Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/323830343a323566303a343030303a3a2f33342d3334203d3e20323634333131.roa
File:                     323830343a323566303a343030303a3a2f33342d3334203d3e20323634333131.roa (raw, json)
Hash identifier:          ZsMQIn6CLYVyW/wFx20MVqxhBklCNweY/cfnB88K9gY=
Subject key identifier:   4C:20:C2:73:2E:B4:74:CF:F5:4A:09:75:CD:D3:0B:50:DA:19:0C:9E
Certificate issuer:       /CN=B5E0BE3C4F73F852BFF3535537037CAE482A4EFA
Certificate serial:       645C238179463A033B84B04E8D95A9A02A22C299
Authority key identifier: B5:E0:BE:3C:4F:73:F8:52:BF:F3:53:55:37:03:7C:AE:48:2A:4E:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/323830343a323566303a343030303a3a2f33342d3334203d3e20323634333131.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     264311
IP address blocks:        2804:25f0:4000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:5c:23:81:79:46:3a:03:3b:84:b0:4e:8d:95:a9:a0:2a:22:c2:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5E0BE3C4F73F852BFF3535537037CAE482A4EFA
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:26:5a:ab:98:2f:19:49:e6:ca:4f:a8:31:44:
                    64:9d:70:fe:c7:b0:79:0d:1c:aa:80:6b:ee:26:6c:
                    3d:4d:38:aa:5c:cc:59:f1:e3:00:8b:11:a7:af:55:
                    92:9e:b8:ad:53:98:8b:fe:0f:6c:52:99:3d:79:59:
                    e9:a2:ac:e8:24:cf:1b:15:9b:aa:b0:bd:27:96:b6:
                    f7:81:60:92:80:f8:8e:8b:bd:e9:b5:0e:cb:a2:bd:
                    96:00:7d:9c:86:49:12:17:1c:2f:2a:4d:e9:2d:79:
                    9d:6c:c6:c7:45:91:63:cc:34:c3:8e:2e:b3:48:4c:
                    34:3a:9e:50:41:7c:4d:5a:0d:bb:f6:90:4a:5d:a6:
                    19:90:b9:3d:28:50:86:5a:a7:63:12:f0:9c:fd:76:
                    07:27:1d:71:cc:f6:88:15:b5:69:1d:e3:36:f9:f1:
                    af:99:ec:1a:a2:27:27:93:57:90:c1:b3:e5:b5:d5:
                    96:3f:ab:16:23:1a:18:61:7c:9f:51:43:40:b3:64:
                    cd:3c:a5:e1:7f:73:9e:20:26:fa:0f:1c:26:4b:84:
                    19:46:74:38:63:70:ae:5f:28:a8:99:fb:7a:97:78:
                    3a:68:0f:6b:a7:6e:33:3c:a6:dc:86:80:2f:36:a5:
                    20:2c:52:40:df:b0:f9:01:b6:52:30:ba:bc:c3:3e:
                    0d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:20:C2:73:2E:B4:74:CF:F5:4A:09:75:CD:D3:0B:50:DA:19:0C:9E
            X509v3 Authority Key Identifier:
                keyid:B5:E0:BE:3C:4F:73:F8:52:BF:F3:53:55:37:03:7C:AE:48:2A:4E:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/323830343a323566303a343030303a3a2f33342d3334203d3e20323634333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25f0:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         93:73:5c:09:28:2c:81:e7:e6:67:83:32:8b:ea:41:cd:d8:ad:
         69:68:97:22:a3:72:d6:1e:54:73:ae:d6:42:d9:34:64:41:1c:
         37:f7:2b:58:1e:59:c0:43:43:39:f0:83:a9:aa:02:5d:f8:12:
         6e:d6:d7:68:16:79:06:34:a5:e9:5f:49:b5:23:77:cc:e1:a1:
         94:69:aa:7b:f6:39:3b:c6:ca:f7:5d:20:44:fb:02:0b:cb:d0:
         68:89:25:a2:ca:40:6b:bb:f7:18:76:54:6c:73:4b:7f:40:f8:
         a9:69:eb:c9:b8:13:42:06:96:c5:50:02:92:40:71:4f:85:63:
         b5:6d:94:4f:b0:0d:31:06:cc:64:b5:a3:89:b7:08:e9:12:7a:
         eb:fe:30:27:bf:ad:e8:56:44:dd:8f:e2:48:da:33:9a:d2:c8:
         39:cd:31:8b:09:24:de:23:a1:5d:a1:25:e2:eb:2c:f3:2c:1f:
         ad:48:f4:e3:03:d2:cb:cc:22:b9:0c:4a:ce:af:b9:7a:cd:58:
         8c:6a:15:c9:aa:d1:3f:f6:8a:ed:50:af:02:38:b4:fa:ce:01:
         bc:9a:e2:da:60:fa:b6:c8:fa:a0:de:92:f0:c7:15:48:7e:09:
         75:5c:26:83:eb:86:de:79:7e:41:aa:4b:75:48:60:30:fa:20:
         5a:ba:86:9f
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUZFwjgXlGOgM7hLBOjZWpoCoiwpkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVFMEJFM0M0RjczRjg1MkJGRjM1MzU1MzcwMzdDQUU0
ODJBNEVGQTAeFw0yNTAzMDUxODU1MDBaFw0yNjAzMDQxOTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTcyNjVBQUI5ODJGMTk0OUU2
Q0E0RkE4MzE0NDY0OUQ3MEZFQzdCMDc5MEQxQ0FBODA2QkVFMjY2QzNENEQzOEFB
NUNDQzU5RjFFMzAwOEIxMUE3QUY1NTkyOUVCOEFENTM5ODhCRkUwRjZDNTI5OTNE
Nzk1OUU5QTJBQ0U4MjRDRjFCMTU5QkFBQjBCRDI3OTZCNkY3ODE2MDkyODBGODhF
OEJCREU5QjUwRUNCQTJCRDk2MDA3RDlDODY0OTEyMTcxQzJGMkE0REU5MkQ3OTlE
NkNDNkM3NDU5MTYzQ0MzNEMzOEUyRUIzNDg0QzM0M0E5RTUwNDE3QzRENUEwREJC
RjY5MDRBNURBNjE5OTBCOTNEMjg1MDg2NUFBNzYzMTJGMDlDRkQ3NjA3MjcxRDcx
Q0NGNjg4MTVCNTY5MURFMzM2RjlGMUFGOTlFQzFBQTIyNzI3OTM1NzkwQzFCM0U1
QjVENTk2M0ZBQjE2MjMxQTE4NjE3QzlGNTE0MzQwQjM2NENEM0NBNUUxN0Y3MzlF
MjAyNkZBMEYxQzI2NEI4NDE5NDY3NDM4NjM3MEFFNUYyOEE4OTlGQjdBOTc3ODNB
NjgwRjZCQTc2RTMzM0NBNkRDODY4MDJGMzZBNTIwMkM1MjQwREZCMEY5MDFCNjUy
MzBCQUJDQzMzRTBEM0YwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA5yZaq5gvGUnmyk+oMURknXD+x7B5DRyqgGvuJmw9TTiqXMxZ8eMA
ixGnr1WSnritU5iL/g9sUpk9eVnpoqzoJM8bFZuqsL0nlrb3gWCSgPiOi73ptQ7L
or2WAH2chkkSFxwvKk3pLXmdbMbHRZFjzDTDji6zSEw0Op5QQXxNWg279pBKXaYZ
kLk9KFCGWqdjEvCc/XYHJx1xzPaIFbVpHeM2+fGvmewaoicnk1eQwbPltdWWP6sW
IxoYYXyfUUNAs2TNPKXhf3OeICb6DxwmS4QZRnQ4Y3CuXyiomft6l3g6aA9rp24z
PKbchoAvNqUgLFJA37D5AbZSMLq8wz4NPwIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FEwgwnMutHTP9UoJdc3TC1DaGQyeMB8GA1UdIwQYMBaAFLXgvjxPc/hSv/NTVTcD
fK5IKk76MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NDbXdzVEgzZ3F0UUdI
d2VWRGtWVjV6RXdRS1JkUHZVQWNEYWpBUXQ5V1JmLzEvQjVFMEJFM0M0RjczRjg1
MkJGRjM1MzU1MzcwMzdDQUU0ODJBNEVGQS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9CNUUwQkUzQzRGNzNGODUyQkZGMzUzNTUzNzAzN0NBRTQ4MkE0
RUZBLmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9DQ213c1RIM2dxdFFHSHdlVkRr
VlY1ekV3UUtSZFB2VUFjRGFqQVF0OVdSZi8xLzMyMzgzMDM0M2EzMjM1NjYzMDNh
MzQzMDMwMzAzYTNhMmYzMzM0MmQzMzM0MjAzZDNlMjAzMjM2MzQzMzMxMzEucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgYoBCXwQDANBgkqhkiG9w0BAQsFAAOCAQEAk3NcCSgsgefmZ4Myi+pB
zditaWiXIqNy1h5Uc67WQtk0ZEEcN/crWB5ZwENDOfCDqaoCXfgSbtbXaBZ5BjSl
6V9JtSN3zOGhlGmqe/Y5O8bK910gRPsCC8vQaIklospAa7v3GHZUbHNLf0D4qWnr
ybgTQgaWxVACkkBxT4VjtW2UT7ANMQbMZLWjibcI6RJ66/4wJ7+t6FZE3Y/iSNoz
mtLIOc0xiwkk3iOhXaEl4uss8ywfrUj04wPSy8wiuQxKzq+5es1YjGoVyarRP/aK
7VCvAji0+s4BvJri2mD6tsj6oN6S8McVSH4JdVwmg+uG3nl+QapLdUhgMPogWrqG
nw==
-----END CERTIFICATE-----
Generated at Sun Apr 6 23:35:17 2025 by rpki-client