlaFw0yNTA5MTgxODA0MTlaMDMxMTAvBgNV
BAMTKEYwNUYzNkM4RkE1OUNDMTQ0NEQ2RTY2Q0YyOUVDODg5MEVBNjQ2NUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxGVmF/ioM5aHsO6IfFWFXF/tw
czarSId37nROrjV1z8enbRcldG1+qS2A9GP9NAhKdhrc2E0o8ay80PnUA8fYco4w
STRowfFfRD+ZZVPfJGsE7mL3K90hq05sBbJ0ES6AdLSdGXWi1dGciyvBc3ntNUYQ
ptI2fSm4/9UaMcLRlJjRe2i+aVB7oql1hYBXQaoh2NlQu845xae8USCCnekdX8lZ
ulOIMxcfzY9pf700BdAWfD4mI53fGTprKL+xyDSsZUctocrSq7dpsisjSsjBtRu5
WW2YYt+/L8OF2G/XsenKRRgX2ExQCxFLvTmHV0w8X9OLj5AbpnQJ67pRCBaRAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQU8F82yPpZzBRE1uZs8p7IiQ6mRlwwHwYDVR0j
BBgwFoAUCBNspzUtJcApqisdd4SZlTo6KOcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzJmdlJidUFZa1dmVVY4RjRjVGQ0VkJmYjRIZnhYS3pXTlhoaUFBQUs3
aDcvMC8wODEzNkNBNzM1MkQyNUMwMjlBQTJCMUQ3Nzg0OTk5NTNBM0EyOEU3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA4MTM2Q0E3MzUyRDI1QzAy
OUFBMkIxRDc3ODQ5OTk1M0EzQTI4RTcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0MyZnZSYnVBWWtXZlVWOEY0Y1RkNFZCZmI0SGZ4WEt6V05YaGlBQUFLN2g3LzAv
MzIzODMwMzQzYTMyMzkzOTM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzQzMDMyMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBCmUMA0GCSqGSIb3DQEBCwUAA4IBAQC1U4Hf
HL6LTC5W9Sgf85bsgyfFXaj432oS72s8i3G+dq5u0yPv/0sShFWIHWOH8uAmP7ik
+hqdWmGsKf/KpQ4X8SGtUbPzgRQVKiw2nJUQOEAbKBU7HYdWoq3o7EiRMlBgZGMv
GIbRBCtQd2RWhQmnjMNytsxhjfNWyndYKy6oGsVeezaTMNPY7D+vPN0fFybtJeQ4
ncSgv2BYnaWYAne5Aih3RMZLi26ZJCSU9ylvBwHZ5MxAIrMPdo5UVrWKC8mI/3uW
lQwMs9lmYyU/ysX4YqS2L8juJZJE+ervNbC9XQ3BF5dkKqTf9pj5C8seVCTHIFGH
zgMp+cd76J3iErol
-----END CERTIFICATE-----
Generated at Tue Apr 8 21:08:30 2025 by rpki-client