Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/323830343a373463303a333a3a2f34382d3438203d3e20323731303031.roa
File:                     323830343a373463303a333a3a2f34382d3438203d3e20323731303031.roa (raw, json)
Hash identifier:          xIOiY5AbK/u+wde+uFpEZOCisWtyE49NnGfSjfUWESA=
Subject key identifier:   F0:F3:0E:AA:CB:AC:3B:07:10:C0:C4:A9:6C:ED:FD:59:55:13:BB:C5
Certificate issuer:       /CN=B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81
Certificate serial:       305DDF20BCAE93FB964168BD2D5A6F6CB2CC32E8
Authority key identifier: B6:C5:FB:85:7E:69:A9:04:49:73:FA:30:62:AA:1D:6F:BF:5C:4A:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/323830343a373463303a333a3a2f34382d3438203d3e20323731303031.roa
Signing time:             Thu 06 Mar 2025 02:14:51 +0000
ROA not before:           Thu 06 Mar 2025 02:09:51 +0000
ROA not after:            Thu 05 Mar 2026 02:14:51 +0000
asID:                     271001
IP address blocks:        2804:74c0:3::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:5d:df:20:bc:ae:93:fb:96:41:68:bd:2d:5a:6f:6c:b2:cc:32:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81
        Validity
            Not Before: Mar  6 02:09:51 2025 GMT
            Not After : Mar  5 02:14:51 2026 GMT
        Subject: CN=F0F30EAACBAC3B0710C0C4A96CEDFD595513BBC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f6:5d:1c:ac:53:68:a9:7d:86:03:0a:fb:75:
                    66:8f:0a:88:e9:11:e5:99:3d:5e:86:16:96:b9:a7:
                    14:2e:77:90:17:4a:f4:02:52:8f:fd:7c:c8:4f:ba:
                    e2:60:d1:01:f7:cd:10:09:46:17:07:da:10:ef:be:
                    da:7c:9c:16:4f:60:4e:12:bc:88:50:9c:34:62:e8:
                    d9:90:3d:8f:88:2e:fa:f3:e1:48:d9:dc:7c:8a:a1:
                    22:78:a6:ea:4a:a6:35:6f:cb:ce:6a:60:93:61:69:
                    a6:b6:7e:3c:7e:06:66:f1:c7:68:a8:e0:09:a8:ee:
                    13:c3:5b:85:a5:d6:d7:95:61:df:28:45:5a:d5:37:
                    d3:55:0d:35:39:17:4c:ed:c5:a4:48:66:07:6d:5f:
                    f3:31:54:c6:f7:2c:74:ac:20:45:33:33:c5:cd:8e:
                    45:2c:47:3b:3a:4a:31:cd:d0:b5:98:94:01:13:7d:
                    db:33:1a:97:2f:19:66:a8:7e:b9:b9:4f:2f:ae:04:
                    ef:c2:e1:99:08:1a:53:42:62:af:66:72:53:27:39:
                    02:a8:a1:2d:5f:9d:13:b2:4e:26:f0:d8:b9:ce:d9:
                    bd:4a:45:3b:1b:a7:59:94:90:49:df:75:94:2d:94:
                    2d:17:92:16:18:b6:22:1c:a8:71:31:4d:88:54:cc:
                    85:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:F3:0E:AA:CB:AC:3B:07:10:C0:C4:A9:6C:ED:FD:59:55:13:BB:C5
            X509v3 Authority Key Identifier:
                keyid:B6:C5:FB:85:7E:69:A9:04:49:73:FA:30:62:AA:1D:6F:BF:5C:4A:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/323830343a373463303a333a3a2f34382d3438203d3e20323731303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74c0:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:f3:dc:29:b1:e9:54:69:ed:bf:96:08:fe:44:ff:a7:4e:7e:
         f9:da:a0:64:ac:42:78:62:1c:aa:4e:1e:c0:d1:58:66:40:3b:
         aa:58:ba:a6:23:71:37:f0:5e:ac:3c:84:82:af:8e:e9:26:37:
         31:b5:4e:a2:55:da:a1:02:3f:29:4a:bd:fc:47:0b:e3:d1:1a:
         fb:b1:03:8d:87:19:d0:cc:29:15:fe:f4:27:ca:ac:85:9e:ff:
         0f:de:53:9b:b4:66:ff:27:67:6a:40:4d:2f:13:ec:db:d7:5f:
         59:88:ef:5c:b5:6a:d0:7f:20:d7:5d:1a:ee:fd:16:df:67:b2:
         e0:62:b6:47:2d:18:d0:93:fc:e5:97:85:ff:30:cb:2b:54:47:
         4b:b5:ef:6d:ea:67:bf:0f:48:03:a3:2f:46:02:36:93:f7:8f:
         8e:49:57:34:10:0d:52:96:be:0f:85:47:a6:f9:64:e4:ac:68:
         e7:e3:52:c5:fc:18:10:10:0e:6a:f1:ac:a9:55:ef:5a:bf:b8:
         51:d7:e5:ba:a2:f3:70:42:8f:12:66:1f:e5:88:e1:f8:0b:98:
         9a:bb:36:96:91:f2:7f:6c:5b:52:5e:d8:1f:cd:bf:f5:2d:d1:
         74:e0:5e:10:fc:40:4f:3b:b9:87:35:c9:49:71:9c:b4:9a:d4:
         28:1c:dc:65
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUMF3fILyuk/uWQWi9LVpvbLLMMugwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjZDNUZCODU3RTY5QTkwNDQ5NzNGQTMwNjJBQTFENkZC
RjVDNEE4MTAeFw0yNTAzMDYwMjA5NTFaFw0yNjAzMDUwMjE0NTFaMDMxMTAvBgNV
BAMTKEYwRjMwRUFBQ0JBQzNCMDcxMEMwQzRBOTZDRURGRDU5NTUxM0JCQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL9l0crFNoqX2GAwr7dWaPCojp
EeWZPV6GFpa5pxQud5AXSvQCUo/9fMhPuuJg0QH3zRAJRhcH2hDvvtp8nBZPYE4S
vIhQnDRi6NmQPY+ILvrz4UjZ3HyKoSJ4pupKpjVvy85qYJNhaaa2fjx+Bmbxx2io
4Amo7hPDW4Wl1teVYd8oRVrVN9NVDTU5F0ztxaRIZgdtX/MxVMb3LHSsIEUzM8XN
jkUsRzs6SjHN0LWYlAETfdszGpcvGWaofrm5Ty+uBO/C4ZkIGlNCYq9mclMnOQKo
oS1fnROyTibw2LnO2b1KRTsbp1mUkEnfdZQtlC0XkhYYtiIcqHExTYhUzIWFAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQU8PMOqsusOwcQwMSpbO39WVUTu8UwHwYDVR0j
BBgwFoAUtsX7hX5pqQRJc/owYqodb79cSoEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1o1dWN2NzIxZDRmRGJxQXVFMVVtOFpuUWo4cGFwYUo1MUhTUnBIeGlX
RFUvMS9CNkM1RkI4NTdFNjlBOTA0NDk3M0ZBMzA2MkFBMUQ2RkJGNUM0QTgxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I2QzVGQjg1N0U2OUE5MDQ0
OTczRkEzMDYyQUExRDZGQkY1QzRBODEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NaNXVjdjcyMWQ0ZkRicUF1RTFVbThablFqOHBhcGFKNTFIU1JwSHhpV0RVLzEv
MzIzODMwMzQzYTM3MzQ2MzMwM2EzMzNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMy
MzczMTMwMzAzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEdMAAAzANBgkqhkiG9w0BAQsFAAOCAQEA
HfPcKbHpVGntv5YI/kT/p05++dqgZKxCeGIcqk4ewNFYZkA7qli6piNxN/BerDyE
gq+O6SY3MbVOolXaoQI/KUq9/EcL49Ea+7EDjYcZ0MwpFf70J8qshZ7/D95Tm7Rm
/ydnakBNLxPs29dfWYjvXLVq0H8g110a7v0W32ey4GK2Ry0Y0JP85ZeF/zDLK1RH
S7Xvbepnvw9IA6MvRgI2k/ePjklXNBANUpa+D4VHpvlk5Kxo5+NSxfwYEBAOavGs
qVXvWr+4UdfluqLzcEKPEmYf5Yjh+AuYmrs2lpHyf2xbUl7YH82/9S3RdOBeEPxA
Tzu5hzXJSXGctJrUKBzcZQ==
-----END CERTIFICATE-----
Generated at Sun Apr 6 23:37:40 2025 by rpki-client